Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
File: WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json)
Hash identifier: cWG5M41x7HxtTSTdv3gR1S+HLBj/ZMzVew3FL6wl2sQ=
Subject key identifier: BC:B6:6E:C0:99:43:0A:03:70:65:36:E8:10:96:C0:31:5A:E5:BA:71
Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35
Certificate issuer: /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
Certificate serial: 019D3940E335BE6EFC7F28F2E08AA1FA989F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
Manifest number: 037B
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: J_yn6Pm9vKNMDRcVwbyp133TknU.roa (hash: mliXlxJfksLfLE++jqaaumKeI12AEMNdDLjQ9GlOQ2M=)
2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: oY52zE12WzcKk9pxSWhackk6+qALYm4YVrhA5QWDWOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e3:35:be:6e:fc:7f:28:f2:e0:8a:a1:fa:98:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=bcb66ec099430a03706536e81096c0315ae5ba71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:14:f3:88:cb:db:6d:05:fe:14:05:19:73:
35:45:88:47:48:59:a0:e0:fe:9d:10:d8:98:e4:98:
51:16:89:36:d0:28:50:12:2e:04:f0:25:4f:d0:26:
d5:82:92:10:ad:6b:34:03:35:38:27:67:ea:d7:52:
0b:29:53:65:2e:d5:fd:aa:3c:04:f8:84:0f:b3:9f:
6a:b9:ab:25:a1:0b:6a:18:b5:c4:2b:00:98:63:84:
cf:37:66:85:e7:55:45:b3:99:c2:a5:0b:fb:86:5f:
15:d9:be:79:92:4d:cd:3b:55:aa:79:0c:d1:62:87:
f5:a5:9b:3c:62:7e:26:4b:2f:91:2e:42:8b:df:9f:
cc:7f:fb:23:e8:2b:a0:90:83:ae:74:65:7b:a4:fe:
e3:34:b6:f0:63:9b:a7:17:24:c8:50:92:ea:93:be:
fd:aa:bb:57:41:6f:b2:76:ff:ea:b9:b9:f2:19:89:
e6:74:43:ef:6b:3e:65:96:99:39:3a:54:5c:7e:de:
49:ba:70:99:01:52:66:ca:07:7d:3e:08:a3:7c:b7:
95:ed:e3:dd:f3:60:86:2b:d1:6a:98:61:8a:f1:ef:
a7:91:2e:5e:b1:38:14:44:80:d9:df:04:4a:bf:82:
21:e1:41:a1:d3:65:c6:28:e4:83:41:d1:75:c6:8f:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:6E:C0:99:43:0A:03:70:65:36:E8:10:96:C0:31:5A:E5:BA:71
X509v3 Authority Key Identifier:
keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1f:99:d4:78:87:08:cb:9c:48:5f:2c:8a:21:66:9d:24:6a:
d8:b9:f0:8f:b8:5c:0c:ea:43:4b:f8:12:ac:db:ee:e4:48:2f:
4b:87:e3:31:41:a9:f5:b6:83:5f:81:25:3f:cd:b6:b1:fb:25:
09:f0:66:65:12:ea:c1:b8:30:a4:e6:56:27:3c:43:24:70:9a:
ea:f4:a8:45:77:a5:5c:eb:30:c7:fd:43:b6:cd:20:0e:db:5e:
21:55:1b:dd:1f:5a:ce:82:7f:7d:46:3a:3b:ce:03:22:7b:5a:
40:d4:95:b1:21:55:8f:23:ab:8d:15:a9:0b:6f:11:f5:43:06:
ee:b5:fd:3f:63:e0:e8:77:3e:21:fa:37:2f:f2:cd:9a:01:fb:
6d:82:61:ee:e0:0c:d8:74:f6:dc:0d:5a:13:de:f6:7b:79:4e:
f1:29:97:0c:8a:17:0a:db:b7:03:50:4b:47:a9:d6:aa:46:9b:
9b:1a:81:80:ce:28:cf:1f:a1:39:8a:f0:8a:b2:f9:e8:69:c2:
be:cc:36:3b:97:39:92:e2:d7:92:ad:06:82:72:55:28:8e:02:
5e:0a:ed:55:c6:62:43:cf:4d:55:cd:61:86:d9:0e:6c:9f:f8:
73:36:b4:37:33:0b:81:02:db:07:d0:91:15:14:d9:76:55:22:
16:eb:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:07 2026 by rpki-client