Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: dIUw+n3FPfsv4Jp6WNMXHpbv43/pOiNFnM/0MewmvEY=
Subject key identifier: 5D:4E:D7:21:37:80:E1:69:94:A0:08:83:C7:7E:BB:29:10:92:87:28
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 019CAAC608EF49F8C58C425702100A43841B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: UYNkKYVc0GLzUioAU+XB0CacTLWRhTYIaeVXfnT/LJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:08:ef:49:f8:c5:8c:42:57:02:10:0a:43:84:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=5d4ed7213780e16994a00883c77ebb2910928728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:32:e7:13:d6:18:37:41:d8:d3:53:44:ea:
14:ed:0d:3f:3f:dc:85:c1:90:c5:d0:3a:42:9e:9d:
66:dc:1d:b2:94:38:03:c1:b5:6c:30:1f:79:3f:e2:
de:38:37:64:42:d4:a4:37:ae:db:b6:48:a4:85:ea:
90:08:51:23:02:f7:3d:8a:8f:64:46:1a:b3:a3:f0:
2b:05:2c:e4:38:56:e0:ba:f0:a6:56:33:a6:13:76:
e3:da:89:36:af:ed:26:48:a5:e2:81:33:c6:d6:88:
a8:39:7a:97:81:d7:28:ed:4f:29:17:8f:a2:a2:c5:
45:8f:69:26:1f:c2:20:8f:bf:fc:3f:d2:77:0f:0e:
e6:a5:38:e8:7a:52:c7:f1:7a:76:19:f5:ad:0c:e3:
51:82:e2:04:f1:78:e7:ab:67:ab:ef:2f:26:24:5c:
41:db:e5:0e:89:fc:0a:54:76:ab:74:e9:a7:e3:6b:
be:ef:7e:7a:5a:d4:d8:d0:7a:75:b9:97:54:b6:75:
74:aa:7c:8a:82:df:19:6d:33:d4:43:8c:6e:b6:7b:
a3:e9:1f:b1:07:25:9f:d9:f6:51:da:90:eb:d2:f6:
e6:64:be:b3:8b:94:d3:9c:d0:21:aa:e0:8d:79:e1:
22:0b:6e:c9:9e:51:58:94:14:ce:bb:3e:ca:b3:21:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4E:D7:21:37:80:E1:69:94:A0:08:83:C7:7E:BB:29:10:92:87:28
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2b:a4:ca:5d:d5:f7:12:23:33:df:3e:ca:a8:7d:e5:8e:1e:
59:3f:94:42:ab:33:1f:c5:fb:6a:d9:7b:86:37:82:e0:8b:5c:
86:08:59:d0:56:86:9d:fe:58:48:49:e2:a8:1a:54:77:bc:a8:
e2:5d:45:d5:b5:95:6d:db:22:b1:2f:ab:f5:cc:5f:61:ee:60:
dd:cd:7f:58:d3:c6:c5:58:b8:4c:77:dd:85:7a:77:38:fd:7a:
92:ce:e0:d0:fc:fc:9b:5c:60:ca:14:53:11:a5:2b:6b:ac:28:
90:ff:a7:44:f5:99:03:a3:85:16:02:e2:c3:9e:f8:b7:26:9a:
58:4f:67:04:45:37:70:14:d1:46:dd:8a:3a:94:07:3d:be:24:
f1:7d:72:8a:b2:a6:35:52:c5:cf:04:2e:13:bb:70:4d:41:ad:
3f:fd:d2:d0:15:7b:97:4b:7b:2c:9a:f8:09:6d:89:b0:d4:87:
49:38:77:6e:d1:29:7d:78:9e:36:0b:63:26:37:7b:eb:ce:a8:
05:7b:75:dc:02:e9:95:7e:53:4f:ec:a3:0a:16:df:89:e9:f0:
d9:57:27:ff:1b:bc:14:ed:88:35:0b:ef:ad:8c:5a:35:67:7c:
0e:73:60:e5:d1:65:a9:66:f3:46:9e:97:0d:e7:9c:d1:50:7f:
b3:e7:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:41 2026 by rpki-client