Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
File: WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json)
Hash identifier: gSBOTCb/vZO3do6C+uvqsfqOJDdhSCTKFUszugX3gP4=
Subject key identifier: AF:14:5E:DB:0D:56:0C:B6:5F:03:8A:58:05:52:43:E8:0E:D8:00:4F
Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
Certificate issuer: /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Certificate serial: 019CABD9E563E9146DAF97A10C692E750509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
Manifest number: 08AB
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: LCyWWE7WYBlWYXA9A8WiaxxbTU8.roa (hash: R6ey8Uqth1/igLWVfN/TR2Eu26hppMIiB0ByyHlPk3A=)
2: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: F+fnnJTehypzJdeAAuZdut5CChFRYUZkBMRovw4O46A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e5:63:e9:14:6d:af:97:a1:0c:69:2e:75:05:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=af145edb0d560cb65f038a58055243e80ed8004f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:3e:64:56:27:bc:2c:f4:11:95:1b:95:67:
30:cc:a6:a6:a8:a2:9c:e2:bf:be:0d:c9:54:4b:66:
fc:68:fe:f1:82:b7:e6:5e:a3:64:7c:bc:9b:d0:40:
17:b0:1b:9a:d6:b8:fe:92:18:a9:64:a4:39:36:71:
7e:2c:15:8d:0f:40:7a:f2:4e:8d:82:20:53:42:97:
63:f2:0e:f2:36:04:78:51:a1:00:a6:1a:a0:5f:a4:
e8:e3:32:d2:75:46:d2:b5:2d:27:f2:5f:25:09:af:
68:a3:9c:45:61:1b:89:4c:1c:83:4a:bb:c0:19:89:
7d:d6:eb:dc:fe:f7:77:6a:2f:eb:04:7e:e7:23:2a:
46:1c:e5:95:2f:ed:4c:21:19:50:a4:14:4a:cf:b0:
a0:6b:6a:8a:be:98:f9:8f:74:3a:d2:34:a4:46:23:
02:48:e2:a8:15:19:8a:b7:71:30:39:a4:f1:25:70:
4e:ee:4a:0e:d7:19:76:0e:43:79:92:00:e6:16:0f:
77:b6:d5:ba:2e:35:bf:f8:e6:9d:c2:34:db:a6:a6:
cd:08:2f:15:f2:0a:50:61:ae:2a:05:58:71:ff:b4:
0a:5a:f6:2c:aa:4e:b1:28:ee:d8:2b:9c:e2:b5:41:
fd:11:2c:fd:a2:e9:9a:5b:b1:b9:a3:18:ab:77:c2:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:14:5E:DB:0D:56:0C:B6:5F:03:8A:58:05:52:43:E8:0E:D8:00:4F
X509v3 Authority Key Identifier:
keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:da:67:5c:ef:c0:17:40:9f:1b:8e:16:9e:38:d9:aa:d9:
44:b5:97:65:49:47:36:fe:71:75:e8:57:ac:75:ae:09:fa:57:
c6:e9:96:e6:28:4d:e0:51:57:df:61:c6:36:65:9b:3d:9d:9f:
70:69:db:c1:27:4a:34:dc:ef:c6:52:97:a8:43:01:92:96:c6:
6d:f8:03:26:95:5b:2d:b3:e2:2a:34:d1:22:56:d0:46:7d:73:
e1:80:f4:41:b8:16:5e:d5:75:ef:83:98:35:54:52:08:39:9e:
e5:f6:fe:68:46:d0:ca:5d:2e:11:b6:59:23:d7:82:ba:76:e4:
c8:b4:81:1c:91:f1:2e:f1:8f:7e:90:3c:54:9b:6b:c1:ce:d4:
26:e6:99:a9:f8:16:9c:db:00:ca:cd:0b:50:f2:4b:93:c0:e9:
9d:47:ea:d0:aa:ae:02:3d:1a:d8:3d:91:4b:f9:00:54:51:5f:
85:fb:f8:74:26:0c:a6:cf:dc:ac:81:d6:55:2d:fd:fe:de:e8:
e5:3a:68:74:19:61:96:ed:61:a9:ee:53:6d:b3:97:eb:20:49:
a4:85:8c:a3:ef:3d:48:48:fc:1d:71:82:3e:32:aa:41:5b:60:
a6:54:1a:7f:46:3d:57:56:a4:d5:37:27:db:72:7e:6c:7e:c3:
3a:4a:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:19 2026 by rpki-client