Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: RX4rb2sCEsCWGMKZzsQECJdpIqzkppwXB7lR+B4z8R4=
Subject key identifier: 81:99:DC:7E:D2:84:A7:57:31:91:96:CE:3E:70:08:26:90:1E:8E:66
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 019CAAFCEDB2A981591AA5B58252773D8D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 1193
Signing time: Sun 01 Mar 2026 20:00:28 +0000
Manifest this update: Sun 01 Mar 2026 20:00:28 +0000
Manifest next update: Mon 02 Mar 2026 20:00:28 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: HHoN6ljwhNNyp172arsHzshaa+LggusOHI0MHc99m6I=)
2: fgkPvFZ2_f_B8Kes99MALTJ_h0M.roa (hash: he1XePUMYZj0hBporE6i0fgZ6VJq2FNLflajrVKGWrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ed:b2:a9:81:59:1a:a5:b5:82:52:77:3d:8d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Mar 1 20:00:28 2026 GMT
Not After : Mar 2 20:00:28 2026 GMT
Subject: CN=8199dc7ed284a757319196ce3e700826901e8e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:9c:8a:8d:8f:f1:34:2c:c2:cc:95:35:a2:
96:e9:1c:79:28:a1:1f:58:16:90:90:fe:d4:23:46:
0e:a9:86:42:c6:b3:4a:21:75:08:5a:68:a8:a7:bd:
90:36:f2:1a:0d:9e:1d:ec:fa:93:12:d0:e9:16:c4:
37:1d:cf:6e:ba:e3:a5:cc:50:0b:42:08:2c:24:8a:
fc:75:cf:b0:f2:e8:c0:2c:93:95:fa:75:6e:92:ef:
91:ab:8c:dd:10:ac:d1:78:9f:cd:e4:17:1a:c2:62:
cf:cc:70:92:50:3c:a1:21:98:04:4f:ae:6f:00:fb:
a3:e8:2c:5d:3f:7d:8a:bb:89:e2:99:12:48:f1:e1:
56:dd:60:84:9d:5c:bf:cc:70:5e:a8:d9:15:97:c2:
44:3b:be:fe:bb:48:3c:21:06:bb:37:7f:6b:9b:6c:
c8:0a:d2:66:fb:8c:b1:90:c1:6f:10:f8:ae:32:6b:
c1:22:38:a9:d0:6a:95:6c:a4:af:ed:b3:b6:35:41:
4e:e0:64:6c:ef:85:14:ae:7b:a4:d9:ac:e9:33:36:
61:d6:e7:33:0f:55:6c:ff:f8:b4:6f:b0:ef:d0:80:
e7:86:59:2b:81:a9:00:6c:ed:fe:61:fc:0e:ca:b6:
73:c0:f2:ef:6e:39:2b:cf:95:8c:2f:9e:55:19:6f:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:DC:7E:D2:84:A7:57:31:91:96:CE:3E:70:08:26:90:1E:8E:66
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0e:23:ea:6d:ec:88:55:02:0a:b4:57:03:0e:50:15:55:b0:
bd:11:9a:40:4b:af:a0:7d:f5:8f:72:7d:79:6c:79:74:02:97:
a6:e6:3c:24:8e:09:e4:34:ca:3b:71:f5:0f:ff:ee:a6:87:63:
1e:94:8b:00:55:fb:81:e8:82:df:f4:9e:19:6b:a7:a1:48:28:
f1:a7:cc:8a:89:b8:22:16:b3:a2:24:0a:ea:f0:5b:5c:0c:81:
2c:d6:aa:e5:76:4d:71:59:3a:7b:bd:b1:d7:52:90:0f:c3:f6:
23:99:90:58:1e:c7:48:8c:e1:5e:8f:bc:25:64:70:0a:c3:e4:
4d:b8:22:99:28:5a:42:4b:96:f0:07:cf:cf:c4:69:22:f5:e3:
78:84:b4:75:a1:24:e9:06:ea:db:fd:b8:7e:13:9e:23:a0:22:
ce:a8:43:7c:c1:b8:c5:95:76:46:60:df:bf:ab:ab:6d:74:e2:
56:00:2b:79:7f:b3:0f:0b:7d:62:8d:ab:d3:a9:2f:44:20:96:
15:be:f5:90:2e:3c:35:26:9a:14:3d:0a:57:02:e6:58:ee:a3:
15:13:cc:d9:2a:00:b6:6e:1e:1f:4f:ca:1f:06:80:04:48:93:
e1:5e:d7:92:c0:b5:0c:90:46:bc:28:cf:27:7f:e5:16:ca:3d:
5c:63:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:08 2026 by rpki-client