Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: 0W3V4s7mvv3wZjHCOpHRFGClS4HLfzcDmXLv64iyu3I=
Subject key identifier: 05:42:FF:8C:3E:6F:E8:1A:2F:FD:DC:9C:E3:05:2D:86:45:8A:AF:83
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 019D99D0AC1398EC10E3BDA529073852C1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 10F0
Signing time: Fri 17 Apr 2026 05:01:22 +0000
Manifest this update: Fri 17 Apr 2026 05:01:22 +0000
Manifest next update: Sat 18 Apr 2026 05:01:22 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: 3sXHdHtYL6NmsnzqM596ieblkpO8f0L4RxXCDtW7IWA=)
2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ac:13:98:ec:10:e3:bd:a5:29:07:38:52:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Apr 17 05:01:22 2026 GMT
Not After : Apr 18 05:01:22 2026 GMT
Subject: CN=0542ff8c3e6fe81a2ffddc9ce3052d86458aaf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:80:eb:87:09:e7:08:db:15:b4:71:7b:37:
12:ff:75:6a:f0:27:3b:1f:61:d3:e8:e6:01:b2:f5:
e3:7c:6b:0b:50:e4:27:d9:64:79:8c:72:f2:a7:47:
01:45:fd:40:59:46:78:91:77:d4:91:41:0e:d8:b1:
38:22:8b:8c:cc:c8:18:db:ef:46:d1:c6:b9:26:93:
c5:5c:d4:16:f9:a6:9a:1b:33:01:a8:90:a1:cf:b6:
c7:db:52:1b:17:d6:ec:39:68:e6:41:ed:6e:c1:d8:
72:dd:d4:d0:92:f2:9e:03:fb:1f:ee:c8:10:2b:cb:
f1:cd:23:a7:bc:2e:15:8f:03:38:24:c1:ef:15:fb:
a7:99:e7:ea:0c:f0:88:fd:1e:2f:91:bd:f7:12:29:
16:95:29:87:eb:6f:c5:41:0f:69:9d:53:a8:3a:b5:
d6:83:31:6b:a6:94:76:bd:56:ea:92:39:09:c5:9f:
d5:6f:da:33:de:82:65:f9:4c:db:7f:96:69:00:06:
de:a6:e9:62:0a:06:7b:a8:b8:b8:3e:3b:e3:80:5e:
a8:09:8a:4f:93:18:b6:f7:c5:cb:3b:2a:bf:a2:c7:
54:5f:64:fe:cd:72:e6:14:38:36:62:52:a9:eb:a1:
d7:ee:4b:41:2e:03:0d:7c:50:ca:1d:d4:fe:4d:c2:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:FF:8C:3E:6F:E8:1A:2F:FD:DC:9C:E3:05:2D:86:45:8A:AF:83
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ea:80:f9:5a:45:82:ff:fa:fa:d1:8c:b0:4c:f2:1e:67:4e:
91:c2:4c:49:33:84:61:13:78:cc:04:6f:c3:6a:a1:71:73:40:
36:43:dc:01:56:12:77:6b:9b:8c:4e:ff:63:a5:15:24:03:a9:
16:4f:0f:17:50:1e:b9:75:25:1e:db:01:22:0d:a7:de:95:4a:
96:25:b3:1b:d2:b2:cf:3e:ad:bf:28:ea:77:f2:4b:30:d0:5e:
6b:57:0d:8f:83:87:1b:b7:d7:f5:f9:63:7e:db:6a:9e:2d:0f:
5a:a1:52:97:e4:22:b6:01:01:a7:26:39:e4:20:e2:77:07:19:
9f:09:21:29:8b:88:8d:d7:91:08:a0:e9:f3:fe:f2:2e:8d:55:
af:62:29:35:fd:29:e9:ea:c6:12:de:bb:1c:dd:05:88:1b:7d:
67:e7:0b:02:ba:19:ff:99:0c:85:44:4e:12:2e:bd:4c:c9:d6:
6e:cd:91:26:29:3d:3c:d1:1b:d5:29:da:f0:51:53:3d:97:27:
77:2c:ac:a4:a1:96:02:f7:ef:ef:95:79:96:3c:e1:49:43:d0:
63:b6:6e:f3:35:54:f6:27:7c:e3:f6:9f:b7:b4:4b:0e:64:bb:
44:87:0e:57:f2:89:b4:37:a2:46:aa:fd:e3:74:08:4a:0e:a8:
a1:91:c1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:08 2026 by rpki-client