Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: bbSycZHTa6LiyWKyGlQ+iNjx9ieNM01Gvc1jk1OXR0c=
Subject key identifier: 4B:02:92:A3:C0:D4:E8:F8:1C:FE:03:ED:00:1E:51:46:3B:90:DE:26
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019CABD9F1386508A2B68210EFB98C5B21D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: O723Znd/+h/Cj4788nWRjjtHMPLiDu3hqPgakRlpJ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f1:38:65:08:a2:b6:82:10:ef:b9:8c:5b:21:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=4b0292a3c0d4e8f81cfe03ed001e51463b90de26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:cd:7a:68:55:0c:a2:0a:b3:c7:1c:16:8b:
d1:44:6f:bc:1f:80:af:30:68:21:6a:b7:9e:09:0c:
e5:88:cb:45:b2:fa:56:39:82:ba:10:fc:2e:ae:76:
48:c5:0c:91:d7:89:40:6d:27:2d:8c:40:a0:80:e7:
af:bd:fa:50:85:99:78:99:26:f8:ab:a9:42:85:19:
a4:86:e6:f6:49:bf:c2:fe:d8:83:a8:33:5e:41:6e:
00:fc:c8:3a:6a:a4:73:dc:76:f0:90:c3:82:c0:3d:
a1:d1:5e:9f:bf:eb:f4:a0:b6:a6:cb:51:89:41:ad:
6b:c6:76:e7:86:da:45:08:5b:00:d7:29:e1:36:aa:
69:f9:71:6a:1e:50:ca:28:1d:28:65:9b:ac:ac:1b:
c9:f1:3e:75:41:b3:0f:57:2f:e9:54:62:02:9f:89:
85:5c:15:c4:3a:8b:9c:ef:f1:ed:e7:4a:89:d2:b2:
ce:d9:d1:4c:38:c0:f5:4d:06:62:22:47:9b:85:85:
4f:f1:ae:85:c6:97:8e:8b:94:cf:dc:bc:ff:f8:40:
ff:81:bf:de:20:91:6b:36:d7:fe:85:c7:92:94:58:
01:72:74:7d:b0:5a:56:ee:f1:0d:88:4d:c9:65:da:
ca:0f:d0:ca:00:6d:56:3e:30:2b:ac:04:2a:dd:a1:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:92:A3:C0:D4:E8:F8:1C:FE:03:ED:00:1E:51:46:3B:90:DE:26
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:d4:47:76:53:1a:46:b1:e3:e9:20:77:20:33:88:fd:77:
9e:5f:51:8f:8b:b8:3b:c1:a7:3b:12:6f:12:e9:3f:68:96:1d:
99:fb:0c:3c:a3:96:3f:20:45:85:dc:4b:73:f5:cd:7a:cb:5b:
62:40:fe:70:07:b6:b8:92:b6:95:86:98:64:8a:ed:19:88:c6:
c4:0c:33:d7:c2:86:f3:76:87:ce:bd:67:79:28:ad:3b:64:2a:
cd:8c:75:ea:61:70:4d:ac:c3:ab:43:b9:99:be:99:bf:ce:20:
1e:4a:b0:5c:f8:19:01:5b:e3:50:70:6c:f0:98:e5:bd:c0:63:
38:e9:d5:4d:9f:84:17:ff:88:ff:d1:e0:e8:67:b1:1c:df:dc:
df:d2:31:b8:58:73:92:b0:04:0b:2b:bb:67:f8:b7:a5:a3:fc:
46:f0:95:4f:af:62:e1:c4:a5:45:44:21:42:f0:6c:11:28:b2:
65:64:a4:5f:d3:f1:f3:b6:c8:01:29:2c:0b:4b:d5:49:bb:9a:
18:8e:bc:73:35:7f:11:c3:7c:fb:25:dd:9a:cd:b4:c6:b9:85:
ec:dd:cd:d8:17:d4:e3:14:03:b9:da:3f:b9:7f:a8:22:b0:31:
dc:a4:97:d7:a7:09:f0:13:8f:de:53:f6:90:92:38:3b:1e:fc:
0b:0b:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:00 2026 by rpki-client