Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: 6S7E/ADHti83jKbKu4wuGwHV4BQSGIIXZzuCAYjo24A=
Subject key identifier: 20:7D:78:A7:7B:D3:5D:9C:10:70:72:22:73:B2:F6:F8:4D:02:5B:30
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019E2A708627EF6E575A1330E8AD0056C0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 0476
Signing time: Fri 15 May 2026 07:01:17 +0000
Manifest this update: Fri 15 May 2026 07:01:17 +0000
Manifest next update: Sat 16 May 2026 07:01:17 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: VL6K3upREcFQ2x8D4D5AkH4Xt7mKKlFfp80NUyOFFOo=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:86:27:ef:6e:57:5a:13:30:e8:ad:00:56:c0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: May 15 07:01:17 2026 GMT
Not After : May 16 07:01:17 2026 GMT
Subject: CN=207d78a77bd35d9c1070722273b2f6f84d025b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:d6:dc:31:dd:d3:85:48:b6:41:67:c1:e4:
ee:d6:5a:12:1e:a5:a8:b6:06:87:be:45:12:d7:be:
65:6a:8e:2a:13:dd:63:00:96:a9:ec:f8:21:b9:31:
c9:74:8a:af:32:38:29:6c:d2:30:08:04:ea:66:da:
1d:60:a2:f3:44:a2:15:b1:9a:96:12:c2:95:37:b9:
f0:83:ed:ef:83:d6:12:7b:cd:69:bd:d7:5e:82:5f:
b6:30:72:96:91:8c:a6:6c:35:e5:26:81:62:64:9a:
71:ce:c2:92:2b:d7:62:67:45:40:64:c2:46:f2:06:
bf:0e:4c:ec:db:d4:32:aa:3d:b7:46:10:2d:9d:19:
23:b5:33:22:7e:65:51:3f:bd:ae:b2:52:d3:bd:d5:
95:d7:64:81:c1:49:4c:99:42:e8:a8:de:2b:f6:b8:
b8:20:19:90:f4:27:bc:ad:cf:d8:bf:ce:67:75:89:
eb:20:1c:f7:fa:fe:32:27:cd:7e:ee:27:32:94:bd:
bf:a9:ba:17:79:b5:3c:77:77:8c:f9:95:35:14:b1:
03:45:21:88:08:f5:8e:82:ee:10:30:d9:37:54:89:
c7:fc:d9:f4:ce:8d:d8:ca:b7:5b:11:19:d7:cf:19:
03:04:4e:34:03:4d:bc:e5:cf:05:6c:0f:4b:e8:74:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:78:A7:7B:D3:5D:9C:10:70:72:22:73:B2:F6:F8:4D:02:5B:30
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:1e:13:5b:55:3b:d2:52:8d:0d:1c:e4:94:ea:f3:9b:6a:
7e:e8:8a:93:81:89:ed:6a:2f:15:33:cc:58:a8:a2:85:0a:6c:
f5:23:79:75:69:ed:73:62:02:c0:ec:80:ea:85:26:35:b7:96:
a1:53:d7:99:87:93:26:69:14:f1:3d:7d:d5:3d:69:44:6c:64:
72:e1:89:24:35:f0:fd:b5:08:2b:3a:85:02:4a:c5:20:4a:6c:
1b:de:55:06:01:80:05:8e:93:06:98:67:e1:13:24:96:fe:18:
02:4d:f6:da:fb:d5:29:26:6c:19:d3:31:eb:25:b7:43:8d:df:
b5:7e:4c:58:62:25:52:dc:be:62:48:61:35:a3:83:1e:8e:11:
d7:68:4d:cd:ea:9c:9a:a0:9d:10:e3:ff:5b:a7:bc:8c:2b:70:
94:73:54:d7:f2:9b:10:21:1c:ce:20:ad:60:02:df:c7:fc:86:
33:ad:d6:23:86:b6:7c:2c:b1:b0:cf:ed:d8:78:85:74:f8:ca:
81:c5:af:85:a8:f0:ea:00:41:0e:1d:b2:62:ff:78:b1:f6:5f:
6f:db:21:06:b1:01:1b:db:52:e8:b0:17:dc:17:b9:71:2d:9d:
c6:e2:d8:d8:77:98:21:26:38:32:49:ff:3d:63:38:6e:2d:bf:
16:8b:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:43:24 2026 by rpki-client