Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: uRZ4kQno+xbcQiBQcX+5SAkxCo+yQhYmoed1D7hplQQ=
Subject key identifier: EE:26:5F:12:5F:74:7A:CF:88:28:9F:29:CA:95:05:3F:46:AC:99:89
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 019FACE3945020207EC429BC70E7EE40BC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 1203
Signing time: Wed 29 Jul 2026 08:00:23 +0000
Manifest this update: Wed 29 Jul 2026 08:00:23 +0000
Manifest next update: Thu 30 Jul 2026 08:00:23 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: 9xn7C+smBoL63UbdIsVgVLzmq03G4zt+rVulOSFG5+8=)
2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:94:50:20:20:7e:c4:29:bc:70:e7:ee:40:bc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Jul 29 08:00:23 2026 GMT
Not After : Jul 30 08:00:23 2026 GMT
Subject: CN=ee265f125f747acf88289f29ca95053f46ac9989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:d7:cd:ed:65:ab:18:e6:39:c5:47:07:aa:
99:16:74:6b:fc:e1:5a:a2:85:cb:ac:38:06:93:83:
fe:5d:6f:3a:14:48:73:54:20:9c:7d:de:ab:78:c4:
48:8f:58:45:75:36:d7:62:79:b5:93:2d:f8:05:45:
a5:53:e6:69:b3:e9:e5:e5:06:68:37:7d:e2:c5:52:
c3:f8:d0:fc:60:cb:9c:6b:28:b7:14:e4:f5:11:fa:
09:51:ac:33:9e:8c:57:31:b7:95:aa:9e:22:40:24:
9a:fc:4b:38:83:53:0c:d4:5c:38:be:38:d0:09:2a:
16:09:6c:29:3d:c3:45:3c:19:9f:af:bc:e6:1d:d0:
c3:fd:91:f7:7f:ba:02:59:d5:f3:ab:fa:5b:fc:8d:
a3:a1:d8:2b:0a:10:11:b8:13:30:ed:76:f7:1a:9b:
37:89:9e:80:cd:c3:0f:cf:8e:37:63:53:19:bd:dc:
3b:48:c1:84:58:85:65:33:ae:ef:a0:46:cc:35:39:
d5:10:81:a9:da:6e:b7:55:2f:76:77:90:d4:1c:c9:
82:45:2e:ba:f9:dc:2b:9d:c2:02:67:75:2f:40:9a:
69:d0:c3:03:11:17:45:3a:e9:8b:36:54:5c:28:cf:
5c:e9:a1:e3:36:e4:1c:5b:bb:47:54:f7:35:0e:e6:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:5F:12:5F:74:7A:CF:88:28:9F:29:CA:95:05:3F:46:AC:99:89
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f5:0d:34:2b:af:5f:d2:9b:2b:c4:37:d6:bc:2d:d0:43:b6:
28:ff:53:cc:3a:fd:3d:3c:e1:15:d4:f6:a6:8f:3e:58:1c:58:
8d:e5:b9:c8:4a:f7:94:78:f2:2b:fb:d2:5e:2c:49:81:b6:47:
ce:09:66:81:4c:6b:bd:7e:39:f7:b6:5e:91:67:5e:b6:47:8d:
69:b7:39:27:fe:5f:84:12:b3:96:a2:82:a9:c9:7f:14:49:da:
71:8c:dc:bc:fe:98:f2:a9:d3:45:6d:f0:94:fe:93:5b:7b:9d:
c4:c7:80:1d:3c:f6:94:0a:30:fa:8b:16:fe:81:16:90:b4:04:
c4:db:6a:f9:a0:8d:c6:b8:83:63:9d:98:06:b1:66:60:bc:ff:
80:f8:8f:58:29:04:47:61:06:13:ce:18:35:bb:68:e7:93:20:
22:6e:65:e9:27:9b:ba:3c:47:79:c6:e8:db:6c:7d:cd:e8:2e:
06:70:39:e4:a5:bf:b1:34:75:13:cf:59:be:19:27:d1:1f:61:
34:ec:a9:1b:dc:bf:9b:3a:44:e5:b3:80:7b:88:1a:be:d1:40:
d7:8a:d5:e0:e4:15:69:91:01:43:ef:91:64:6f:b8:eb:56:d8:
9e:de:91:4b:d4:1d:2a:6c:e9:b9:5e:2a:f6:57:14:b2:10:36:
00:1f:bc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:47:10 2026 by rpki-client