Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: YhfZCPydUrb2t/9SotDYsea8J8QLJESs/CA+OpfZfyE=
Subject key identifier: DC:5E:FC:79:9F:26:8E:F8:A9:B1:43:4B:09:42:0C:D9:6C:15:A8:F5
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 019CC93EEBAF995CE9B9026435E31A5335EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 06D3
Signing time: Sat 07 Mar 2026 17:01:09 +0000
Manifest this update: Sat 07 Mar 2026 17:01:09 +0000
Manifest next update: Sun 08 Mar 2026 17:01:09 +0000
Files and hashes: 1: V7dSFe54YguWMOBd5igSa3CG0jM.roa (hash: rMSDIp9OV5dVl6Akl8E0YEDyEMw4raUR7F/H+734+DI=)
2: pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa (hash: sH0uhgJw4LrCTAOetXBWIMlVqm3VIDbyxnZ0hMsIubE=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: x9dnoUZ/IkEpdw4+p+mAAknMSSpoHYrxZyjPZQyLOeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:eb:af:99:5c:e9:b9:02:64:35:e3:1a:53:35:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Mar 7 17:01:09 2026 GMT
Not After : Mar 8 17:01:09 2026 GMT
Subject: CN=dc5efc799f268ef8a9b1434b09420cd96c15a8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:60:ed:00:6d:f4:8c:18:ef:af:17:4e:17:
94:bb:80:10:f5:48:b4:17:e3:09:02:a0:ad:b2:8c:
ef:d6:85:14:17:7e:43:45:20:1e:d3:46:d7:b7:d7:
33:36:93:e9:a1:6d:50:44:03:4d:98:9a:0c:cb:06:
dc:ff:08:b7:a8:83:20:26:8b:fc:12:2b:13:3e:83:
d7:80:7e:5a:8d:34:e2:73:71:fd:81:32:eb:4c:1d:
3b:42:9d:c0:7a:15:56:ff:57:be:6e:36:4b:14:bf:
22:db:5f:dc:f0:26:ca:cb:58:bb:82:67:f7:39:4b:
0a:59:0e:c0:16:4b:11:43:c3:fb:d5:01:9f:5f:83:
e3:2d:67:a4:7d:51:6b:f1:c4:65:c9:f4:a9:95:94:
aa:00:15:02:23:3d:7a:ed:15:da:bc:e7:2d:10:8d:
53:17:23:d0:c2:d0:59:44:c1:67:84:d0:9d:2f:0f:
58:5d:a6:ab:09:16:3f:7a:f4:03:75:c2:d5:05:20:
6c:bf:75:02:2c:38:d5:06:6d:5f:e4:e1:3e:41:15:
fc:24:09:8e:87:37:07:2a:e8:3f:5b:78:41:61:80:
2f:80:ff:76:f7:65:f4:22:52:97:af:a5:89:09:eb:
0d:bb:c5:27:db:4a:ba:0c:01:27:8a:0e:49:cb:17:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:FC:79:9F:26:8E:F8:A9:B1:43:4B:09:42:0C:D9:6C:15:A8:F5
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d9:8a:b0:0b:1c:d3:a5:a1:30:ab:3b:4e:2b:9e:4c:49:d0:
33:fb:81:ef:9e:77:23:44:1f:e0:f5:7d:43:72:47:80:b2:ee:
9f:6d:62:3b:45:6f:16:2c:e6:65:54:22:88:d7:9b:67:70:53:
7a:f2:f8:59:14:db:c4:4d:55:76:fa:d4:b5:cf:18:ac:b4:99:
c6:22:92:95:d8:d1:dd:1e:13:c9:66:1a:65:d3:62:43:eb:0f:
8b:3f:5b:7b:75:cb:6e:b2:af:e9:7a:0a:44:e1:73:89:32:96:
5b:0c:7e:00:37:b9:59:c1:43:f5:53:df:3a:ec:7f:43:e0:b6:
78:4a:67:f7:37:37:4a:ef:03:d5:2e:4a:ed:bd:3b:62:24:68:
b0:52:f1:c2:8d:70:b0:ce:cc:9e:30:17:cc:8e:42:d7:6a:79:
06:80:36:4e:b3:0c:6c:ca:47:aa:9d:62:b3:af:ca:9d:02:f9:
3a:09:17:0a:16:46:4d:1a:dd:d8:9f:d2:9b:08:fb:ab:26:84:
4d:a4:88:ef:a9:7a:35:1e:22:65:86:c6:0b:be:fd:a7:f6:f9:
b6:bb:66:98:56:78:95:e1:1d:30:50:8a:f6:5c:a6:de:d8:ed:
8c:11:04:06:03:11:01:d8:a8:4a:26:3e:77:d9:12:e4:87:5b:
6b:49:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:12:15 2026 by rpki-client