Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: sLIMdA9Gkj/URcgRVl3CSQ0FNhelA1Ra4btqbOO8Jd0=
Subject key identifier: 6B:5A:02:32:0E:08:45:19:BD:EB:A9:82:50:70:F3:77:5B:DF:F1:DD
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 019D39098961DD999479417AFB36D31D878F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0E05
Signing time: Sun 29 Mar 2026 10:00:19 +0000
Manifest this update: Sun 29 Mar 2026 10:00:19 +0000
Manifest next update: Mon 30 Mar 2026 10:00:19 +0000
Files and hashes: 1: hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa (hash: vntZWOVkcSUsnEymKfN5wS2x8DI+HCyMmnVf/ey0knI=)
2: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: R0N5s/bV1q/2mjM2gPcInDRzcNuYo0qGoc5lFZTay+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:89:61:dd:99:94:79:41:7a:fb:36:d3:1d:87:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Mar 29 10:00:19 2026 GMT
Not After : Mar 30 10:00:19 2026 GMT
Subject: CN=6b5a02320e084519bdeba9825070f3775bdff1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:c0:67:d3:8d:01:ee:9b:82:3c:7a:54:6c:
f1:76:61:a3:e4:4c:c4:04:75:49:48:b5:eb:5f:5a:
e9:eb:4e:10:2e:d7:da:3d:39:b8:4c:d5:dd:b2:04:
31:c3:48:a9:52:fc:bd:79:15:eb:41:d0:8d:a2:4d:
42:ce:82:f6:6e:05:7c:cf:b9:4d:58:d9:ec:fd:56:
e0:9d:c9:8d:f7:b3:42:ca:6e:38:55:ef:7b:ca:8e:
2b:a4:b2:2e:19:b5:8d:00:9a:6a:a6:59:4a:5f:37:
6c:fc:bf:13:97:74:c0:c4:9e:f7:f4:16:0a:2c:7e:
4b:ee:9f:99:99:70:f2:59:45:1a:a7:f6:fa:f0:84:
92:b3:c9:6f:91:f5:41:7a:5c:81:df:1a:d7:a0:fd:
3b:be:70:d9:db:2f:93:ec:fd:b3:66:ca:97:9c:4c:
50:e0:18:fd:4e:19:0c:e2:05:f6:58:07:4a:e1:20:
f2:36:4d:48:c9:dd:1b:32:fd:47:85:2d:08:31:2b:
a7:16:a9:07:f9:6a:47:68:39:6d:07:b4:5b:2b:02:
c4:f4:3a:05:a8:3d:14:81:9c:30:e6:64:23:9f:ce:
ca:75:3f:ee:b2:48:97:87:bd:7e:07:af:4c:8b:77:
94:fb:35:71:87:3d:ab:82:1f:cc:67:81:54:9a:b4:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5A:02:32:0E:08:45:19:BD:EB:A9:82:50:70:F3:77:5B:DF:F1:DD
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:91:d1:42:6a:46:eb:47:06:45:6b:cc:44:7f:12:13:69:22:
fb:b8:ff:f9:14:95:69:03:d8:eb:4c:f9:34:c1:17:36:20:93:
54:06:f7:c3:d1:b7:8d:01:e2:0d:2f:33:c4:bd:81:58:6f:1e:
31:12:88:5a:db:7a:d0:c7:14:40:6b:72:98:f0:d3:29:bd:d1:
63:8e:00:7d:25:1f:83:a2:63:2a:b2:5f:05:14:ce:46:69:c7:
d2:29:69:f6:8f:45:0f:db:d8:f0:c5:13:c2:0c:ee:2e:1c:6b:
ee:22:63:5a:34:0a:78:63:88:3d:ec:30:6c:2e:c5:4f:27:53:
c2:36:cf:15:63:63:6b:41:fc:7e:4b:ae:28:89:b5:28:00:a5:
25:2f:49:21:19:b0:0b:78:af:fe:33:6d:17:02:19:20:24:f9:
f9:bb:8a:d2:4e:41:d3:8f:c6:ed:9b:e1:90:7c:d7:16:93:a6:
f5:0a:74:b8:c4:aa:db:00:b9:3e:cb:79:42:dd:23:6e:bc:d2:
57:2d:0d:53:8d:2f:7e:67:ed:c3:3b:a6:ae:c7:3e:1a:e7:9d:
0e:e9:10:23:ee:f9:f1:eb:df:75:32:df:b9:8f:aa:f6:41:83:
cc:db:44:bf:0b:c8:fb:44:9d:95:81:d4:38:16:1d:c1:9f:f2:
f6:77:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:29 2026 by rpki-client