Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: FgbYo/6Uve0usuJUF7XU6U0JKN4KV+TmBSgiiupsEqM=
Subject key identifier: DF:FC:D2:B7:1D:D4:9E:C7:95:05:6F:A4:6C:C0:5F:AE:FE:EE:F9:CC
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 019CAA587C7BF7C666663CD98E8C9BFA1E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:51 +0000
Manifest this update: Sun 01 Mar 2026 17:00:51 +0000
Manifest next update: Mon 02 Mar 2026 17:00:51 +0000
Files and hashes: 1: PM2xutOtApHOjMCZG4fRaGN19-A.roa (hash: cmOF+MvtNkb0EB47v73B7IdtgsKunZ1G49rR7QDbH58=)
2: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: MU4rdXteGoU1kiEQbGMkjE9RxF3VIdOV1XSLZTx4C/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7c:7b:f7:c6:66:66:3c:d9:8e:8c:9b:fa:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Mar 1 17:00:51 2026 GMT
Not After : Mar 2 17:00:51 2026 GMT
Subject: CN=dffcd2b71dd49ec795056fa46cc05faefeeef9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:05:1e:c8:c1:31:cd:9c:40:f6:58:44:ee:
69:8b:2c:b1:c5:81:90:1a:4c:9c:b3:61:8a:f0:66:
cf:e2:c1:90:46:80:4a:fd:a7:5a:1e:cb:55:fa:91:
3f:bc:82:6f:be:b5:8c:13:47:06:47:d7:6d:c1:bf:
4d:2b:81:82:ba:90:65:9c:a6:8a:81:68:17:cb:25:
fb:c7:50:be:30:88:a7:f5:33:28:a9:b1:81:b6:6e:
ee:5c:21:c0:3f:dd:c0:3d:4e:0d:eb:0c:80:a5:a6:
f4:15:f8:15:98:a1:c7:0a:08:1e:37:df:3a:7f:18:
95:64:90:ab:5d:48:a7:25:ab:9a:3e:79:68:9e:99:
87:a8:06:77:18:d5:5c:46:5f:0b:c5:f8:f6:56:0f:
47:38:32:f1:ec:88:63:d0:74:7a:c1:68:06:bb:dc:
86:c3:a2:06:22:fa:70:91:89:12:72:59:7c:49:a7:
06:b8:84:13:3c:bb:c3:8f:e7:56:c3:ba:e9:03:a8:
8f:f0:02:99:18:83:e8:db:0b:5c:5d:9d:ec:cc:29:
13:48:ce:71:c1:0f:08:71:6c:92:dc:13:fb:a7:de:
3c:7a:0f:b9:9b:05:98:39:e3:af:11:46:74:dc:aa:
8d:6c:a9:95:a1:d2:fa:3d:3c:95:d5:7b:f7:27:a5:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:D2:B7:1D:D4:9E:C7:95:05:6F:A4:6C:C0:5F:AE:FE:EE:F9:CC
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7c:ba:9c:f7:3a:6e:78:a3:38:1e:74:00:d7:07:e1:a7:44:
bc:3e:d1:f6:69:49:67:51:73:fe:11:5b:02:67:d8:24:9a:b2:
a1:c6:12:17:17:b6:82:90:e2:78:17:50:dc:be:14:bd:e2:f2:
1b:32:cc:be:ca:c3:b1:37:58:ae:6c:ae:14:35:9d:7e:6e:8d:
6d:e7:ba:d9:e1:b8:78:dc:9f:da:84:d4:5c:a9:55:d6:cd:89:
b0:2f:9c:07:7e:22:d0:29:d5:50:ad:85:e4:b2:5a:8e:d7:20:
ba:53:dc:fb:bf:2d:61:b1:24:00:fc:da:6a:e1:4f:09:6f:27:
e0:f6:14:2f:31:9c:25:7a:d0:99:71:db:53:12:21:e1:ff:06:
44:7b:85:1a:4d:a4:7d:5a:43:90:13:24:66:3d:2d:c9:f7:14:
61:71:eb:29:30:10:e6:c0:74:b4:c1:1a:c5:de:58:02:0c:45:
76:77:a8:15:93:66:f0:02:10:c4:10:3d:4e:95:9f:4b:4a:1b:
b9:06:7a:7c:da:75:05:4b:d9:58:f0:0a:3c:4b:b5:79:e7:d2:
5a:e7:74:ab:23:de:c5:06:c9:a9:81:d8:5f:b2:30:0c:c2:c7:
ad:79:d5:61:8c:1f:e0:29:2d:a1:43:25:22:6e:9c:f4:74:14:
c3:2b:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:29 2026 by rpki-client