Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File: wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier: 5o+bmzIwD5wCg6t88GZdpo0MmE8HPJ3BxvBVlto4Mz8=
Subject key identifier: 18:10:7D:39:76:27:06:A5:01:DD:C4:B6:E0:2F:F2:87:E6:F2:46:74
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 019D382E8ED1AF4FC245BCE79070B527B0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: 37UgpJIpFDoLpn5jUdrrw88EOYs.roa (hash: 6IHanqLQQ9iVieDletocqCDXSFtx3QpzBhEUB5fo/Wo=)
2: 6CYJFLYzJsCzzHIAogKVImiilqU.roa (hash: hXxIZWK3P8ePeRytCGeiJCZHrXxQPMFWaAZ+75i/4qM=)
3: 9lnke6oRh0VLNBbdrOmVHhpK_30.roa (hash: mwX6XqY2Vzr3/AFUGFr4YDFxRbauEvN03/V40GGEUYw=)
4: E8Dq6b1_iT2pjSVqisC1G3r0_Sg.roa (hash: aZesuL1kEe2OW5HrJCbkkpREyKjdhx6K40wSnDcwXlI=)
5: _PydBs1sWRTvUV5cRaL2yTeOV00.roa (hash: 5vv2v2s5YeTFWOeOLBaLL5q8cPQUZNamlvCzhmGZofc=)
6: bzM0vXaT5a0wdLKXtzcW1KTh0E0.roa (hash: HSw7OuKnO856MNi69RfSc3oV1YFcKv7OWcbxs0IZTX4=)
7: hS6uewCB_QrVL4l6szpbmIikwP4.roa (hash: HveKQzzsmxnwC74x4jZYUDMe8gGcI27oxthPBotk3XE=)
8: iwnASaLaQw8Qdn5cYtkYv6MG2gQ.roa (hash: KCxw+NktIcx6tj5s7jZ1g6kWygCH78tSuPcXjTkGaIE=)
9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: JZa/rcYtwGcuzIuHCEjwHuEzMaJIVowEPugq+mfJk44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8e:d1:af:4f:c2:45:bc:e7:90:70:b5:27:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=18107d39762706a501ddc4b6e02ff287e6f24674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:76:d5:66:f1:6f:78:c7:cd:ae:30:50:90:
4f:e7:2b:32:f6:32:51:4b:f8:42:c9:4a:31:b1:cb:
0a:90:df:19:33:5e:c9:b1:5c:63:d2:12:c9:09:89:
8e:ce:4f:e7:6e:5d:46:4c:3c:26:3f:8c:f1:88:05:
3a:3f:d4:39:9b:cb:95:5a:ee:a7:22:ed:a9:b7:8f:
3e:57:6f:f9:91:e0:8d:bb:70:c3:e4:45:34:f6:75:
4e:15:64:cc:0c:b4:f7:96:9b:b4:00:4a:33:89:c8:
7b:ff:ad:35:c5:51:0d:59:68:ea:fb:56:a6:14:10:
a1:13:c4:0e:6f:fd:eb:dc:18:a1:59:d3:0e:2a:4d:
96:75:8e:8e:6b:50:03:1c:4b:72:ff:12:60:d5:1a:
da:34:c2:81:84:40:45:11:30:84:bc:33:bc:cc:c3:
48:0d:8a:f8:02:dd:f0:22:dc:d0:6b:99:dd:2a:50:
ba:a3:26:71:21:eb:92:9c:90:2d:dd:e5:c6:4a:b3:
60:f2:2a:2f:8e:5f:7c:f9:73:77:23:a0:92:f3:87:
87:9a:73:5b:26:62:c0:be:53:8d:da:73:c1:2b:dd:
02:a2:54:c4:7f:da:68:75:92:7b:66:46:2e:6f:dd:
a0:26:b3:31:0c:08:e3:c1:75:1b:be:81:4f:87:9b:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:7D:39:76:27:06:A5:01:DD:C4:B6:E0:2F:F2:87:E6:F2:46:74
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0f:de:51:68:cb:09:fe:0b:15:ed:aa:0d:f2:99:c7:63:85:
5c:29:e8:64:e3:27:bc:9a:5b:d2:8d:11:5e:99:f9:74:fb:47:
3f:aa:51:5d:80:fb:0c:b3:95:b8:93:bb:f8:50:c3:fd:ab:91:
bf:ca:d8:14:ac:33:f4:05:b8:09:60:e6:15:b0:e9:51:9f:8b:
4e:55:d1:7d:ba:53:84:20:d0:5d:31:59:d5:f9:ff:43:23:24:
6a:0e:3c:b8:c4:cc:f9:60:c7:59:3c:cd:44:2c:a3:c9:f4:8c:
ba:7d:9a:ea:cd:3c:87:37:13:d8:53:1f:df:0d:d5:f9:a7:a4:
be:b0:fa:df:6c:da:f3:c3:c6:fa:bf:87:b8:67:88:ad:36:e2:
93:a0:f7:35:a5:ec:2d:3a:f0:50:9f:32:d5:cc:cb:e4:64:51:
08:74:96:89:65:f5:78:6c:75:b3:d5:68:df:5c:4a:ab:39:4a:
92:33:c5:96:ca:cc:29:80:a4:8c:47:f4:57:d4:de:b4:a8:ee:
c9:1d:ef:b5:b3:07:2f:dd:9e:1c:be:b3:de:e7:be:e3:9a:c3:
55:1b:8d:2c:30:37:d7:b5:35:91:f1:99:5c:86:48:7e:d0:ea:
3c:34:22:b8:f8:46:db:8c:c1:b7:9d:72:78:26:9a:00:65:46:
28:d8:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 10:05:21 2026 by rpki-client