Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
File: WA7nOx5qibTvUVvGfcmBcpak2Ks.mft (raw, json)
Hash identifier: VphIZVXfCar2gEh9awykfEmh0XPGpZT8qmswJUluymk=
Subject key identifier: B6:4F:CC:49:E4:3B:3E:B8:09:96:FB:7D:41:A5:3C:78:E8:DD:7E:46
Authority key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
Certificate issuer: /CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Certificate serial: 019CD5430E7B0DEC769E76CA043C45E6CF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
Manifest number: 8A
Signing time: Tue 10 Mar 2026 01:01:07 +0000
Manifest this update: Tue 10 Mar 2026 01:01:07 +0000
Manifest next update: Wed 11 Mar 2026 01:01:07 +0000
Files and hashes: 1: 1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa (hash: avI9enOgnl+yynJNmVDI/bPieULR/2YL8z47OvnAoGM=)
2: UA7MZYc-czHZyAm_jTZP6uIdkoc.roa (hash: y/+93xNILFZI2eCu1XR1bZH6lI5t/EYB1r4ioe1Vzp8=)
3: WA7nOx5qibTvUVvGfcmBcpak2Ks.crl (hash: vUiWSNguV1UeaGwnRQRG5ia/AYyjgaFtTOJJF0r1oZc=)
4: mJY88gnCtE0_lJEMctYDc3XreZc.roa (hash: dILiJ64ptgJlU6ZR8SsCAYYl2fBgysDyRuWNcNNxdXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d5:43:0e:7b:0d:ec:76:9e:76:ca:04:3c:45:e6:cf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Validity
Not Before: Mar 10 01:01:07 2026 GMT
Not After : Mar 11 01:01:07 2026 GMT
Subject: CN=b64fcc49e43b3eb80996fb7d41a53c78e8dd7e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:2e:a0:13:f2:1f:39:2a:a7:fd:49:78:df:
4d:13:c1:39:4e:d8:9b:a1:34:d9:23:72:d8:30:65:
71:e3:36:da:e3:29:56:f2:8a:00:b4:92:91:a2:b3:
2f:6d:f6:ad:b5:2a:a3:f8:21:85:db:17:6a:f8:64:
c4:6e:a5:e6:cb:04:03:9a:85:5c:33:50:98:73:9b:
68:56:5a:76:4b:29:53:4d:77:10:98:e6:d3:2c:f8:
f7:69:91:77:0b:dd:01:6c:ab:e7:5b:a0:38:54:17:
9a:a5:1b:8a:13:1c:b6:98:7f:53:56:f7:5d:86:b6:
5b:15:7d:f8:cd:94:db:dd:84:83:57:5f:c4:cc:44:
3e:6a:05:9a:ad:8f:c9:2b:ec:0b:86:d9:e1:34:ef:
43:43:4c:93:5c:23:c8:a1:37:e9:82:25:a4:f8:10:
04:34:e4:3c:08:51:11:45:58:ff:d3:5f:27:b4:d8:
85:7c:28:af:f2:e8:2a:1d:a6:8d:99:bd:67:08:0b:
3a:6f:76:6d:a2:a4:99:19:94:ab:3d:07:b8:31:a8:
08:8d:06:32:3f:e7:8b:9a:4b:26:fd:1b:33:34:94:
88:9c:04:7c:21:2d:bd:e5:b3:5d:3f:b1:c2:8f:0d:
bd:b8:e2:86:ab:e1:11:a5:aa:44:3b:d3:2f:c0:47:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4F:CC:49:E4:3B:3E:B8:09:96:FB:7D:41:A5:3C:78:E8:DD:7E:46
X509v3 Authority Key Identifier:
keyid:58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:30:a1:fb:55:4a:c0:0d:a5:8f:f4:8d:02:f8:21:20:52:
3c:2b:43:71:f0:63:01:52:e0:01:ac:38:44:d9:e6:cc:b6:15:
55:57:8e:c2:a0:10:6b:7c:43:3c:f8:b3:04:be:65:63:ac:c3:
f3:17:2a:cd:bc:70:d4:15:3a:31:4e:5e:c0:ae:44:5b:5b:07:
da:b3:a1:84:f4:7a:f7:d6:ea:8f:8b:5c:60:36:c3:e1:29:ce:
72:7a:bb:23:35:ad:1b:ff:d3:41:d6:ac:0f:ed:03:5c:f5:87:
a9:40:03:d3:da:60:23:e5:ee:c5:81:81:08:24:d8:33:13:41:
18:27:88:82:f8:c3:39:d0:6e:e9:98:f2:76:91:fe:a1:eb:36:
dd:30:4b:21:d7:96:36:59:58:c9:d8:27:2a:68:f9:e9:90:a8:
4f:1a:e1:59:f8:c3:b5:e8:38:2b:e0:e0:09:da:c0:47:55:31:
ea:77:30:09:ba:a0:71:eb:58:c3:76:58:0f:b7:16:a0:5d:d0:
f3:07:82:3f:8c:4a:2d:ad:e1:86:01:97:2e:85:7b:be:f6:d1:
df:2f:d0:a3:58:99:1a:0a:11:a8:06:33:38:57:52:10:b8:fc:
ed:68:90:58:58:d3:57:98:36:85:d8:c3:51:25:e2:37:76:4b:
19:1c:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 08:29:27 2026 by rpki-client