Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
File: W0ShsaCcqepQ5aW9W3d737XzVls.mft (raw, json)
Hash identifier: FCcBQ2mi3r22DpfthV2gcfGTHlZpfugFix5lQX1i/gM=
Subject key identifier: 8F:BB:80:11:0F:BC:47:1F:08:1E:4C:9E:A0:F3:4C:0F:59:C2:D9:8E
Authority key identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
Certificate issuer: /CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Certificate serial: 019CA8D89AAA01DFF64FA9DE6666A4D1CAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
Manifest number: 7E
Signing time: Sun 01 Mar 2026 10:01:33 +0000
Manifest this update: Sun 01 Mar 2026 10:01:33 +0000
Manifest next update: Mon 02 Mar 2026 10:01:33 +0000
Files and hashes: 1: W0ShsaCcqepQ5aW9W3d737XzVls.crl (hash: BmD8RZutytZQpg7CPse4uPLfqofcnFBlQQNWWOQI/3k=)
2: y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa (hash: w9rApASglHDBpx/DYcJualDyoNDP/7m3UoJGYbB33JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:9a:aa:01:df:f6:4f:a9:de:66:66:a4:d1:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Validity
Not Before: Mar 1 10:01:33 2026 GMT
Not After : Mar 2 10:01:33 2026 GMT
Subject: CN=8fbb80110fbc471f081e4c9ea0f34c0f59c2d98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:45:b5:d6:75:29:28:39:30:f7:b7:1b:2c:
ed:1a:a5:2c:8d:01:c3:80:a7:88:e3:8d:7b:a7:f0:
8c:e3:48:e1:9a:ab:5b:7a:5c:6a:df:ba:3c:1c:7d:
fe:f5:76:a6:21:8a:98:cb:7b:7c:53:60:8b:75:5b:
9a:9b:3f:98:e4:96:14:97:83:4e:d3:7e:28:53:85:
29:c1:82:de:37:d9:8f:80:b9:34:16:34:31:37:09:
3b:02:3d:d9:58:c0:00:36:5f:f8:ce:81:da:12:0f:
01:5a:c2:16:45:e5:74:f1:ac:38:e7:e5:cf:17:4f:
58:f2:57:20:71:93:9b:86:31:56:bd:5e:96:0d:37:
12:dd:33:6d:08:45:f9:40:41:38:99:43:0d:aa:18:
5f:58:9d:cb:4f:f2:f6:21:dc:69:f6:f8:79:97:d1:
57:8a:16:24:f6:f6:d9:b0:76:1a:d1:61:82:f3:a4:
69:eb:5d:07:c9:ce:5e:48:0d:46:3c:4e:0e:71:ef:
85:7e:c6:55:f9:93:86:3f:1a:69:74:04:b0:24:23:
8a:81:1c:89:5a:ac:6c:5f:d3:22:58:39:50:75:76:
28:57:d9:3d:f6:72:36:23:6f:4c:72:20:11:69:e4:
38:a2:26:2b:01:77:c8:db:e0:4f:d8:52:c3:b5:bc:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:80:11:0F:BC:47:1F:08:1E:4C:9E:A0:F3:4C:0F:59:C2:D9:8E
X509v3 Authority Key Identifier:
keyid:5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7b:3a:f3:a8:5e:d6:4b:ab:2c:e1:6f:d2:f4:6e:10:40:55:
a5:ad:35:f3:69:a3:cc:26:fd:4d:d7:79:71:67:07:a5:8a:dc:
1c:5b:02:ba:9a:1d:6a:a1:87:bf:81:c2:99:ad:45:17:4d:ae:
70:34:a1:98:9e:28:15:0b:3d:20:f4:58:61:f2:4e:0a:c5:45:
96:58:af:83:c2:d0:25:59:08:cd:2e:9e:54:b1:77:68:f9:01:
ea:bd:fa:6f:ef:02:07:16:50:58:03:b2:38:de:06:5d:44:2f:
e9:c9:1f:9b:58:32:83:0a:1a:31:d4:fe:6f:d4:bc:80:3c:a5:
a4:3d:9f:53:cd:41:7f:eb:3f:ad:1c:30:8e:27:5e:95:47:de:
7f:68:39:19:a2:5a:f3:62:c4:c7:b5:2a:33:f9:7b:cc:44:49:
5c:14:b7:53:75:18:cb:77:9b:ee:ab:c5:61:58:9c:e0:85:74:
e6:52:06:67:40:f5:0f:7f:be:9f:ee:fa:b2:79:87:d0:51:5c:
a6:cf:9d:83:d7:35:b2:10:f2:90:fc:b1:79:47:61:38:ea:1b:
0a:22:50:0b:87:83:7d:a7:58:5c:df:38:6e:6f:3d:20:f0:2a:
28:1e:6a:bd:4d:9b:93:82:13:29:91:d4:72:00:d1:e5:84:b1:
1d:4f:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:41 2026 by rpki-client