Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: EQ2rJ42+G2a3kpP7hgHIFtlx7t2VChyuVo6BUCTW1QA=
Subject key identifier: 2C:DF:4C:91:65:95:3E:0F:88:39:55:D8:80:52:5E:0D:3D:F9:33:65
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019F141D06B8712B0ADD510A1ADAEB74BD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 04EF
Signing time: Mon 29 Jun 2026 16:01:14 +0000
Manifest this update: Mon 29 Jun 2026 16:01:14 +0000
Manifest next update: Tue 30 Jun 2026 16:01:14 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: wK9ScfFn8+lVSor6btjLHo/X+GoiOPpP0eNgUMZw8R8=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:1d:06:b8:71:2b:0a:dd:51:0a:1a:da:eb:74:bd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Jun 29 16:01:14 2026 GMT
Not After : Jun 30 16:01:14 2026 GMT
Subject: CN=2cdf4c9165953e0f883955d880525e0d3df93365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:fb:c1:01:2b:5e:1d:f8:7d:5d:55:8a:e2:
fd:2a:03:08:80:41:1e:e2:3e:4a:68:a1:0d:20:29:
27:ab:43:b0:d0:89:f0:11:b8:e6:ab:24:c0:0d:39:
68:8f:e3:6e:8a:1b:9e:86:04:69:c0:3e:61:47:ad:
7a:c0:14:e9:c8:77:8a:38:52:e7:cb:87:bc:09:ca:
12:2a:07:88:6d:0b:64:81:f1:06:ba:46:1a:2f:a5:
77:68:cd:d8:09:6e:f7:25:8b:e3:a4:2d:89:39:f1:
49:12:80:de:4f:91:f5:ff:7a:3f:81:f4:b7:79:b4:
70:9e:b8:e9:a1:6e:8c:2c:b9:c1:c6:c8:64:e1:0d:
fd:43:d1:30:63:a5:99:92:76:9f:84:fb:df:f2:f1:
cb:c7:91:f9:47:05:21:2c:bd:8a:49:8e:bf:c1:f1:
cc:0f:d4:12:29:3f:0d:ac:62:e2:d0:a1:27:b4:d3:
75:1c:62:e9:31:cf:d8:b4:fb:af:00:10:78:ea:62:
2b:1b:52:25:d9:28:17:05:5d:b6:19:94:ae:5c:5b:
12:56:43:3f:af:bd:97:6e:bf:86:9f:86:68:c8:b8:
9a:65:92:ad:0b:5c:d2:8a:d2:ab:60:2f:ab:b7:39:
e0:68:06:87:e0:75:7c:fd:ad:f4:32:91:7b:67:a9:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:4C:91:65:95:3E:0F:88:39:55:D8:80:52:5E:0D:3D:F9:33:65
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c9:fe:86:6a:a0:51:cc:04:fe:12:c4:8f:3b:8d:6b:67:1e:
4e:6c:da:62:98:b1:6d:a5:83:b0:14:41:e3:68:61:74:85:89:
00:d9:16:c4:22:c1:65:42:fc:f2:f4:4b:bc:e0:99:0c:7c:e6:
d4:f0:48:ba:d4:ee:ad:18:04:45:71:9c:94:c9:37:87:ff:27:
2e:7e:22:6d:4b:0e:b1:b5:bd:c2:12:27:13:ad:3a:10:0b:98:
16:b4:71:84:2a:51:5b:70:fd:28:4b:74:81:a7:ed:6b:e6:9f:
d6:97:c7:57:b8:60:69:44:24:ff:10:a0:bf:a7:fa:87:17:1b:
87:98:23:9e:d4:8f:14:05:3f:da:a7:a2:5a:12:db:50:22:8a:
92:cc:a8:ab:9e:b2:2b:a8:05:6a:3a:40:6e:e8:60:1d:62:ca:
30:40:f0:7c:6d:a9:b4:4d:89:3b:b5:16:b2:1b:c2:95:87:f7:
a3:83:3a:7b:5e:df:b8:6d:02:4c:03:5a:ab:ba:4b:07:7a:10:
b1:f7:2f:63:ac:63:fd:6a:db:6b:97:d7:2d:7d:9a:f9:20:87:
04:fe:17:15:f8:8b:5b:ca:bc:5e:d8:50:22:1a:85:f3:89:2b:
70:95:01:11:42:e1:70:f6:15:53:a1:dd:5e:08:32:f4:54:7e:
33:ee:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 17:31:46 2026 by rpki-client