Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: xXn5qtNBO3BtnodbZtKDVPXpAejBKBcW+TtZfeh/gXM=
Subject key identifier: 0B:5A:29:19:70:88:2D:92:34:AE:1B:DC:77:56:8D:87:5E:57:D1:06
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 019D98F53EB2BEF5FB9D51512428BE1DAC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0D37
Signing time: Fri 17 Apr 2026 01:01:42 +0000
Manifest this update: Fri 17 Apr 2026 01:01:42 +0000
Manifest next update: Sat 18 Apr 2026 01:01:42 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: RFS5vHAR1YYfHZ15AXSLgrPR24SclfAAbvwVcQotdFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:3e:b2:be:f5:fb:9d:51:51:24:28:be:1d:ac:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Apr 17 01:01:42 2026 GMT
Not After : Apr 18 01:01:42 2026 GMT
Subject: CN=0b5a291970882d9234ae1bdc77568d875e57d106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:df:e2:54:4f:b9:57:ea:9d:98:83:11:a0:
5e:f5:25:e6:8c:47:0b:92:3b:f1:39:0e:9d:03:a7:
02:c2:db:94:a1:0f:08:24:cc:39:5d:f6:c8:1e:c4:
91:a9:dd:09:8f:26:05:40:6c:e4:59:0d:ec:31:f6:
20:b4:dd:58:11:4c:c0:34:00:55:97:f6:dd:7f:13:
ac:fe:e0:f5:97:a6:9a:44:04:d5:9a:e2:36:87:09:
99:48:6e:1c:f8:82:d1:40:4f:81:ba:31:30:4b:88:
54:ce:29:a3:77:b9:ae:40:23:e3:83:32:91:7b:58:
fe:bd:03:bb:16:d3:86:a5:bc:10:62:5a:5a:09:23:
bf:0e:61:17:4f:03:f2:c8:f0:0f:1f:7e:a8:48:6b:
73:f2:63:10:dd:a6:76:c6:c0:c7:bd:70:c1:f4:fc:
96:eb:fa:88:e9:24:54:fe:33:a3:e4:43:cd:2e:ad:
26:df:3c:ad:33:d1:28:32:bc:4c:c4:98:b2:b4:65:
84:73:2b:f4:58:a2:2e:34:10:f1:3f:22:b3:f9:f7:
c2:d7:2f:23:63:97:53:e4:b0:0e:58:80:77:6a:e8:
ee:5e:a8:1b:a7:5a:f3:3d:2d:49:08:5b:09:3e:b5:
7d:03:fb:26:11:1a:73:ea:cb:b7:d1:5d:84:08:82:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:29:19:70:88:2D:92:34:AE:1B:DC:77:56:8D:87:5E:57:D1:06
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:79:f1:0a:74:f3:a9:da:c5:8a:c9:d1:b0:a7:3e:8b:9a:
07:5e:5c:9a:22:de:e5:1a:e7:66:4a:93:5c:f4:55:21:c3:73:
4d:f3:63:e7:13:18:73:6a:97:4c:75:02:97:b1:65:48:cf:0f:
63:5e:8e:fe:d9:08:7e:76:d5:a3:86:39:5d:a0:7f:86:bc:e6:
c3:a5:ad:3a:3c:08:db:36:93:a7:46:a1:22:fd:31:ad:5d:b6:
b2:4e:d6:4d:b0:99:85:bb:cf:6f:d6:d2:fe:9f:3a:8f:84:64:
34:63:4f:36:36:79:a6:53:84:f0:53:d5:1b:38:c8:c0:f9:f2:
f6:f4:93:04:4f:d9:b2:02:a5:4a:e0:f7:e8:62:fa:5b:e2:c2:
ab:57:4d:c8:62:3a:90:a6:19:a2:22:5f:71:ad:03:e3:bc:d7:
06:8b:8c:0c:75:3d:83:99:3f:fb:1e:38:fc:f6:32:f1:b1:41:
4a:1a:2c:ae:6c:e5:a2:0c:12:b5:f6:5f:c2:f7:e4:4e:63:98:
7e:3b:06:a8:4e:b7:15:a0:68:72:c0:bb:1a:b4:3c:14:ee:83:
c6:a5:47:6b:73:b4:cc:72:40:14:7c:7f:80:5d:52:b0:ab:97:
4d:2d:eb:ba:8e:5c:fc:9c:ca:89:48:9b:d2:ae:c4:ab:db:3c:
64:fe:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:48 2026 by rpki-client