Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: 4UlaQeoRFPLjE7R14JV1330ugOWqycOUevXzB0FObEY=
Subject key identifier: DC:CB:86:D1:0A:7E:32:41:2E:D4:03:09:E0:9B:19:01:FE:EB:F9:BD
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019CE7B706B47B21A0A06733B80BD3231C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0973
Signing time: Fri 13 Mar 2026 15:00:57 +0000
Manifest this update: Fri 13 Mar 2026 15:00:57 +0000
Manifest next update: Sat 14 Mar 2026 15:00:57 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: 7QiM3xEP7OOhV2MOevnngwFwyEDs5BylwucyoT33KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:06:b4:7b:21:a0:a0:67:33:b8:0b:d3:23:1c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Mar 13 15:00:57 2026 GMT
Not After : Mar 14 15:00:57 2026 GMT
Subject: CN=dccb86d10a7e32412ed40309e09b1901feebf9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:9a:58:86:84:68:2a:88:51:a8:79:a8:3e:
ef:a7:b6:30:a8:3a:23:1e:1f:ae:66:ee:17:4f:a9:
05:68:b9:5b:a8:1d:3c:b1:4a:96:5c:f4:7c:4b:b6:
ca:57:9e:24:02:b5:22:c1:b5:c6:0e:9a:99:59:78:
4e:ca:60:02:f1:ba:c0:26:f0:61:ae:90:45:06:18:
87:bd:4a:c9:9e:31:4c:2d:ab:73:5f:2a:2e:fb:ca:
11:3d:7b:90:40:5b:a4:f6:01:4b:fd:22:b6:fa:24:
cf:1b:bb:c8:4c:f9:9f:10:86:74:63:f0:2c:f0:6d:
0b:f2:ad:bb:db:ff:f6:25:59:15:07:3c:15:ae:91:
50:3b:40:8d:70:53:cb:e2:a1:6b:91:cb:15:f1:0a:
d9:2d:7d:b0:24:ec:a3:9a:e2:b5:0a:9d:50:f8:a1:
ae:40:74:0d:11:bc:a6:0b:2b:27:4b:3f:07:60:4a:
80:08:2e:d3:72:27:02:79:1f:ee:fd:ba:60:5d:ad:
1f:5e:4f:a8:44:a1:46:d6:95:d4:17:40:70:f5:95:
2f:e0:9b:d4:33:07:94:29:ea:a9:fa:59:75:15:68:
13:2b:ea:dd:a9:3e:9a:5c:b9:7e:a9:10:40:98:f9:
54:3a:b2:dc:08:85:45:b9:6e:57:ba:e0:e6:b4:85:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CB:86:D1:0A:7E:32:41:2E:D4:03:09:E0:9B:19:01:FE:EB:F9:BD
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:93:4c:54:3d:19:12:bf:98:e8:4a:0f:c3:dd:d2:da:49:76:
1a:ca:6f:a0:1a:13:6e:7a:fd:a5:e2:b1:8a:13:7a:76:21:b2:
e4:f2:95:01:3a:75:90:02:6e:66:5d:99:b1:6a:36:b6:f6:5e:
15:ae:12:72:f2:b7:27:7c:28:18:9f:8d:ea:fd:57:8d:30:58:
fc:43:4c:48:e4:4b:52:e5:e0:1e:18:11:4f:39:e2:95:69:21:
11:68:43:d3:03:09:0e:dd:4e:53:25:be:a9:59:79:57:33:9e:
60:89:5e:4e:60:5a:c3:8e:ed:5a:7d:a2:78:58:6f:e9:45:9d:
6c:6a:e4:b6:84:ac:4e:76:90:75:50:ed:d0:87:e4:2a:6a:3d:
ea:19:5b:d9:ac:15:34:8f:73:5a:87:24:62:54:c4:ca:64:fb:
c3:bb:a3:ab:2e:80:02:38:ee:ec:b7:df:46:1b:69:eb:49:12:
a6:43:8e:41:f7:f2:69:89:c6:39:fa:a0:53:d7:48:02:5f:e4:
9e:fa:a4:17:26:ec:ea:01:d5:1c:cc:ad:72:46:69:4d:1a:16:
3d:5d:8f:5e:91:e4:77:3c:8f:6f:f6:13:ab:eb:9d:06:35:13:
04:d5:0e:b4:62:fc:3f:40:89:d6:7a:30:53:04:9c:94:5a:18:
93:f8:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:31:55 2026 by rpki-client