Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier: gUZ+l1b64o/rLNHXh3Gux+7sVAFhwgAEt/zIUdp/uE8=
Subject key identifier: 65:42:74:5F:65:0C:B6:41:F5:C3:95:91:B8:CB:90:63:56:81:80:0B
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 019D37F795CE4B8E496666199B4F60BFD764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number: 0528
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: SRYxzczEXmhncJE8vjovYVerhU0.roa (hash: f3BIypX5l7UFnGCWgZnN4C06Az0MJBR1k/+NKCJisp4=)
2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: pIOkr849ZCw7k2wkuFrS1gbef03i+qYRCu+UvuIUNw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:95:ce:4b:8e:49:66:66:19:9b:4f:60:bf:d7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=6542745f650cb641f5c39591b8cb90635681800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:56:57:be:08:0f:8b:7c:8c:6d:26:fe:5b:
33:36:cb:ae:90:35:c3:76:5a:2f:08:fd:18:3e:c3:
ae:cd:ee:bd:ed:74:ce:44:e3:8e:eb:87:5b:7e:91:
b7:fa:a0:c3:e4:b7:a8:18:28:69:63:b2:e0:cb:ce:
8d:29:51:c6:a8:cb:eb:4a:0a:87:69:06:04:f0:fe:
cd:c1:10:46:46:64:29:64:91:88:81:77:8a:8b:cb:
18:7c:2f:f1:16:9a:6b:84:b0:54:af:c5:7e:0c:a8:
98:ee:8b:91:8d:04:79:17:79:07:bf:5e:12:11:e2:
ca:f2:48:57:ef:44:22:88:64:81:31:c2:f5:29:0c:
ac:91:6c:05:e2:ba:b3:5e:b1:84:d7:d6:3e:1b:e1:
ad:33:e4:5b:55:10:04:61:8b:c3:b6:5c:21:2a:48:
8a:ce:08:79:81:e2:43:eb:35:e1:a2:32:f8:55:93:
d4:fa:3f:d5:7f:e3:29:36:5f:5c:ab:99:ec:a6:6e:
7b:34:93:3d:28:20:2e:ee:7c:e5:ed:46:71:61:49:
db:dd:50:77:c8:c5:8d:6d:46:4c:43:5b:59:46:42:
bf:75:78:26:44:9d:4f:f8:85:6d:bc:ff:bf:4c:64:
58:dc:b9:84:6f:8c:36:2a:3a:1a:ae:6b:62:73:ce:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:74:5F:65:0C:B6:41:F5:C3:95:91:B8:CB:90:63:56:81:80:0B
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f5:dc:56:0c:03:a6:72:07:03:96:31:51:7f:04:56:51:43:
b0:aa:e0:6f:89:f2:5a:b8:7c:c5:9d:79:36:9b:97:40:30:1f:
6b:3e:d1:15:0b:ac:d2:c5:c6:39:47:b9:ea:d0:cf:8c:6a:f6:
f7:3b:8c:77:d3:e6:34:64:20:e1:08:19:aa:c1:54:f1:6e:96:
17:36:78:62:fd:4f:d9:56:d0:4e:61:2d:10:fb:4f:02:24:d2:
5e:64:c3:19:38:ff:5e:09:5a:cf:f2:d4:db:11:64:0a:57:0b:
fb:3e:33:cf:21:9f:15:a1:f5:46:2a:78:58:fd:17:91:ab:d8:
bb:50:08:0c:3b:17:7b:74:24:ec:06:5d:b7:78:6e:56:0e:c8:
4d:81:0a:e8:31:3e:a2:a3:b9:d9:36:dc:6d:a6:df:89:e2:6b:
fa:0b:13:f7:b8:f6:14:be:78:af:5e:f2:b1:b3:42:a5:3f:70:
f7:06:bf:71:02:bb:5c:12:c5:30:6a:07:bf:cf:d1:05:1a:f5:
d3:d2:93:36:e6:05:b1:da:40:50:44:83:26:ff:a7:55:f1:3e:
cf:42:0c:a1:48:b7:bd:b3:39:b2:6c:21:ad:e0:a5:cc:c0:9a:
d8:0a:e8:28:a7:4d:86:21:45:7c:f4:84:f4:ab:26:30:19:5f:
4d:48:17:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0395XOS45JZmYZm09gv9dkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjJiMmY2MTEzYmE0MzBmNzJlNTU0NDViNWM3ODQ5ZGM3
Y2ZhZWQwHhcNMjYwMzI5MDUwMTA1WhcNMjYwMzMwMDUwMTA1WjAzMTEwLwYDVQQD
Eyg2NTQyNzQ1ZjY1MGNiNjQxZjVjMzk1OTFiOGNiOTA2MzU2ODE4MDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrNWV74ID4t8jG0m/lszNsuukDXD
dlovCP0YPsOuze697XTOROOO64dbfpG3+qDD5LeoGChpY7Lgy86NKVHGqMvrSgqH
aQYE8P7NwRBGRmQpZJGIgXeKi8sYfC/xFpprhLBUr8V+DKiY7ouRjQR5F3kHv14S
EeLK8khX70QiiGSBMcL1KQyskWwF4rqzXrGE19Y+G+GtM+RbVRAEYYvDtlwhKkiK
zgh5geJD6zXhojL4VZPU+j/Vf+MpNl9cq5nspm57NJM9KCAu7nzl7UZxYUnb3VB3
yMWNbUZMQ1tZRkK/dXgmRJ1P+IVtvP+/TGRY3LmEb4w2Kjoarmtic8637wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVCdF9lDLZB9cOVkbjLkGNWgYALMB8GA1UdIwQY
MBaAFFiysvYRO6Qw9y5VRFtceEncfPrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YjM2OWYtYjA2ZS00YWYwLTlhY2It
YTRjY2NlZjhjNGE4LzEvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83YjM2OWYtYjA2ZS00YWYwLTlhY2ItYTRjY2NlZjhjNGE4
LzEvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfXcVgwD
pnIHA5YxUX8EVlFDsKrgb4nyWrh8xZ15NpuXQDAfaz7RFQus0sXGOUe56tDPjGr2
9zuMd9PmNGQg4QgZqsFU8W6WFzZ4Yv1P2VbQTmEtEPtPAiTSXmTDGTj/Xglaz/LU
2xFkClcL+z4zzyGfFaH1Rip4WP0XkavYu1AIDDsXe3Qk7AZdt3huVg7ITYEK6DE+
oqO52TbcbabfieJr+gsT97j2FL54r17ysbNCpT9w9wa/cQK7XBLFMGoHv8/RBRr1
09KTNuYFsdpAUESDJv+nVfE+z0IMoUi3vbM5smwhreClzMCa2AroKKdNhiFFfPSE
9KsmMBlfTUgXEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:54 2026 by rpki-client