
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File: WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier: 4s9wM+EF9lqIGvok4a57FnISOBAdtZmnUP4YZWJJQFU=
Subject key identifier: E5:D4:F8:81:4D:74:BA:5A:1E:7B:52:E5:DC:04:59:4A:A0:83:0D:52
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer: /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial: 019CAA58FE8C5FEB6F1A79E8CC65F658BD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number: 0CBE
Signing time: Sun 01 Mar 2026 17:01:24 +0000
Manifest this update: Sun 01 Mar 2026 17:01:24 +0000
Manifest next update: Mon 02 Mar 2026 17:01:24 +0000
Files and hashes: 1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: BQlm9vASfEwcQaSIUvRF6rtaqBwlg/Nv/CIc+hb7wvk=)
2: el19n5VFJI2Td0uzZZckW_YpTo0.roa (hash: DpjOrLRCltZRLAqBNQKYh5WLON/qWjFe342eyMeNeHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fe:8c:5f:eb:6f:1a:79:e8:cc:65:f6:58:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Validity
Not Before: Mar 1 17:01:24 2026 GMT
Not After : Mar 2 17:01:24 2026 GMT
Subject: CN=e5d4f8814d74ba5a1e7b52e5dc04594aa0830d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:d6:ca:6c:73:57:5a:63:22:f0:2e:81:0c:
40:66:37:ad:9e:6e:29:0d:10:cd:66:20:a1:54:56:
16:b8:7e:5c:36:fc:fe:a0:92:f2:35:cb:09:d5:4f:
36:6b:a8:3f:3c:8c:2c:4f:22:9f:80:dc:36:e1:4b:
6a:49:e6:21:62:02:76:99:2f:1d:e8:17:33:48:85:
2d:8a:03:dc:46:de:ac:00:31:38:02:d0:09:46:b4:
bb:44:23:f6:45:e0:fc:3b:bd:e7:81:03:6a:ca:e6:
dd:6f:f2:10:64:33:cc:0e:68:62:b0:53:84:7e:07:
af:d9:f8:6c:7f:a9:50:ea:24:c1:91:38:fc:82:4f:
00:a8:c7:cd:d4:06:f8:37:63:1f:d2:4e:22:e3:ec:
e9:e6:cd:e5:ad:17:51:bd:46:5c:58:a2:15:a7:11:
8f:22:28:30:cb:7f:83:f8:33:3e:53:6a:97:ad:70:
34:67:79:33:d5:24:7a:10:bd:ce:58:37:2c:a3:41:
77:11:65:63:11:3a:e2:61:c7:cf:64:58:4e:e9:c9:
f0:06:b9:f9:b8:1a:9e:39:91:a3:1c:37:22:50:93:
6a:bb:bd:81:4a:a0:a2:b0:51:ca:6b:ea:f4:a5:67:
82:46:06:d8:8e:5a:df:c8:bf:d1:db:17:ad:a6:83:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D4:F8:81:4D:74:BA:5A:1E:7B:52:E5:DC:04:59:4A:A0:83:0D:52
X509v3 Authority Key Identifier:
keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5d:d7:21:1e:96:ac:3b:de:8e:62:13:6a:db:96:2e:7e:db:
a0:89:27:7a:ca:e9:06:d1:25:7a:7a:16:61:48:d7:2c:dc:31:
2c:29:0a:c3:c4:f7:95:f9:69:34:c1:a4:35:cf:6e:94:bc:e5:
3b:0a:5f:63:8e:f6:4b:a0:b5:d9:31:cb:50:36:b1:46:d1:5d:
8e:b2:64:63:ba:dd:bb:96:e7:14:bd:43:f1:12:ef:04:fb:f1:
18:04:83:b8:92:fa:e3:6f:fd:fb:56:f1:29:88:b3:70:51:d1:
e3:cd:fd:e1:db:b4:17:cf:a3:ad:8d:1c:a0:45:bc:6c:2f:f6:
08:d9:bb:ae:46:dc:c3:2a:e3:9f:a9:67:a8:1c:bf:c9:2d:c5:
b6:4d:01:05:b9:6f:5a:19:04:0d:d3:67:5c:cd:54:53:44:6c:
28:67:4f:0a:2b:67:b4:68:e6:12:22:fc:50:7a:d9:11:80:de:
f6:11:87:ea:d7:0d:4d:61:7f:1a:74:da:46:e0:be:df:32:d7:
7e:e9:be:23:6e:d4:7a:ca:1a:56:7c:c0:b9:0a:b9:45:06:e8:
b4:06:31:1a:43:04:a5:01:f2:16:d4:e7:ab:e1:23:5c:a5:fb:
e6:03:b7:6e:c3:7f:92:81:ee:fa:eb:83:21:15:e1:77:32:f2:
69:4c:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:28 2026 by rpki-client