Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
File: WRoP7x77ru2z0o1Dnz1cz639iHM.mft (raw, json)
Hash identifier: aD0H078q7WgVmLQ42tSztL17Uaz9hAYOfka0GM67gzQ=
Subject key identifier: 04:CD:A0:14:21:D4:2E:53:C1:71:A8:49:AE:DF:78:3A:BB:48:07:B6
Authority key identifier: 59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
Certificate issuer: /CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Certificate serial: 019D382E08394BE4813653433C2A661C0CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: WRoP7x77ru2z0o1Dnz1cz639iHM.crl (hash: TmoH+1hVEH+YX4hl1KLoz8GTMIrba0UFTjAi/Oc2coI=)
2: xYWkAifKgbzMwHPH9ChNEY9e4iM.roa (hash: Bz4T95O1mfOExGB93chx5fz5CwKmhmSQkr8xG9olHYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:08:39:4b:e4:81:36:53:43:3c:2a:66:1c:0c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=04cda01421d42e53c171a849aedf783abb4807b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:78:15:c7:2d:08:8c:f2:bd:45:57:a1:84:
9b:60:0e:ba:91:ee:fe:52:de:3d:be:20:32:ca:d6:
62:0b:09:63:fe:37:10:d6:c8:3a:e4:db:90:35:26:
d4:f1:cd:c4:4f:08:02:f4:6f:a1:8a:1e:57:99:4e:
aa:e2:a0:97:be:75:72:51:c3:e2:77:69:72:7f:96:
e2:06:8b:71:d5:e6:a2:3b:3c:10:2d:1e:b1:d3:9d:
4e:e6:db:28:8a:55:c1:33:0f:77:30:80:22:7b:a1:
98:11:e4:11:28:38:2a:f2:c0:d7:b3:2a:f3:5f:d9:
18:05:3e:17:e7:73:cb:f1:fe:2b:13:cf:f6:49:b0:
04:01:af:b9:87:4d:3e:28:9a:0c:d8:85:1e:29:63:
e8:90:c9:09:f8:df:79:8c:76:f3:d4:c2:75:87:f4:
3a:6d:34:34:49:1c:e4:c5:98:0a:b6:01:ad:9b:6d:
2b:62:15:20:2d:14:de:0d:fe:c9:de:e7:c7:15:07:
d2:93:e0:6a:45:38:97:7d:0e:76:91:ea:88:04:53:
3e:57:f9:36:5f:dd:0a:48:14:9d:51:bb:1e:e3:2d:
e0:3a:38:0f:63:31:60:60:f0:40:9e:db:1b:96:85:
d3:9b:14:13:8f:fa:2a:b6:c6:25:b3:2b:64:af:0c:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:A0:14:21:D4:2E:53:C1:71:A8:49:AE:DF:78:3A:BB:48:07:B6
X509v3 Authority Key Identifier:
keyid:59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:3b:96:13:b9:31:f0:4a:a1:f4:8f:c7:86:b3:fd:5b:1d:
3d:cb:3c:e8:40:4c:a3:90:57:46:f4:35:e1:3c:0b:d5:23:fa:
16:fa:54:a2:9a:e1:dc:e8:95:f9:81:80:41:1b:84:54:a5:67:
91:da:bb:5f:09:a7:b9:46:6a:c2:53:aa:92:b5:d7:bf:76:0b:
35:e3:01:27:17:43:40:d3:8b:23:29:09:4d:fa:e8:28:20:a9:
ae:05:e9:5d:3a:ad:fd:02:65:4b:63:58:db:1b:3c:51:05:d7:
53:ee:27:6a:2e:51:9f:7d:66:cb:ad:14:fc:15:81:ce:0b:c3:
70:65:55:b4:01:d4:30:30:07:43:b6:ff:9f:4a:4b:35:b2:18:
3b:a3:b1:02:ff:48:5a:6a:23:bf:0a:fc:6f:df:7b:93:68:93:
de:06:6a:71:ca:b4:5b:37:68:1c:c5:89:66:52:ed:f5:b4:13:
bc:35:15:70:e6:61:26:9f:51:3a:7c:6d:78:43:93:bc:75:0f:
62:f0:84:e9:ca:6c:9c:13:03:ac:65:19:c6:26:31:57:12:ce:
0c:b2:a7:cd:c1:7b:3a:2d:ea:2d:2a:40:6f:60:11:62:11:ff:
96:ef:07:8a:ea:c4:ed:94:cc:6a:15:bd:6a:06:1e:47:ed:09:
1b:67:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:32 2026 by rpki-client