Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: pfU6cM+tTVCqpOLlhJb1IamLJjOY3RXtzn+JiQfmUIE=
Subject key identifier: A8:CF:06:15:D3:08:ED:D5:1A:01:51:F7:89:19:8D:D8:E5:EB:38:E2
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 019DA48B0E8D7B85BDF3202F054388E9247C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 09BF
Signing time: Sun 19 Apr 2026 07:01:09 +0000
Manifest this update: Sun 19 Apr 2026 07:01:09 +0000
Manifest next update: Mon 20 Apr 2026 07:01:09 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: vb3X7zvLlq9KpnHyViqYRMgglcqxpFO1luaXjApC/dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:0e:8d:7b:85:bd:f3:20:2f:05:43:88:e9:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Apr 19 07:01:09 2026 GMT
Not After : Apr 20 07:01:09 2026 GMT
Subject: CN=a8cf0615d308edd51a0151f789198dd8e5eb38e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:15:5b:98:51:8c:70:92:c9:25:b0:18:cd:
21:77:7c:a3:3f:37:1e:25:97:9c:89:c0:e7:32:29:
15:13:76:d9:37:51:ce:65:16:93:b6:77:e7:69:5c:
ad:20:04:ed:50:78:ae:df:2d:23:8f:48:0c:3a:a4:
8c:f8:bb:80:35:d1:2e:15:ff:8a:01:0d:f5:93:13:
65:74:b8:70:b0:31:15:85:9c:f7:e4:cf:35:ec:22:
36:2c:8d:8c:7d:2b:bb:5d:1a:69:a9:06:1f:13:f8:
92:6b:bf:6b:2f:92:da:21:8f:56:ba:13:9e:ef:0c:
68:37:20:ad:c7:c6:b1:86:56:af:08:e4:b5:58:a8:
43:a5:dd:97:da:95:2b:77:0e:06:c2:50:2a:ad:7d:
ca:42:45:b9:49:e9:7c:f1:94:b7:ce:12:9d:df:d3:
ab:e1:45:56:52:45:ab:53:16:8d:5c:4f:c1:e5:ad:
e4:cf:19:fb:20:fe:2d:a2:28:60:03:16:67:b3:e6:
f0:50:29:32:08:90:f7:b0:a4:ba:c3:8c:a7:09:ec:
82:38:2b:16:c6:d9:0c:bc:43:52:57:57:d6:56:8d:
5b:b8:15:47:0a:3e:35:ed:d5:69:3f:95:19:52:80:
58:0b:16:24:f2:05:59:f6:9f:84:bc:18:7a:e9:9b:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:06:15:D3:08:ED:D5:1A:01:51:F7:89:19:8D:D8:E5:EB:38:E2
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:ca:92:48:e0:9a:a9:3a:d0:62:68:7d:34:21:95:c7:0c:
34:d3:6e:1d:b6:a4:ae:ed:4f:be:45:17:c3:e0:8b:d2:2a:77:
15:47:6d:ae:07:8d:7f:59:aa:3d:e9:c3:a2:98:a0:9e:b6:33:
86:19:af:7b:db:97:40:c2:34:61:48:20:1a:9a:37:78:de:e5:
13:e9:17:cc:37:c5:55:2f:76:65:c9:c4:16:ee:c1:ad:39:12:
c9:03:b8:11:d6:c2:e6:32:e4:12:40:ff:69:50:34:20:08:3e:
db:fd:bc:ea:39:d7:be:a5:fd:0b:59:b8:3a:f5:18:ce:5c:e5:
3e:eb:24:69:ed:79:60:b6:83:ea:46:d5:a1:e1:b5:5a:a5:10:
f6:5a:01:8d:80:9d:47:d1:21:5a:14:4c:bb:63:07:ad:5e:8e:
7a:10:6c:7e:ab:6e:ce:38:c5:08:70:40:75:b9:8c:73:01:2f:
f5:f7:4d:22:87:a5:12:a7:55:18:15:12:ee:1d:27:1f:ca:75:
fd:f7:4a:c7:68:4b:43:16:45:2a:cc:e1:01:30:cb:4a:ff:f0:
92:eb:62:0f:d6:48:b8:f5:93:00:0e:60:4c:14:b2:d9:5c:84:
36:6b:7c:a5:44:0f:20:01:21:68:24:a1:d4:14:40:80:5b:f3:
dc:65:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:15 2026 by rpki-client