Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: k/KmIHo8LR5ySVLZ4CwPLqZNkTWNJG+OOYDvhga1uZE=
Subject key identifier: 0E:DD:6C:D0:64:8A:35:BA:99:02:A1:8D:E1:1F:1C:CA:50:9D:50:34
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019D382E6F6B9AEC1F8D6A1FEE18C8FB7CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 1696
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: 0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa (hash: kZAZ+FtKOmvNUJYXZ93DTfdC6kgpQf3D40b45bZU8Bg=)
2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: XQcCLl6owYQVgBQUVzknawocqbqsnYnNK3mOT/9x+Tg=)
3: hjf42_UdZaBcTmMxK9JfIjVnYF4.roa (hash: XYP9CSJ0v1KuulLYS04N8rRaMuUIS0Lpmjnr6cJWmek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6f:6b:9a:ec:1f:8d:6a:1f:ee:18:c8:fb:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=0edd6cd0648a35ba9902a18de11f1cca509d5034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3d:71:b1:3b:c1:5d:70:d9:82:73:53:66:a9:
47:84:db:4a:e3:54:1c:c6:60:72:0f:41:79:97:0c:
f4:b4:58:fd:cc:d3:ec:fb:c1:46:89:63:89:8b:13:
fb:b4:ab:93:31:d2:cc:1b:bf:99:b9:46:e6:8a:a1:
4c:9c:1a:51:ab:c7:17:c8:0e:31:93:dd:51:9e:74:
d3:83:b6:41:50:af:93:53:11:7d:92:cd:4c:11:81:
65:9c:99:f1:19:f1:3d:f1:c6:68:81:ea:06:a2:4b:
57:35:a9:06:79:05:de:e1:74:b1:c0:0f:26:1b:59:
f5:32:46:2f:c5:e6:fe:27:a4:86:48:9d:4c:af:20:
a3:69:81:2c:7a:0c:47:29:34:ce:ee:bd:f4:a3:40:
78:8a:23:b9:c7:9d:58:bd:71:9d:bd:95:a1:f0:01:
5c:8c:87:9c:7f:ac:3c:54:63:ba:03:81:73:79:ce:
5a:0d:32:bd:a6:87:f7:75:f7:2a:83:08:9e:40:0c:
5d:f7:11:de:82:b7:f9:03:e4:61:f1:15:7f:b1:d0:
85:2b:5d:ca:08:95:24:90:a4:6f:40:f4:58:59:d9:
fd:1d:4a:c0:a9:07:9a:78:35:1b:ed:ad:7b:33:8d:
71:a4:99:28:15:c0:b5:37:1b:7b:a4:17:05:ff:4a:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:6C:D0:64:8A:35:BA:99:02:A1:8D:E1:1F:1C:CA:50:9D:50:34
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2b:3a:52:ed:57:53:85:a3:d5:96:a8:b3:36:ca:ce:0c:e8:
89:d7:eb:9f:1e:6b:1b:79:c4:4f:bd:5f:93:02:e1:1f:20:1e:
70:eb:dc:c9:47:a4:be:2e:3e:d7:f3:6e:b5:4a:f7:39:b7:45:
df:26:01:cb:28:70:bd:2c:79:07:77:68:b8:d8:35:55:cb:54:
45:c8:c2:f5:18:b0:3e:42:7d:88:96:e5:57:f0:df:bd:a3:d6:
d2:7b:25:22:6f:9e:19:4f:1b:2c:d1:e1:91:42:72:be:b9:8d:
fb:b9:c3:d2:f1:59:48:91:7f:4e:c9:0e:31:f9:ec:c3:95:ee:
5b:ba:ba:f0:a7:7a:ae:aa:51:4f:c2:9c:c4:30:db:5e:b7:c5:
0a:05:52:ab:33:2a:8e:ea:51:e6:17:a6:0e:ed:af:21:c1:f6:
0c:54:cd:26:af:be:84:7d:4b:6c:8c:1a:6a:41:22:a5:50:16:
f9:16:b1:6c:6f:f2:62:b1:4d:d4:3f:10:bc:c0:53:17:ab:a4:
ec:4c:b0:fd:a0:a8:0b:d4:a1:e6:8e:bc:0b:27:ee:56:7e:2b:
17:1f:ac:f5:7b:c9:f7:fd:9f:a4:33:a5:42:f3:84:30:a3:2f:
71:b5:54:43:d3:37:7b:0f:d7:ce:30:64:22:4a:dd:64:88:02:
08:82:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:17 2026 by rpki-client