Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier: S01x49YXzT8G4S6QlPAQrlxw14dBCUcvocjEZ8MD3SE=
Subject key identifier: 08:AE:EE:EA:3B:01:88:23:F0:15:90:F6:89:43:92:B4:A9:B5:51:DC
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial: 019D10B3B11C80B2EC23C427A6D62EF421A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number: 123D
Signing time: Sat 21 Mar 2026 14:01:44 +0000
Manifest this update: Sat 21 Mar 2026 14:01:44 +0000
Manifest next update: Sun 22 Mar 2026 14:01:44 +0000
Files and hashes: 1: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: Lhe/1FogUoZhkAiIP0PK/WWhVycp103yRVcCOaFdIyk=)
2: uSTOG5hPdGAJ8tKDlqGT_j-Wz90.roa (hash: K1kjwbswlvDhq+X0b+wPq3xckmUou+CcfH9LmHS/rpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:b3:b1:1c:80:b2:ec:23:c4:27:a6:d6:2e:f4:21:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Validity
Not Before: Mar 21 14:01:44 2026 GMT
Not After : Mar 22 14:01:44 2026 GMT
Subject: CN=08aeeeea3b018823f01590f6894392b4a9b551dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:50:4b:b5:e9:70:f3:6e:11:0f:dc:cf:1d:
ac:e3:96:75:56:1c:30:fa:50:07:9f:b5:28:59:a6:
39:48:1d:ba:0a:7a:39:9f:06:cb:88:75:6f:3f:cf:
a1:17:9c:d8:f1:64:90:79:77:83:93:96:40:93:b5:
dc:f4:96:ac:f5:92:2d:53:a8:c1:3c:c7:05:3d:4c:
22:4f:d6:54:ed:72:4c:bf:91:ad:bb:56:1d:ae:e5:
8c:1b:2c:a6:4a:cf:96:ff:7d:0c:d5:5e:77:c7:8a:
60:b2:73:76:67:be:dc:04:fa:7f:f9:87:b2:27:2e:
ce:0b:b2:d5:f4:59:1f:3b:47:47:94:b9:10:a9:11:
62:e8:a3:19:ba:cc:34:bb:a0:fe:50:ae:66:b1:1f:
49:96:26:37:00:f6:3a:be:36:ea:e6:52:0a:f8:2b:
d3:90:d0:f4:c4:11:44:57:24:ad:4b:f3:94:1d:c2:
9c:d4:6b:3e:98:12:25:e8:97:7a:32:b7:78:26:e0:
d5:5d:3b:7d:c7:04:73:3b:55:28:e1:0e:6b:3d:71:
50:1c:28:37:04:fa:77:92:90:70:1a:28:e6:01:e6:
2f:01:1c:e8:c4:6a:0f:39:2b:62:09:bb:9d:b5:9c:
63:9a:89:c8:cc:19:d5:62:e4:c9:3e:0d:96:46:a8:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:EE:EA:3B:01:88:23:F0:15:90:F6:89:43:92:B4:A9:B5:51:DC
X509v3 Authority Key Identifier:
keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c5:af:53:4f:46:af:67:97:77:87:da:15:8b:52:b1:88:67:
ee:59:8a:9c:62:80:60:02:04:55:b9:46:f9:bd:87:9e:63:84:
bf:50:c8:03:46:e2:68:2b:59:fb:23:eb:5a:7d:ed:34:19:1f:
38:45:f6:51:66:86:61:87:51:8e:0a:ee:23:59:91:92:b7:28:
8e:b1:f0:6a:63:1b:bb:8d:56:6e:07:88:32:eb:53:ef:49:f9:
7f:b2:e5:d2:ad:9a:11:d0:64:0d:ce:9e:66:22:b1:60:fa:6a:
2f:d6:d5:f0:f0:36:98:8f:82:d9:56:ad:21:8f:8b:43:e8:26:
5d:30:55:f3:16:59:73:bf:be:23:d6:3a:2c:7f:90:20:46:75:
0e:6b:79:1e:0b:cf:73:f5:66:44:c6:fa:b5:bf:5a:9c:5c:89:
ee:d9:3d:45:dd:ed:a2:36:3a:74:bc:6c:41:b1:0b:18:9f:80:
41:30:fe:81:c1:81:d7:8c:9a:18:46:76:61:74:fa:40:6e:04:
9e:87:b7:99:58:cd:f0:05:a2:6c:d8:62:09:47:96:db:fb:f1:
99:ea:23:90:cd:91:7c:13:d3:8a:b9:d2:d1:71:1c:53:c2:a8:
d3:ed:75:12:b5:a1:93:59:1c:88:eb:8d:26:2d:6a:3c:4a:c1:
a7:3c:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:10:24 2026 by rpki-client