Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: JPBQvzo4mcUkvBLwvWNQF+mE0daXb+Ig9+wp76Di9ow=
Subject key identifier: 29:12:BD:0E:85:01:B2:19:C4:F7:53:F0:62:80:76:5D:21:2C:F7:17
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 019D3789083CAED1B2B7D3E65AC58B2C9DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 03:00:20 +0000
Manifest this update: Sun 29 Mar 2026 03:00:20 +0000
Manifest next update: Mon 30 Mar 2026 03:00:20 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: KSFZvCKAlpxUKN//Ohg0eTUzsoKCEhOy1mhblI6EujU=)
2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:08:3c:ae:d1:b2:b7:d3:e6:5a:c5:8b:2c:9d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Mar 29 03:00:20 2026 GMT
Not After : Mar 30 03:00:20 2026 GMT
Subject: CN=2912bd0e8501b219c4f753f06280765d212cf717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:89:ff:c7:ab:34:e6:26:a5:b4:1d:f1:e3:
fc:99:c0:cd:2a:1d:c0:f7:7d:b3:d9:6f:ee:50:78:
01:7e:14:8d:da:70:01:25:77:77:89:f2:26:13:62:
56:78:2c:d2:12:45:3b:51:c4:aa:2c:ad:8b:88:28:
9e:1b:3c:db:dc:80:a1:f7:c9:a8:30:36:60:dc:ff:
fc:3c:4f:71:f7:1b:e7:f7:76:5a:3a:ab:a9:ca:3b:
d1:bf:ed:33:aa:d8:9e:a0:02:ff:f2:58:98:91:d8:
99:2d:27:07:83:16:39:42:d3:cc:bc:f4:61:2b:92:
2f:72:7c:0a:95:cb:aa:4f:bc:76:94:8c:34:21:4e:
d8:c4:84:0d:69:e8:ac:22:a4:9f:51:cd:b7:12:cf:
e7:ce:41:03:c5:09:f8:c1:39:39:6e:11:6b:44:c3:
3b:e9:ec:f7:bc:c8:4d:26:21:ff:de:90:34:77:81:
9e:b0:dd:58:51:b0:8d:5f:f8:a0:fd:db:09:90:53:
93:59:d0:ad:21:a9:c0:d6:e4:65:93:99:04:3a:4c:
7e:14:9d:4b:98:92:49:a1:e2:5b:00:f9:13:b8:45:
34:65:fb:84:9f:9d:d8:dd:69:a9:3f:b8:0f:a7:29:
50:2c:97:dc:ed:ee:72:62:71:26:c5:dd:b7:38:ba:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:12:BD:0E:85:01:B2:19:C4:F7:53:F0:62:80:76:5D:21:2C:F7:17
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:73:9b:9f:c5:fc:d3:69:93:e2:e8:8e:64:de:04:56:68:5c:
67:9b:38:c5:e5:97:47:78:9d:b0:79:bc:ee:f5:51:4e:f6:46:
96:e3:e8:d3:79:06:35:f6:6f:cb:59:3c:98:4e:58:c3:7a:f5:
ab:71:68:f6:c2:9e:be:90:52:26:0e:ec:11:64:0e:65:4f:4f:
f1:e2:1b:ae:79:08:1f:51:b7:f3:1a:ee:31:15:b8:4f:0d:a4:
58:e7:e2:a4:ee:51:7b:84:bc:b6:58:ff:3d:53:1c:5a:45:f8:
e8:35:9a:08:c2:86:b3:9d:d6:08:7e:20:1b:fa:49:ae:f0:21:
fa:cf:f0:48:72:f3:2a:d7:83:36:d2:61:56:7d:87:1c:69:fc:
d9:f2:1d:68:6a:ca:e7:fa:95:dc:5a:05:44:10:7a:5e:8e:2c:
4d:9d:01:44:59:4e:8a:e3:37:d2:83:2a:8b:9b:38:46:9f:f6:
f6:ad:7f:57:1e:39:23:94:cc:60:bf:0a:35:fe:c3:08:58:c7:
4f:04:35:33:02:55:a0:16:67:0d:d7:d6:8f:1e:d7:88:b9:4a:
c3:cf:3c:3f:0e:1a:e6:35:50:93:59:5a:73:1e:cc:9f:ac:03:
1e:bf:62:77:14:f5:62:ee:15:9c:14:c9:9d:59:04:6b:fd:77:
0e:a7:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:08 2026 by rpki-client