Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: v0rCend0wyG6L7x7f4/vr8VG310keK8LkTHKCfQMedY=
Subject key identifier: 23:DA:CC:1A:72:DE:15:3D:7A:63:E6:F9:F0:A7:FC:52:F7:D6:50:55
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 019D06D3C56BAC1B121AF98BD32241EDDFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 0159
Signing time: Thu 19 Mar 2026 16:00:35 +0000
Manifest this update: Thu 19 Mar 2026 16:00:35 +0000
Manifest next update: Fri 20 Mar 2026 16:00:35 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: 2ZdEN+16H1D66jUjyvXLpkriftXMJiyqhK3Cq5/P4Cs=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:d3:c5:6b:ac:1b:12:1a:f9:8b:d3:22:41:ed:df:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: Mar 19 16:00:35 2026 GMT
Not After : Mar 20 16:00:35 2026 GMT
Subject: CN=23dacc1a72de153d7a63e6f9f0a7fc52f7d65055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:40:4e:9a:d0:10:01:74:7a:b4:fb:10:2f:
6d:22:54:ac:96:52:b3:3e:25:25:fe:fe:31:65:a4:
04:48:29:48:13:5d:e1:98:f3:e3:4a:92:f4:a1:db:
47:64:0a:f8:17:8d:a0:ab:9e:ac:f3:a9:7d:06:c0:
75:2d:2d:db:db:6f:48:98:c9:2b:33:f5:1a:8d:1d:
43:7d:e1:d0:5b:5a:15:a9:9a:11:36:f5:bc:e8:de:
83:6c:b2:7a:5c:c0:ff:78:84:ac:7a:63:7c:fd:80:
36:5a:99:fe:c6:dd:90:c6:f8:ba:72:15:80:bd:45:
0a:49:18:c1:52:bc:76:67:d6:da:51:fc:d3:be:40:
f6:c9:ad:ad:c8:fb:38:a0:3d:e7:07:ce:ac:65:0c:
9f:1e:35:2e:17:2f:26:fe:4c:0d:b6:69:8c:a4:ce:
f0:bd:bb:c8:8c:65:a4:60:67:1a:64:f6:a2:a7:8b:
cc:4f:a6:4e:47:2e:9c:f1:0d:79:09:d4:08:31:46:
75:bd:d5:c2:1b:94:a0:fb:55:f1:5e:c4:15:85:fd:
46:4f:49:f9:06:cb:c1:5f:a2:aa:fd:73:64:6c:6f:
41:32:d4:bc:e5:fb:b3:d0:71:4b:c4:73:ea:5c:00:
52:ab:80:35:84:04:33:44:b1:d3:8d:47:d6:7c:15:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:CC:1A:72:DE:15:3D:7A:63:E6:F9:F0:A7:FC:52:F7:D6:50:55
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a9:40:cd:62:89:5c:70:5e:27:b5:7d:57:ed:82:d8:e8:35:
fd:3d:75:1a:f2:d8:58:f6:9d:3e:9e:64:f8:93:37:8d:04:94:
c7:02:09:b7:fa:3b:c3:80:83:3e:d6:a2:3f:2f:88:fc:57:7f:
2a:08:09:10:2b:75:e5:81:de:49:b5:ec:c5:1d:7f:1c:38:7a:
0e:38:bc:74:54:91:a7:24:7a:e6:54:f3:76:30:9b:a1:56:ba:
56:fe:16:77:de:33:10:d1:50:52:34:98:ae:0d:34:a1:0d:5f:
21:78:eb:fa:34:a2:6c:de:ec:9a:40:2e:d4:fa:74:f9:5f:14:
d7:c5:10:66:f7:a1:e7:38:f8:e1:a0:bd:8c:d3:ca:41:a1:ed:
bf:aa:09:db:fa:a9:78:b8:74:5f:3f:56:5e:2f:54:98:79:91:
57:58:d6:2d:57:ea:c4:36:57:e6:60:3f:14:92:1d:e7:31:23:
de:10:7c:42:cc:b3:3e:c8:94:4c:a5:1e:44:a8:83:05:7f:d2:
cd:c1:7f:e0:97:dc:10:18:93:9f:da:f9:5a:82:0b:15:d3:ae:
b2:95:6c:4d:ff:54:8a:0d:39:c4:cb:f0:74:ac:31:d8:1f:93:
65:d3:eb:bb:be:76:3a:c1:4f:41:11:a0:55:86:1a:7f:ff:0c:
e3:d3:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:17:50 2026 by rpki-client