Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: Obm2V3rnCcHxBQeb5c8EYMcTj46i8q4uqOWRpfbSF40=
Subject key identifier: 8D:1A:5C:27:00:A1:BB:E1:0B:3D:3A:36:D7:B9:6F:0C:CE:36:CD:7C
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 019CADC7C1D9C90C5DF15BE5768510786D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 1557
Signing time: Mon 02 Mar 2026 09:01:15 +0000
Manifest this update: Mon 02 Mar 2026 09:01:15 +0000
Manifest next update: Tue 03 Mar 2026 09:01:15 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: p1iCIsJAjG/Rf/yvcMxAEGAEzZ0p5ycFJWLa8S3KixE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:c1:d9:c9:0c:5d:f1:5b:e5:76:85:10:78:6d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Mar 2 09:01:15 2026 GMT
Not After : Mar 3 09:01:15 2026 GMT
Subject: CN=8d1a5c2700a1bbe10b3d3a36d7b96f0cce36cd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:6d:b5:09:b2:f6:ca:cb:5a:8e:1f:ea:3e:
43:9e:18:40:d6:80:92:38:73:6e:30:95:05:41:f7:
5b:11:75:23:34:54:b2:22:a4:b6:e6:73:47:04:bf:
8e:16:2e:a9:7e:23:27:10:19:9a:64:e9:ad:27:85:
10:47:a7:9d:0c:ed:81:9c:1f:a0:72:16:2f:ed:23:
9c:96:33:e6:b3:d1:5d:95:ef:b0:b6:c6:f4:88:f5:
2f:ad:03:40:97:28:38:c4:6a:11:97:5f:7d:54:66:
96:56:f0:e3:69:72:c8:43:85:15:9b:f0:e8:92:93:
b1:d7:1a:4c:d1:53:c2:6c:be:e4:cf:53:b5:10:b7:
95:40:b8:19:cc:9f:1c:af:4b:dc:10:a5:65:74:21:
df:f3:2d:45:88:ed:4d:c2:2f:09:00:c1:2a:25:5d:
73:78:4d:5e:0d:25:b8:b1:f9:c6:0a:bf:d2:e4:ca:
81:7c:6d:d3:04:5a:83:e7:f6:bb:66:5b:3d:cb:86:
5f:e7:82:7c:f9:d8:dd:e6:8f:03:92:05:e4:fd:23:
58:a8:a5:b7:00:59:73:0b:12:bd:2f:af:d0:cc:23:
25:da:37:50:c2:ab:4a:ca:b3:b4:4d:c1:66:b4:68:
19:a9:b5:30:52:4a:65:dd:f4:3a:f9:33:a7:e1:18:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:5C:27:00:A1:BB:E1:0B:3D:3A:36:D7:B9:6F:0C:CE:36:CD:7C
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7f:f5:46:9a:b3:1b:88:46:6a:d2:6c:f4:cf:36:40:9d:f2:
c9:c8:33:6d:2f:91:3e:e3:f9:ee:35:4a:81:76:0b:7f:34:16:
24:80:99:32:5e:d4:7e:09:c1:b1:25:e1:7a:97:1d:bd:78:51:
af:7f:4b:ac:8f:04:7d:a1:6d:0f:9d:1a:6b:2b:9f:87:cf:f1:
33:b2:1c:26:8f:5d:a3:b4:65:d6:b3:a9:e1:3d:80:98:d1:9c:
47:fd:b1:83:2d:b7:16:1c:f2:3b:07:ad:89:08:48:7f:0a:35:
de:27:3c:a1:47:97:6d:92:dc:f7:fb:95:df:0d:c0:e9:11:12:
ef:5a:13:5b:bb:0d:a2:be:d4:50:1a:db:e3:9d:db:1f:d7:93:
d1:8f:4b:e7:d5:b3:f6:d3:ed:4e:ca:9a:00:a0:bb:1a:8c:d1:
4b:e5:d2:60:9a:ef:2b:e9:3b:5f:34:45:58:00:65:fe:ad:93:
82:6e:50:50:4b:e8:64:63:b5:1b:0f:29:81:e5:ed:85:b7:62:
63:ef:23:fb:5d:30:63:47:17:a9:01:8a:d5:20:1a:fe:d2:a9:
f2:f3:2f:a7:0e:fe:29:7a:69:d4:80:84:b5:1f:f8:fb:b6:57:
b9:de:bd:0b:fd:f9:32:6f:45:2f:b7:9a:f2:9f:93:e7:39:25:
66:0b:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:14 2026 by rpki-client