Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: iKiX/5y6naDiY7aqvBIIijVF/fnAQ8YoV4OPqMXWocs=
Subject key identifier: FB:C1:30:1A:67:EF:0C:47:76:2E:35:2C:FA:58:F9:2D:D5:87:36:A3
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 019D9B504A321DDB1704487452D3818AC3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 15D2
Signing time: Fri 17 Apr 2026 12:00:23 +0000
Manifest this update: Fri 17 Apr 2026 12:00:23 +0000
Manifest next update: Sat 18 Apr 2026 12:00:23 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: d7NQ60ISTl50VUxlyfFWUoImDvpvLFnOrNWKrkFy3v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:4a:32:1d:db:17:04:48:74:52:d3:81:8a:c3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Apr 17 12:00:23 2026 GMT
Not After : Apr 18 12:00:23 2026 GMT
Subject: CN=fbc1301a67ef0c47762e352cfa58f92dd58736a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:dc:07:ea:87:fe:01:44:21:bf:9c:5c:f0:
3b:a0:09:c9:76:99:44:ac:d2:8f:0c:ae:f2:79:ac:
9f:0f:8d:24:95:06:65:d9:9c:ee:e1:7d:d5:3e:0f:
8c:a8:dc:7e:07:f9:25:34:14:89:c4:57:b3:49:ff:
ac:6e:1b:90:18:78:9e:78:89:88:f2:09:85:7d:0b:
0f:4f:88:c7:b0:49:20:14:3f:83:72:59:42:ab:76:
61:19:50:6c:0a:bf:49:9d:bc:f8:81:3a:cc:4b:bc:
de:c0:fc:dd:17:04:98:18:53:f7:9b:b9:a1:1e:88:
ee:b8:68:10:84:13:4b:3b:47:01:c8:c7:76:7a:35:
e9:33:34:f6:13:07:4e:6e:f3:fb:c4:19:8d:a9:43:
cd:18:60:13:11:4d:99:0b:44:52:5b:f4:ac:aa:46:
29:da:ff:c9:44:bc:a4:8c:90:fd:1c:be:36:96:3c:
9b:07:ea:b6:1d:2a:20:7f:a9:35:46:f1:b7:bc:ca:
e8:8c:56:d3:84:ec:cf:d8:8d:69:00:d4:13:ab:ab:
89:c1:03:6f:da:ac:2b:b0:3c:3f:99:07:84:39:6f:
bd:9e:8e:12:19:42:2a:77:74:bb:58:84:ea:22:d6:
5a:7b:50:d8:9d:3a:d0:5b:97:41:0a:c3:a7:c3:91:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C1:30:1A:67:EF:0C:47:76:2E:35:2C:FA:58:F9:2D:D5:87:36:A3
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2e:d7:aa:53:36:38:45:48:62:25:d1:ef:a7:c4:06:c8:17:
e6:43:48:86:4f:1d:87:80:35:40:d6:56:e4:57:7c:88:90:d9:
58:cf:32:86:ea:ea:bb:c7:0d:15:2e:6d:c7:5f:f8:bd:d2:ab:
8a:60:51:78:d0:34:34:50:05:05:27:39:2a:f4:f3:f5:aa:b0:
f3:6b:a3:5c:fd:9e:29:74:1c:ae:55:81:fc:66:3d:26:35:37:
f4:fb:7a:37:7b:e8:2c:05:13:22:65:3e:dc:73:e5:62:1f:3b:
70:7d:98:b0:fe:a2:a9:6b:62:60:1b:d4:81:2e:20:d5:ce:79:
9f:98:4d:90:2a:9f:e1:68:84:f9:f2:53:39:0a:83:ef:aa:c8:
19:ce:39:5c:c9:39:45:39:96:84:f8:86:b9:91:c6:32:2b:e7:
ab:f9:87:16:60:49:29:b0:59:81:8f:88:5f:c5:69:71:63:07:
d6:5c:44:23:c4:54:93:0d:ca:90:52:82:b7:df:30:c1:71:34:
41:df:00:c6:ae:9c:78:9e:eb:3a:dc:4c:44:8f:20:74:e1:a8:
6d:62:b0:8a:9b:48:b0:11:f7:ec:78:32:ff:90:a2:7b:bc:6b:
90:8b:77:b3:2b:39:9b:5f:f2:2d:ef:46:fe:82:47:15:9a:8a:
6a:04:a9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:09 2026 by rpki-client