Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File: WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier: C2fMcBI7Vzdv0oPMbkoUoOYm4N8V5WB9F0ijTMn0Bpo=
Subject key identifier: A0:0B:40:63:12:5B:08:39:05:FC:86:9F:EF:FD:B2:41:E4:3A:E5:58
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial: 019DCF751C9C922D25E63643C11628ACB45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number: 07A6
Signing time: Mon 27 Apr 2026 15:00:51 +0000
Manifest this update: Mon 27 Apr 2026 15:00:51 +0000
Manifest next update: Tue 28 Apr 2026 15:00:51 +0000
Files and hashes: 1: FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa (hash: cK6XeGopFBU42xQOw3pXSfyyWEVVyNojCMYqWc1ytZU=)
2: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: oumFUNxIH/CxqN4qz9uKC/ZACFK8YMcVbwBO6jqoOW4=)
3: nGiD_VuUEB-534WjNRVtjKrImS4.roa (hash: bHtWWwpySfNp2/DWZty3G/IOwsGExDDGytrN6bgjIio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:1c:9c:92:2d:25:e6:36:43:c1:16:28:ac:b4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Validity
Not Before: Apr 27 15:00:51 2026 GMT
Not After : Apr 28 15:00:51 2026 GMT
Subject: CN=a00b4063125b083905fc869feffdb241e43ae558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:a3:31:fa:38:f6:2f:5c:04:ec:af:e0:9c:
11:bb:83:9b:d1:9a:23:19:fb:e2:aa:30:41:b8:ff:
5e:80:fd:6a:f1:ba:4e:53:35:74:96:fc:9b:0f:99:
da:ce:46:1e:c1:e8:04:98:1e:18:a3:1b:d0:f0:83:
29:83:91:1e:7b:5d:29:54:a9:60:1a:13:90:e9:68:
46:f7:9e:dc:5b:e5:e2:50:f3:82:cb:a6:de:98:62:
53:ae:a6:14:ee:ad:8f:70:21:0d:8c:7b:2d:0b:a9:
67:9c:0b:92:65:01:26:af:7f:7a:f1:f2:a5:de:c2:
5e:1b:ec:21:68:56:2f:81:9d:40:47:b6:d2:66:77:
b8:5f:99:b0:f1:dd:50:5d:b8:40:13:f4:af:2d:74:
dd:d4:e4:b1:a6:07:62:81:21:c6:e3:52:59:b0:78:
bc:b7:f5:a4:be:67:5f:f7:14:af:dc:bd:ca:9e:7c:
f1:44:e6:b2:5d:20:71:ca:77:53:b6:51:47:11:92:
a9:5f:31:45:54:56:14:b6:c3:fc:e4:74:59:cc:2d:
b1:cb:3c:18:10:df:55:70:03:67:4b:15:01:3a:df:
e2:80:db:0c:fe:67:f2:e7:3f:12:b0:1d:12:cc:6a:
9c:15:71:19:81:1b:22:44:e7:f3:d4:a7:46:e7:6f:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:40:63:12:5B:08:39:05:FC:86:9F:EF:FD:B2:41:E4:3A:E5:58
X509v3 Authority Key Identifier:
keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f7:a3:d9:03:2c:81:8e:29:2a:c2:c1:3d:b9:34:d6:b2:45:
3b:22:26:8b:8a:af:55:d6:9a:62:57:19:03:3f:63:9b:21:b6:
91:b9:a0:67:3a:8d:20:56:c1:3b:d0:35:f7:0d:c4:b8:ee:db:
e8:58:76:86:cd:c3:92:ef:fc:23:af:a0:bc:1a:e7:e6:d0:b4:
5c:7c:e5:1f:f8:5a:61:3b:c9:2c:56:8b:d9:ba:ff:ee:55:b1:
a2:f4:de:c5:c8:39:a2:69:9e:e1:00:03:20:6c:84:19:84:b0:
c6:7b:dc:10:31:01:c1:dd:0a:db:a3:da:38:fe:56:7c:ca:ee:
8d:3f:f0:47:6c:4f:0b:40:ff:e7:f1:85:4d:aa:3a:7f:7b:16:
b7:5f:c2:3c:bd:5f:28:f1:06:22:c1:b6:6b:a6:8e:db:10:66:
47:d5:d2:a2:d9:85:ca:fe:cf:6a:44:69:be:fe:8a:20:ea:b3:
c0:3d:b1:9e:f4:6b:84:d1:ee:c0:74:52:01:69:c6:0d:3d:9d:
8a:ed:04:8d:ed:cb:53:55:bd:23:76:1f:46:36:5d:2f:cc:f1:
f0:a5:74:70:bd:33:e1:54:f0:a8:0c:2a:d0:20:70:a4:f7:e5:
64:eb:f1:ab:1a:28:ae:3c:73:89:fb:93:7f:bf:05:81:f6:69:
41:0b:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:27 2026 by rpki-client