Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: Om42KB06ZUri4mM+XnAsPA7c/svR6duHum7fnzib09s=
Subject key identifier: A5:0C:EA:AA:FB:C4:1F:9E:4F:1C:C2:38:7F:4A:E1:6C:BF:C6:15:C2
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019D3977BB82931A3196F2CE24087A947ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0FC4
Signing time: Sun 29 Mar 2026 12:00:41 +0000
Manifest this update: Sun 29 Mar 2026 12:00:41 +0000
Manifest next update: Mon 30 Mar 2026 12:00:41 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: nPJkDEkTLT4qnKVVTY8D4r7RF+eOhfLj+lDaCZeUXec=)
2: ZE4_DBxQwALbQp4-Ya_aM_mhrl0.roa (hash: Lvmxym8DA/HbdXnZJmH0a7Rf9SHSGMaHbfhmON/p9SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:bb:82:93:1a:31:96:f2:ce:24:08:7a:94:7a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Mar 29 12:00:41 2026 GMT
Not After : Mar 30 12:00:41 2026 GMT
Subject: CN=a50ceaaafbc41f9e4f1cc2387f4ae16cbfc615c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:89:c0:d9:2f:54:88:99:3a:04:e9:61:56:
71:0e:ca:a3:2d:e7:ca:db:05:0c:78:0a:b6:c3:4c:
69:58:57:a1:78:f5:e5:a5:9b:d8:82:bf:d2:92:81:
65:3a:0e:22:7e:de:79:19:96:89:30:ee:13:a4:7b:
e7:ee:8b:dc:89:16:a0:4c:6c:0f:eb:46:69:20:d7:
95:db:17:69:36:71:42:3e:a9:78:b3:d8:52:57:f2:
4b:62:d3:41:9f:c6:23:b9:9a:8f:cc:ff:d8:f3:39:
c4:a9:a9:b3:c9:3e:ac:4a:1f:11:18:2c:3c:e8:7f:
9d:67:c4:b4:de:5d:c6:ad:86:5a:1f:61:3e:e8:61:
0c:31:87:d0:f5:1a:b9:fc:6d:62:8b:c8:85:4e:5b:
73:62:92:fc:3a:82:d0:e2:84:0a:4f:f0:85:b6:5f:
29:50:fd:2e:e1:ef:a6:4f:03:59:46:06:77:f2:e8:
82:09:bd:0e:df:9e:14:c4:c1:62:f8:c0:50:95:26:
04:be:6d:d4:5a:5d:3c:21:e8:74:f5:02:31:0b:14:
e8:30:62:ae:e3:b0:32:fb:00:ae:b4:f5:5d:a9:c3:
d4:47:b4:7e:73:2b:7c:60:a8:7f:a8:32:dd:6c:0a:
ba:9a:a5:92:f4:5f:11:c7:1b:b0:24:80:14:77:94:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0C:EA:AA:FB:C4:1F:9E:4F:1C:C2:38:7F:4A:E1:6C:BF:C6:15:C2
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:49:77:7c:77:09:c2:f0:1e:19:6f:46:27:08:3a:5b:d2:3a:
04:7e:bf:aa:87:11:aa:e6:7c:5e:02:2f:2b:53:c1:1f:b0:57:
4a:96:01:6b:24:b6:2d:bc:df:a0:6b:1e:40:12:14:a7:cb:de:
29:4d:31:dd:be:fe:d6:81:2f:30:47:ed:17:72:16:d7:1a:aa:
f6:c2:37:2b:45:18:54:2e:15:db:32:7c:aa:45:21:5f:24:a5:
d5:6d:83:0f:1e:02:a8:a4:7d:a7:f0:e3:de:fd:a6:28:5b:01:
ae:e8:b8:c8:98:2b:87:13:ac:b5:02:7c:c0:1e:42:a0:22:04:
a9:32:c1:84:36:2d:2e:42:f3:8a:00:a3:fd:e8:b8:fe:99:01:
b0:cd:fd:d3:bc:5f:65:ba:92:ab:96:7d:f4:3e:8e:78:3d:2d:
f7:38:ea:c4:8a:75:ea:a9:e9:fc:30:4b:0c:80:5d:9a:56:dc:
b4:8c:03:09:6c:a5:19:26:99:cc:09:39:c5:f9:fa:21:8f:4b:
29:58:62:2d:3e:51:e8:4d:00:2a:a8:73:f9:95:04:3f:51:56:
3e:51:b1:0f:81:76:98:9b:b2:f5:f5:fb:0a:86:d6:6e:36:c1:
9a:0e:8e:6d:bf:95:83:af:e2:15:f2:e9:88:4c:5f:ed:56:12:
2d:8b:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:04 2026 by rpki-client