Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: oWx7DgbBGh57+bLUWj7UWhk9S6G049UHDFcGA3/V4mQ=
Subject key identifier: C8:32:17:39:02:17:52:C2:CF:6A:5C:1F:4A:2F:26:70:BF:34:1D:30
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 019FA7BD40FE142C53C9DCC40A0F4B71CAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 0540
Signing time: Tue 28 Jul 2026 08:00:25 +0000
Manifest this update: Tue 28 Jul 2026 08:00:25 +0000
Manifest next update: Wed 29 Jul 2026 08:00:25 +0000
Files and hashes: 1: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: DGJfUoq8Ef3+y4OObQqM0nczlJffGVqJxzP5QAlsjZs=)
2: _UJDxh9rYkUlgNW-nJfPDms9qbE.asa (hash: /qi/AhdyNiL+vJoRDKU2mJ5839ZWh3+RI/SKU6zPg90=)
3: bYFNWMi4DStmMjoV0tL6j97Khao.roa (hash: 2j9NKfwDUmD4G/qj7URDaF2T8o11L7u7ZgoHRPOGxcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:40:fe:14:2c:53:c9:dc:c4:0a:0f:4b:71:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Jul 28 08:00:25 2026 GMT
Not After : Jul 29 08:00:25 2026 GMT
Subject: CN=c8321739021752c2cf6a5c1f4a2f2670bf341d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:c4:8f:92:50:16:f9:0a:b5:97:1b:a9:fd:
74:10:1a:45:d0:70:e7:30:1e:d4:25:c5:25:13:c4:
f4:96:06:a0:99:e3:89:8e:6e:36:22:4c:8a:9b:31:
fd:6f:8c:3f:bd:ae:24:27:1a:76:7b:22:32:27:18:
03:a5:51:a6:dd:f4:75:4a:c0:0e:ef:71:85:ee:6b:
bc:51:fd:c7:64:58:e5:e4:dc:75:ba:95:ee:a5:c7:
97:c5:78:87:eb:ed:c3:13:b1:f0:26:55:5a:76:88:
58:90:44:31:c1:a7:a8:18:81:dc:fb:65:89:71:bd:
14:78:8e:fb:91:49:be:52:68:60:c1:5f:ee:30:f2:
2b:b6:5a:e6:b0:f4:78:3d:7f:94:89:d7:fd:3c:c6:
f7:7f:c3:39:2f:a1:56:38:08:4f:3c:ab:37:2e:3c:
f0:2f:fe:3c:de:92:dd:36:bf:18:2d:ce:fa:99:53:
56:30:8e:19:36:9c:1a:12:98:44:2f:62:f1:2e:be:
5c:cc:c7:5c:35:01:d0:54:89:9d:fd:c8:63:67:96:
92:75:24:b8:1c:d3:ec:b7:e0:11:ed:3c:de:1c:8c:
4e:bc:24:cf:7a:b3:a1:59:02:70:bc:e3:db:a2:94:
54:1d:a0:a7:04:47:55:c3:f7:6f:81:d3:88:e5:d4:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:32:17:39:02:17:52:C2:CF:6A:5C:1F:4A:2F:26:70:BF:34:1D:30
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:40:4d:df:63:f8:bf:ad:aa:11:22:f5:3a:36:30:f2:c3:8c:
66:d0:fd:4d:df:c0:7a:90:b6:c9:7a:f8:72:64:21:53:95:6b:
c9:4c:7d:56:a7:e2:83:1f:fe:09:ab:d3:63:31:6f:54:c8:b8:
4e:15:65:47:1e:c5:3e:5f:77:1d:e2:18:8a:0f:5f:9c:91:5c:
76:f2:95:94:29:9e:86:c1:45:bb:7f:9c:0d:7b:df:68:63:92:
e6:04:be:3c:40:1d:fc:a7:a6:f9:e5:f3:b8:c1:0f:98:0f:95:
69:a2:3f:3c:ac:de:d3:be:a5:69:5d:61:84:80:1e:ec:97:70:
47:8f:a3:22:d5:8c:c7:14:09:32:8a:46:cd:c0:a8:41:b4:e4:
76:db:55:14:46:3e:6b:57:67:b2:e6:5a:62:31:0e:20:59:35:
9e:2c:0c:23:02:60:9f:86:91:f9:76:a4:7a:91:03:3c:e2:97:
82:bf:df:6e:38:77:fc:ae:11:6f:28:f4:56:71:b8:cf:fe:60:
ea:7e:23:1d:a5:3f:40:9b:d8:09:b2:b1:c1:4b:20:1b:1b:db:
af:11:56:7d:dd:bd:fe:dd:a3:52:a1:37:f1:59:06:42:90:46:
9c:44:c6:d7:b0:ce:53:0d:5f:7d:d9:2d:ef:f3:4b:65:29:38:
76:ba:9a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:28 2026 by rpki-client