Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: blfttDFX7xh7kh+VI5id7eCfAqGZSnzht7yFfpLzMyw=
Subject key identifier: F8:CE:A0:E5:03:ED:A7:ED:84:1E:49:F6:9D:CE:E7:82:3A:FF:11:0B
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 019D37F6ED3A6D54DEB25B42FDC29013B27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 0492
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: scADMf30rtnSn7du56uYcfvOzxCc9M/SoXixXpiT6bk=)
2: m5v93tUMRlQaxfIjzpbnrJ9Lohk.roa (hash: 1uqxOdkBAdrXDzt6+/f4JBRjuvDt70ncNU0kmF4G9OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ed:3a:6d:54:de:b2:5b:42:fd:c2:90:13:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=f8cea0e503eda7ed841e49f69dcee7823aff110b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:86:25:8c:34:03:96:12:40:b9:52:9a:1a:
e2:90:2b:c7:31:28:dc:56:a0:4e:37:1d:9c:71:31:
aa:a8:a8:84:82:fe:55:45:b9:1c:4b:10:22:21:90:
32:8a:37:44:05:d9:f5:06:df:54:2a:7b:8d:52:a1:
34:f6:a2:c5:51:72:4e:de:b0:e1:47:b2:92:18:88:
74:0f:15:5e:db:29:dd:9f:53:ee:76:9c:f1:db:c9:
07:7e:d9:a7:6d:9d:6b:b0:4a:77:17:aa:ee:df:1f:
54:d6:0b:53:00:41:db:bc:66:67:9f:e9:87:50:f6:
fb:8b:5c:f3:4e:d8:17:15:11:13:b7:64:7c:5d:c2:
8a:41:b9:41:07:6c:d2:10:55:2d:2a:fe:f4:2f:d7:
42:6f:41:0e:0f:3f:f6:3b:a7:22:82:c5:9b:68:9f:
03:7f:71:bf:9e:fa:21:52:3f:82:1e:87:84:eb:d3:
83:44:a0:fa:5f:ee:4b:99:92:ed:ef:e4:48:0d:ee:
46:cb:c3:11:fd:d9:e4:26:34:11:fd:34:e4:fb:07:
6b:b8:31:10:f0:26:0c:17:ea:09:1a:ee:6b:90:93:
08:84:c9:d8:f6:d2:73:a1:91:d0:61:0d:76:9d:a5:
ea:57:1f:59:60:fc:e4:72:a7:0f:cf:9f:d2:84:f9:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CE:A0:E5:03:ED:A7:ED:84:1E:49:F6:9D:CE:E7:82:3A:FF:11:0B
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c2:da:55:3b:e3:ca:2a:fc:ea:bb:25:a3:eb:49:2c:9f:d6:
d6:1a:8c:80:d7:0c:a0:30:33:75:67:5a:c0:a6:cb:8b:a9:79:
1f:30:46:5b:29:9a:21:43:0c:3b:dd:56:69:1a:90:b3:54:49:
d7:4a:04:73:b1:e1:23:fe:02:77:d5:78:25:81:12:58:c3:2f:
fd:f6:76:70:66:20:a1:5f:86:f4:32:e2:24:b0:19:a9:e3:1b:
ea:6c:e2:8a:b4:2c:a1:ae:93:43:91:4b:bf:b1:1a:a0:61:fa:
da:b4:cb:86:28:28:9b:bd:55:50:59:22:99:d4:c6:62:1d:e6:
da:dd:38:a4:51:ed:88:6e:f2:29:dd:4e:e1:55:97:f7:73:b9:
c8:ce:0c:68:93:70:5c:80:69:85:0a:f5:71:4e:22:e1:7e:89:
f5:4b:70:d4:59:0b:1b:ff:db:ac:bc:5c:3a:14:fe:70:bd:0f:
ad:92:a0:96:1f:74:c5:bb:29:2b:aa:d0:ff:d8:ce:ba:6c:12:
76:57:7f:27:1b:93:30:74:ea:da:a7:ea:2b:44:ec:3e:34:74:
f8:7f:38:20:25:1e:57:1e:7e:14:9a:e6:5c:8b:d6:de:c1:93:
82:08:4f:0c:b2:94:94:3b:22:44:52:23:08:2e:6b:65:3e:55:
0d:41:0a:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039u06bVTesltC/cKQE7J9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2VkYmE2N2E0NWI3MzdkOGFkMGY3YTc4NGMzNTBkODZk
NjcxMTgwHhcNMjYwMzI5MDUwMDIyWhcNMjYwMzMwMDUwMDIyWjAzMTEwLwYDVQQD
EyhmOGNlYTBlNTAzZWRhN2VkODQxZTQ5ZjY5ZGNlZTc4MjNhZmYxMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9CGJYw0A5YSQLlSmhrikCvHMSjc
VqBONx2ccTGqqKiEgv5VRbkcSxAiIZAyijdEBdn1Bt9UKnuNUqE09qLFUXJO3rDh
R7KSGIh0DxVe2yndn1Pudpzx28kHftmnbZ1rsEp3F6ru3x9U1gtTAEHbvGZnn+mH
UPb7i1zzTtgXFRETt2R8XcKKQblBB2zSEFUtKv70L9dCb0EODz/2O6cigsWbaJ8D
f3G/nvohUj+CHoeE69ODRKD6X+5LmZLt7+RIDe5Gy8MR/dnkJjQR/TTk+wdruDEQ
8CYMF+oJGu5rkJMIhMnY9tJzoZHQYQ12naXqVx9ZYPzkcqcPz5/ShPkCpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjOoOUD7afthB5J9p3O54I6/xELMB8GA1UdIwQY
MBaAFFjO26Z6Rbc32K0PenhMNQ2G1nEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWIt
NzBjNzcwYjEwODdiLzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWItNzBjNzcwYjEwODdi
LzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsLaVTvj
yir86rslo+tJLJ/W1hqMgNcMoDAzdWdawKbLi6l5HzBGWymaIUMMO91WaRqQs1RJ
10oEc7HhI/4Cd9V4JYESWMMv/fZ2cGYgoV+G9DLiJLAZqeMb6mziirQsoa6TQ5FL
v7EaoGH62rTLhigom71VUFkimdTGYh3m2t04pFHtiG7yKd1O4VWX93O5yM4MaJNw
XIBphQr1cU4i4X6J9Utw1FkLG//brLxcOhT+cL0PrZKglh90xbspK6rQ/9jOumwS
dld/JxuTMHTq2qfqK0TsPjR0+H84ICUeVx5+FJrmXIvW3sGTgghPDLKUlDsiRFIj
CC5rZT5VDUEKdg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:14 2026 by rpki-client