Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
File: WP-hTfKonLZwljbysLVwq8z4uEs.mft (raw, json)
Hash identifier: tzzJacK5/UDomZhi8QVErxNOB+vtN5bnkY/LkDAyy1Y=
Subject key identifier: 4A:34:79:05:D8:C5:23:B8:EA:1B:2B:47:70:81:AD:15:7D:7C:8A:E0
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial: 019D394180503C9A7B894D13DB9571043166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
Manifest number: 0E8C
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: WP-hTfKonLZwljbysLVwq8z4uEs.crl (hash: g6YYKTJENDrtK2utSIyh089miY+85j0tbQNHapxS/JU=)
2: hG4a79V4no1d_RNh-MvVJ0RwdRY.roa (hash: 03AXjMNUx9Pj+KWkDOfShpsuL+deAZNIFF1GbK07I4U=)
3: yMoUDAy0kWtoL_t9nqHRBCB21C8.roa (hash: xKN2sSx0pr5QZ1TQbINSKjUEf4y0JlgK8D6NnMM9OcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:80:50:3c:9a:7b:89:4d:13:db:95:71:04:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=4a347905d8c523b8ea1b2b477081ad157d7c8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:ab:0b:1a:8a:38:93:47:6b:a8:86:02:fe:
14:88:69:79:2e:1f:2d:3b:74:61:1e:0c:63:18:55:
29:34:a1:35:8e:61:73:13:77:f2:02:e4:37:62:cc:
ec:70:d8:25:d4:e0:60:3d:73:73:e9:6c:2d:5b:7c:
68:0f:ea:69:1e:90:1b:2f:f0:08:5f:e3:38:eb:01:
68:a5:f4:ee:42:09:08:07:1f:74:af:a8:7d:3f:e1:
88:0e:98:41:44:d9:c1:20:16:69:b9:73:75:6f:fb:
27:9e:c1:80:aa:d1:a8:7e:cf:c8:a4:4f:ff:41:7a:
dd:00:85:d0:fa:f7:da:88:39:c7:42:db:4e:b8:82:
16:04:58:8a:9c:50:6a:2d:11:bd:06:d2:14:6c:9a:
52:61:ae:5e:80:98:42:2c:38:61:7c:64:a0:f8:7e:
53:ee:1d:6b:c6:d2:55:51:2e:27:49:6d:e2:83:da:
25:ff:fa:74:41:5b:c3:00:ce:77:fe:d7:2c:68:f1:
56:9c:6d:6c:b0:d9:48:51:8d:a2:7d:73:99:d6:75:
c7:17:77:c7:8f:f1:a1:32:bc:ff:ad:21:cd:6f:b7:
2d:fa:dd:99:8b:bb:22:f3:e3:e0:0c:0b:ab:10:bc:
d9:7d:28:ca:01:26:0c:23:bf:0d:a8:7f:05:0f:8e:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:79:05:D8:C5:23:B8:EA:1B:2B:47:70:81:AD:15:7D:7C:8A:E0
X509v3 Authority Key Identifier:
keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b5:cf:59:6b:e7:b1:c1:3a:e5:9c:a3:f5:be:cc:be:97:74:
13:6b:fa:6c:8e:85:83:db:fa:96:db:15:22:d5:2e:9e:23:c0:
6c:7d:e0:86:85:f6:29:50:ae:00:94:bd:d4:c1:ae:47:5e:52:
86:99:7f:08:76:74:aa:e9:fa:f5:33:25:b4:d3:d4:a7:f7:ef:
cd:4e:d9:46:31:4d:08:ac:f0:57:34:99:29:e8:dc:8a:46:4c:
52:8c:16:1e:06:a3:32:25:32:81:9c:bd:46:21:1e:8b:08:28:
2b:a1:f8:63:8c:0f:19:fa:51:d6:68:4d:69:7f:02:78:af:6b:
e9:15:0b:0b:4d:19:d6:8a:78:2d:13:b6:6f:e3:f2:6b:94:18:
b4:38:47:ab:8c:40:b3:89:67:8c:77:e5:74:3a:15:83:84:91:
49:60:36:e9:22:17:2b:5d:e5:ec:d2:5a:da:5b:fa:64:5b:f0:
9c:66:f8:ec:53:0e:d9:6b:58:cb:e3:51:20:70:14:b3:26:9a:
75:82:f6:4a:3e:0e:ba:f4:02:40:e1:1b:13:97:8b:6a:55:81:
6d:69:8e:10:7e:c3:48:1c:23:b3:0e:2c:07:a9:3a:34:d2:48:
be:cc:8a:69:8a:bb:44:51:a3:74:d5:aa:1e:a0:9a:8a:db:45:
81:83:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:04 2026 by rpki-client