Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json)
Hash identifier: NxAAfGXrK/Rz8fQzEHkxz5uQUtlth4nFMRdxynov9Fk=
Subject key identifier: BB:58:E5:71:8E:0A:13:4F:D0:9F:0E:A4:9D:76:F3:AC:40:4D:4C:DA
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 019D37C0A1FE7E72039ACC6F76FC3FAB4411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
Manifest number: 0BAF
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: Mkx5QqJBBdzFi4K_8jHAK9jxROo.roa (hash: /xYXG6nHZmfuKlJ26GtGjcJ2e4BfFGtrbLlscDJbCtk=)
2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: hegyIjRPaoPAXOTkfuQd/l1EHLE1DoNbSnPMHDM9s/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a1:fe:7e:72:03:9a:cc:6f:76:fc:3f:ab:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=bb58e5718e0a134fd09f0ea49d76f3ac404d4cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:9a:6b:cf:d3:8d:cb:74:83:c4:4b:cf:e9:
32:e6:07:f3:00:58:d0:29:df:67:f6:8c:58:70:0c:
f9:9d:c5:a0:3a:06:e5:94:5b:66:e3:66:3a:da:b7:
19:8b:54:91:cf:2f:f5:75:e2:44:14:55:70:23:4b:
a3:36:db:b8:1d:04:22:db:1b:6e:ac:1a:3d:8d:2b:
e7:38:15:ef:77:e6:5a:03:3e:18:82:f5:b7:6f:3e:
6c:1e:70:ca:f5:6e:69:b0:1c:d8:f9:f8:b3:f9:42:
15:30:fe:0c:fe:95:ca:3d:ad:25:f2:cb:08:41:b3:
00:ec:07:68:c1:26:37:45:f8:c3:80:1c:2d:42:19:
61:8c:38:e5:9f:46:b7:cd:e3:73:b1:c2:87:0a:26:
5e:06:46:fc:d2:ab:95:8b:60:20:ef:17:72:d3:57:
33:29:c6:e3:eb:54:fd:f3:85:ed:3f:56:0a:c9:2a:
e4:ef:de:5b:04:e6:32:53:e6:6b:60:4d:3f:06:e6:
3d:ed:87:37:b7:8e:12:63:0b:cd:84:e5:45:2f:76:
78:05:ec:9c:48:02:21:f3:21:82:a0:11:5a:a9:10:
e3:42:4a:d3:5a:01:f6:1d:65:bf:bc:44:15:87:43:
0d:9d:7e:5f:dd:e1:4e:70:7b:6d:c3:8e:81:db:68:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:E5:71:8E:0A:13:4F:D0:9F:0E:A4:9D:76:F3:AC:40:4D:4C:DA
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:18:c5:ec:59:8d:1f:a0:c9:54:19:be:00:1d:78:f7:3a:e2:
e0:09:42:04:36:0b:09:5c:2d:dd:92:c0:27:c6:6e:a5:ce:0a:
69:46:94:0f:1a:5d:b5:f2:e5:72:63:12:68:11:a2:f3:9e:5a:
fe:b8:91:9a:51:f2:2d:45:d8:fe:70:be:fe:d4:fe:dc:12:a4:
f2:60:7b:70:3d:70:5d:d9:c1:00:e2:44:91:91:08:1f:21:61:
e1:d8:da:ac:bb:a0:d3:53:c1:b0:0a:3f:e6:69:13:77:c3:ce:
95:c9:58:b2:9d:c2:a2:d6:a0:bd:ca:07:db:aa:b6:37:d4:9b:
b3:c7:46:8e:32:52:0c:d4:d2:92:da:5c:ee:48:9d:66:3c:7a:
80:f1:15:aa:24:01:6c:93:94:79:48:8f:6e:98:e2:f6:b9:1d:
e2:8e:a7:58:7c:d6:2a:22:d8:70:43:a6:32:d8:46:3a:c3:a8:
8f:1c:8e:e9:fb:2e:ad:c0:95:5c:51:4a:16:ee:f3:64:bd:04:
4a:22:8f:2a:db:5e:1c:03:1a:b0:54:1b:81:20:c7:d6:87:9a:
c3:47:ae:8a:44:31:50:e6:68:06:76:fc:0a:14:87:95:00:60:
97:26:6d:74:3e:77:be:f2:a0:eb:64:bf:3a:9a:b0:00:04:2d:
11:18:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:01 2026 by rpki-client