Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: VBQL450Tpft/HdvxLrsNiTY+7dZoeWBm7VfgpX/+2Uk=
Subject key identifier: D6:1B:95:02:71:A9:BD:DA:35:42:14:9B:4A:DC:F4:3B:F7:AE:D3:3B
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 019DDC8D0733C28B95D6B6C9002C89E9C7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 18EF
Signing time: Thu 30 Apr 2026 04:02:02 +0000
Manifest this update: Thu 30 Apr 2026 04:02:02 +0000
Manifest next update: Fri 01 May 2026 04:02:02 +0000
Files and hashes: 1: Sq8500KhQRP1l10Z1msF9d2ysQw.roa (hash: ReVbiMOhRmv6RCWB0b28trkVO+ZZwLBYu/yBa/+30Dw=)
2: V6JPaEYI_A430h4XiTPHTg3pH9Q.roa (hash: cJrgnz2SqNu03F38EzPAz9CCWIpMgD1Jz/dKPwQAOAg=)
3: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: mSInvk2QTgGwtMPQ0UJIuH6+DogruKMHLO5K8QHYiXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8d:07:33:c2:8b:95:d6:b6:c9:00:2c:89:e9:c7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Apr 30 04:02:02 2026 GMT
Not After : May 1 04:02:02 2026 GMT
Subject: CN=d61b950271a9bdda3542149b4adcf43bf7aed33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:4e:39:52:95:3d:4d:4e:17:35:c9:7c:bc:
c4:ad:22:f0:7e:f5:6b:47:fe:19:79:9d:61:2e:89:
c8:78:33:d5:4a:2b:f5:45:09:f5:a9:46:3b:1e:28:
26:92:35:70:e6:4b:f9:32:1a:46:aa:e7:ad:e8:af:
8a:1f:9b:78:4a:72:26:74:ee:b7:e8:ac:52:87:e8:
14:e5:45:b5:ad:6f:11:1d:fc:49:de:35:05:35:1f:
e1:1a:e2:cb:6d:b2:f2:0c:63:b1:bf:86:03:89:91:
ee:0b:df:37:27:36:95:c8:df:b4:91:4e:7a:43:3f:
07:09:70:82:79:b8:a8:6e:5a:32:8b:58:d8:90:b0:
3f:15:26:78:f8:05:14:f6:89:91:d5:ba:9f:2b:7d:
02:66:f1:20:7c:89:77:f5:64:e6:03:31:cb:dc:2e:
56:69:38:1b:f8:e3:c9:2e:01:50:6f:cd:5d:cf:b6:
97:be:aa:59:3a:67:2c:cd:64:9b:46:50:2a:22:28:
e4:99:59:f3:4f:a6:b0:32:22:3a:ae:6b:ee:5a:f8:
4c:83:d7:74:75:30:2c:0a:c6:88:06:ae:f1:97:cb:
a2:03:30:c9:09:b9:c7:de:32:cd:bd:95:88:19:89:
49:34:86:82:7a:93:23:b1:2f:09:20:93:7d:b8:0a:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:95:02:71:A9:BD:DA:35:42:14:9B:4A:DC:F4:3B:F7:AE:D3:3B
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3a:2a:d2:c1:40:a3:84:1f:b6:f5:21:c1:7e:1e:86:60:b8:
f5:04:8e:4a:db:6a:be:89:9d:c9:c9:26:ce:b7:52:c0:56:39:
ea:e6:d0:8d:d6:80:38:5e:b1:df:d1:be:e5:85:a8:99:b1:2c:
52:92:2a:6c:96:13:82:33:c9:8d:04:42:11:e1:09:26:d4:c1:
ed:df:d7:dd:15:ad:55:da:3f:f2:22:c0:07:0d:24:50:31:9b:
bf:dc:62:6c:36:f4:8b:40:70:2a:90:eb:24:f8:c2:89:56:de:
fa:f0:ac:20:7d:d8:ea:59:39:f6:f4:01:20:d8:91:3e:2d:58:
7b:89:53:e1:2b:a1:39:0d:9b:02:8e:81:59:83:7c:f3:be:80:
49:3c:7d:97:94:7f:c2:db:17:76:6a:16:a5:f2:04:11:e3:d8:
51:b1:00:93:36:cc:76:f1:c7:f2:aa:fe:cb:4a:9d:d9:32:87:
53:ee:4f:57:b7:55:0d:34:92:02:51:49:3f:9d:15:52:48:89:
b4:f8:3e:35:ee:41:f5:a2:6b:ed:8f:cb:1d:0a:bd:c8:00:58:
eb:0b:3f:de:af:1c:2d:56:c8:17:a0:9d:26:68:41:8c:07:9d:
6b:43:00:73:b1:d3:95:28:c5:b6:63:67:63:0e:b7:7c:82:66:
20:1b:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 10:56:04 2026 by rpki-client