Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: x0GvfNGnsSCbUOPw/9NAFkslA+LyD0PByinQct7aX8g=
Subject key identifier: 75:95:5D:6A:95:DD:24:A3:BC:75:27:D1:E6:DB:C3:9D:07:C7:74:BB
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019D394097A00E7D9C017A9F90EE6271F183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 120E
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: r4M2q3jKkBgu+3Yem9lOR7GkDtEtaO7ukInLKXsSWGE=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:97:a0:0e:7d:9c:01:7a:9f:90:ee:62:71:f1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=75955d6a95dd24a3bc7527d1e6dbc39d07c774bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:76:ee:64:56:41:c7:e6:da:6c:55:8a:ba:
76:0c:f1:a3:6f:7c:f6:64:e8:be:1f:4e:1e:d5:ef:
a3:43:aa:3f:ec:08:75:47:59:f7:5b:42:51:b6:f8:
9a:cc:f5:5b:50:fa:f2:db:20:f9:29:27:28:42:5a:
12:19:8c:a1:6a:48:1b:ff:c6:f4:90:be:7f:3a:8c:
75:31:e2:6f:a3:c6:de:bb:6b:14:e1:f4:c1:d6:8e:
be:4f:a4:92:22:f5:21:87:aa:c1:ef:62:71:95:b1:
0c:57:96:1f:7e:6c:a7:a1:1f:e1:52:3c:fc:0a:ee:
12:79:22:30:8d:80:a4:c2:42:ab:14:88:0e:70:17:
ab:a7:83:0c:5a:2d:bc:a0:61:05:40:28:16:0c:0c:
e6:aa:f8:05:2d:2f:7d:d5:9b:88:c2:69:09:75:05:
8a:08:24:78:ed:63:59:f9:7f:77:1c:45:4c:38:cb:
dc:f5:b5:de:e8:3b:75:a0:4c:e4:4c:9d:6f:08:44:
88:b4:37:fa:6b:fb:80:eb:c0:80:79:ba:4c:c1:05:
08:fb:dd:b5:da:77:21:92:60:d4:5e:89:19:99:ad:
ed:df:81:e2:cc:58:45:20:2b:5b:e5:2d:9f:64:5a:
22:ce:76:70:55:62:5e:f3:3d:86:4e:cc:57:79:21:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:5D:6A:95:DD:24:A3:BC:75:27:D1:E6:DB:C3:9D:07:C7:74:BB
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a2:26:f2:5e:e6:2b:11:3c:64:fa:10:52:19:03:6d:48:c2:
75:d0:9a:88:8e:a3:22:b6:03:75:14:10:0a:54:16:ad:e2:10:
02:f8:fa:cf:42:a6:3e:1f:30:76:55:ac:fd:fd:55:15:3f:2f:
d7:93:45:0d:ab:2b:55:d6:eb:69:65:92:3d:2b:9e:3b:59:cb:
45:12:d2:8c:e1:51:84:23:89:cd:ab:d3:e0:d1:f4:c4:a5:4f:
8c:91:3a:d3:e8:9f:05:63:30:96:a6:ff:93:84:aa:bb:90:b0:
83:f4:66:c5:68:f4:4b:bc:27:ac:40:d5:f8:cd:55:be:ff:5d:
8d:e6:22:9e:7f:ee:97:6f:89:5e:51:6b:78:df:e5:a4:c2:e8:
79:48:f2:70:48:ef:92:d4:04:2e:a5:34:6c:c0:09:81:74:42:
55:fc:13:93:18:62:7e:32:7d:03:be:b5:16:ec:29:24:70:5e:
d8:1d:8a:bc:eb:06:dc:05:43:c5:fd:98:8e:2a:00:fa:b4:5b:
2a:6c:f5:4b:68:ab:46:77:fc:d6:80:79:62:ea:a2:f5:b5:af:
b4:e3:4e:65:d9:53:54:ce:87:1d:45:32:95:b8:c0:62:eb:0c:
f9:8d:b8:53:be:59:75:cb:ba:15:f3:19:3d:88:29:78:5f:e4:
b3:4e:11:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJegDn2cAXqfkO5icfGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3
MmViZWYwHhcNMjYwMzI5MTEwMDI3WhcNMjYwMzMwMTEwMDI3WjAzMTEwLwYDVQQD
Eyg3NTk1NWQ2YTk1ZGQyNGEzYmM3NTI3ZDFlNmRiYzM5ZDA3Yzc3NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vJ27mRWQcfm2mxVirp2DPGjb3z2
ZOi+H04e1e+jQ6o/7Ah1R1n3W0JRtviazPVbUPry2yD5KScoQloSGYyhakgb/8b0
kL5/Oox1MeJvo8beu2sU4fTB1o6+T6SSIvUhh6rB72JxlbEMV5YffmynoR/hUjz8
Cu4SeSIwjYCkwkKrFIgOcBerp4MMWi28oGEFQCgWDAzmqvgFLS991ZuIwmkJdQWK
CCR47WNZ+X93HEVMOMvc9bXe6Dt1oEzkTJ1vCESItDf6a/uA68CAebpMwQUI+921
2nchkmDUXokZma3t34HizFhFICtb5S2fZFoiznZwVWJe8z2GTsxXeSEQSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWVXWqV3SSjvHUn0ebbw50Hx3S7MB8GA1UdIwQY
MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt
OWM3MDhkYWMxZDkyLzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky
LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKIm8l7m
KxE8ZPoQUhkDbUjCddCaiI6jIrYDdRQQClQWreIQAvj6z0KmPh8wdlWs/f1VFT8v
15NFDasrVdbraWWSPSueO1nLRRLSjOFRhCOJzavT4NH0xKVPjJE60+ifBWMwlqb/
k4Squ5Cwg/RmxWj0S7wnrEDV+M1Vvv9djeYinn/ul2+JXlFreN/lpMLoeUjycEjv
ktQELqU0bMAJgXRCVfwTkxhifjJ9A761FuwpJHBe2B2KvOsG3AVDxf2YjioA+rRb
Kmz1S2irRnf81oB5Yuqi9bWvtONOZdlTVM6HHUUylbjAYusM+Y24U75Zdcu6FfMZ
PYgpeF/ks04RIA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:45 2026 by rpki-client