Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: CLCaUoZDFL9RhrV67FzcrUvLZeElLQc85vj+n8bWyHo=
Subject key identifier: 34:9C:CC:E2:62:3E:B3:06:54:3C:07:AE:48:7F:6A:1B:AF:1E:E3:D6
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 019CAD907B68D2D8394A51E166BCC3C2257C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 0459
Signing time: Mon 02 Mar 2026 08:00:53 +0000
Manifest this update: Mon 02 Mar 2026 08:00:53 +0000
Manifest next update: Tue 03 Mar 2026 08:00:53 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: gg5K9o7MIvwub2AZ4k2nreRnCwOkhIE92IsM62WdVzc=)
2: fph5gTuLwd2OWoh3SrvtX0TJ1jU.roa (hash: SKuyO2n0G10edipOcdvCUjjKqC8VGVks6CgzeewLwB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7b:68:d2:d8:39:4a:51:e1:66:bc:c3:c2:25:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Mar 2 08:00:53 2026 GMT
Not After : Mar 3 08:00:53 2026 GMT
Subject: CN=349ccce2623eb306543c07ae487f6a1baf1ee3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:d1:c5:d2:94:dd:17:06:24:2f:54:22:cc:
44:3a:36:51:aa:b3:2e:29:1e:69:d3:07:8c:50:e0:
56:a7:a4:7e:fc:1e:a6:a7:da:27:27:6e:30:21:b3:
9d:4e:8f:f7:aa:fd:f2:82:38:17:a7:d9:ec:92:67:
e0:8e:3d:8d:be:b6:6a:90:f7:5f:bc:05:03:98:76:
09:66:09:5c:8b:4f:fd:e5:9c:9a:26:bf:8f:12:90:
bc:b1:7b:20:c8:3c:f8:14:09:fa:da:1f:28:ba:de:
18:bd:ac:58:6d:7a:b9:e3:22:97:29:a5:f4:50:11:
46:d6:e6:8d:66:b4:3c:51:34:0e:67:cc:dd:e0:03:
74:81:8a:0e:77:a1:b7:8b:cc:85:f7:6e:e4:9e:f9:
4f:8d:13:58:db:15:0c:be:cc:05:b3:5a:ce:db:da:
c8:9a:4a:c1:45:10:d7:dd:c3:2a:c5:c4:33:0f:a3:
bc:5d:f8:bf:74:8d:0f:09:72:93:62:22:72:6a:3b:
64:55:09:48:3d:3c:d5:5a:b6:04:4e:00:73:15:87:
09:9c:f0:6b:b3:65:98:f6:aa:ca:53:a1:ff:45:1e:
02:39:c6:34:ed:bf:c8:bf:d9:15:c5:13:e9:b9:17:
36:07:76:2b:f4:7c:37:c3:f8:91:96:92:87:ad:33:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:CC:E2:62:3E:B3:06:54:3C:07:AE:48:7F:6A:1B:AF:1E:E3:D6
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:13:44:03:36:65:d9:aa:e7:b5:23:c4:a6:45:89:64:31:26:
14:0c:b2:c6:fd:21:ee:cd:7a:0c:94:46:8c:de:e6:0d:a9:a1:
20:2e:bb:98:f9:70:77:a4:6c:d3:5a:00:5d:7d:87:07:0c:73:
54:45:d0:25:ca:d3:ea:9f:77:f9:f9:f7:26:12:25:96:e8:7b:
b6:75:df:28:ac:6e:84:97:d1:c8:ea:7d:97:ff:62:ef:11:03:
06:6d:b1:b0:10:78:0b:fd:73:ba:3f:75:26:ab:a6:8e:34:40:
86:79:42:0c:df:fc:d7:2b:ec:4e:7f:27:1e:f7:a3:0e:e4:32:
a4:bf:4c:9b:62:d7:a0:99:72:83:31:fd:b3:cc:10:b0:9b:26:
c1:df:3a:35:68:53:fb:77:3b:bb:89:29:aa:7a:c0:43:0e:1c:
56:4d:be:95:82:2f:9d:30:d0:d7:aa:de:b6:97:15:97:99:08:
b0:39:77:9a:17:63:91:1d:86:4b:04:e0:5e:07:7c:e5:a1:d5:
77:8f:db:d9:3b:f3:08:21:22:a3:83:c9:fa:04:da:67:06:f1:
c3:04:10:8f:f7:82:db:03:59:00:e6:f2:43:28:ed:8e:15:f8:
33:e7:e9:19:e3:09:91:30:9a:4d:2c:a6:6a:39:94:8c:95:ad:
ce:4a:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:30:21 2026 by rpki-client