Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: 89m9T0ebAcNtfpa1UMdPaREEXSd/KMZh4/45EpgwR8M=
Subject key identifier: 56:8B:99:93:25:23:0E:4E:E7:0C:AC:9B:D4:23:DE:DD:96:E2:DE:AE
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019F122EC2C731925EF5869E561BACDACA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 04EE
Signing time: Mon 29 Jun 2026 07:01:22 +0000
Manifest this update: Mon 29 Jun 2026 07:01:22 +0000
Manifest next update: Tue 30 Jun 2026 07:01:22 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: lm4kPORwi4ro0u6eZFm2UZ7xcPO0HzW+gIxo+DwIk7g=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:c2:c7:31:92:5e:f5:86:9e:56:1b:ac:da:ca:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Jun 29 07:01:22 2026 GMT
Not After : Jun 30 07:01:22 2026 GMT
Subject: CN=568b999325230e4ee70cac9bd423dedd96e2deae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:54:1a:5e:2d:6a:d6:a8:09:17:7d:e4:98:
e7:02:2a:3c:da:2a:11:9b:20:8f:2c:db:d7:f3:c9:
d3:01:bf:0e:d4:62:c4:0f:a5:1b:79:c3:b1:a5:58:
cd:f9:ef:16:8e:cb:5a:7e:fb:b5:9f:cf:91:0a:5f:
15:6d:04:ab:b0:0b:98:e5:e9:60:3b:82:c6:ac:81:
dd:20:5a:7a:ab:e4:f1:4c:e5:f1:e1:6e:61:e6:0a:
18:e1:92:cd:a6:e2:0f:d1:b8:c0:90:27:a9:4b:02:
09:56:c2:b8:cd:42:3c:b6:8c:fd:f9:3e:77:c8:c2:
f5:60:70:bc:7d:da:72:d5:37:4f:fc:05:33:07:72:
b7:5f:48:55:d1:44:01:a0:2c:13:a3:09:ad:25:45:
b2:3b:ca:5a:93:1d:e9:7e:cc:26:15:87:47:93:ba:
e0:dd:25:69:47:2d:13:8b:f7:26:b3:f6:d0:66:2a:
92:72:4a:09:fa:99:33:02:d1:d0:21:02:f7:2a:da:
af:36:c2:88:0a:59:1f:a7:42:2a:30:75:c7:8f:11:
f6:34:af:53:c7:11:03:98:e1:d0:35:8b:6e:b4:ad:
9b:db:03:7c:d6:02:88:3c:9c:cb:7f:17:15:0c:c9:
42:9a:d3:8e:11:3b:0d:23:d3:23:2c:34:9f:2d:6e:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:99:93:25:23:0E:4E:E7:0C:AC:9B:D4:23:DE:DD:96:E2:DE:AE
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:93:4b:97:cd:5d:81:12:35:82:b8:4a:62:26:12:7a:8a:5f:
4d:3e:07:06:9e:5e:6a:17:8d:b6:56:0a:36:86:1a:a5:51:da:
ff:20:51:5d:c2:4e:9f:ce:c5:47:13:ab:33:a6:ab:55:42:e5:
65:3c:c3:14:50:d1:e2:4e:01:c2:66:2a:2e:90:a2:31:83:9c:
e4:d9:42:bb:c6:51:5d:fb:0a:cd:6e:4e:ac:6a:60:f5:3e:38:
26:b3:9c:d8:08:36:6a:69:90:ca:98:ca:3a:fb:b4:ef:c2:f8:
c5:58:c1:87:2b:70:3d:d3:a6:96:7a:f5:a3:dd:e0:82:e7:c6:
e5:93:c9:e2:60:fa:9d:71:d4:c9:c6:5d:87:fa:fb:36:ef:82:
ba:96:b3:09:7e:f8:48:74:f9:6e:ea:6a:40:72:e6:96:2c:aa:
38:63:9a:89:c9:96:ec:4b:c1:38:08:d6:af:aa:89:f6:e0:d4:
a9:6c:6d:d2:a8:e6:98:9a:aa:9d:b6:83:e7:99:06:cb:dd:a0:
82:93:9f:b5:8c:27:71:5a:47:3a:64:68:be:3c:e6:17:79:b9:
c0:bc:2a:89:47:33:75:41:2f:29:d0:19:b4:87:3c:85:95:46:
99:8c:a8:01:01:ea:c1:57:3f:37:f9:a2:5c:3e:f4:3e:72:c5:
88:06:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:34:37 2026 by rpki-client