Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: 63RTY+JtFh5NKDoK4myndtGyTAYzd+zt53IKxEfY5Hs=
Subject key identifier: 7A:47:30:C1:FF:46:90:7B:1C:C8:12:EA:F5:FA:39:B0:FC:39:EE:AA
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 019D382DCD8CCE5007376DFC1783F9CBBF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0FF6
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: 59YcII7vwSrelszgVXfE1Zyv6ic.roa (hash: q6jTMI6TImBNKUCWPMApFyq9F6Fxj9YmbzWV3XM+69w=)
2: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: uM0y5PD8jmFByn1KR2vW/EZNNDuSBLHE5M3U99EoTLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cd:8c:ce:50:07:37:6d:fc:17:83:f9:cb:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=7a4730c1ff46907b1cc812eaf5fa39b0fc39eeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:8e:18:cd:b6:29:71:e8:9a:bd:5f:44:bc:
03:39:ed:00:16:33:3d:3d:b5:f9:2f:5a:15:dd:94:
a7:78:62:e5:ea:58:45:a3:39:c2:3c:02:eb:70:a5:
3b:6f:fe:20:e7:d0:1b:56:01:35:fc:ac:bb:5e:c4:
19:7a:0e:8f:41:a3:18:2c:bf:84:e1:6e:6d:ed:03:
79:79:1c:bc:97:9a:92:44:0e:6f:c6:cc:29:85:52:
2d:78:b6:2a:27:26:68:8c:94:3e:bf:70:e0:46:3f:
21:ab:9b:11:79:f9:56:d6:24:61:e5:77:db:e3:ee:
57:31:6a:77:b0:6d:55:e0:29:c8:da:73:05:47:a7:
8f:dd:43:6e:08:1f:ff:05:e7:44:86:0d:52:d1:a8:
c3:e1:2b:f1:39:97:e3:a4:27:8a:21:dd:a7:17:88:
5d:f9:9a:4c:c2:4c:d2:4f:38:67:76:44:ef:3e:f7:
bc:4f:8e:d0:ec:df:c4:f8:5e:52:a1:3b:73:30:bb:
70:3c:e5:84:9b:14:a5:c5:a9:15:08:d9:82:88:22:
18:df:17:68:6d:d0:70:83:e5:7c:6d:80:65:f7:d6:
9f:95:14:7f:d5:72:73:a3:6f:9a:7f:e9:e5:ea:83:
b5:a8:37:49:fc:03:63:37:5d:fb:ea:57:b2:ff:dd:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:30:C1:FF:46:90:7B:1C:C8:12:EA:F5:FA:39:B0:FC:39:EE:AA
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fa:02:e3:80:6b:7d:a2:ac:00:8b:2e:b4:af:cb:da:6c:dc:
fb:c8:08:65:75:9d:dd:6c:d1:c1:24:50:96:07:31:8c:3c:05:
95:6c:a9:2f:46:16:ee:68:48:4b:83:f9:55:55:b0:bd:b8:82:
9f:f1:6b:8d:d7:2a:4d:e6:ba:e9:7b:ee:4d:cb:67:2e:ce:96:
7c:a5:8f:47:f6:c8:3e:71:cd:be:cd:bd:8f:60:36:82:7a:a5:
77:4a:d2:39:13:48:20:7d:54:43:28:3c:a4:c4:b4:a1:f8:53:
ff:d8:84:c0:e1:75:d1:77:c0:58:48:c9:e2:71:0e:bd:d9:a5:
23:3c:ae:d0:9f:84:9f:90:27:3f:da:f8:fc:d4:3f:9b:11:e7:
c7:7c:90:a2:e1:1a:22:49:db:60:e7:71:de:46:8b:c7:d5:27:
bb:49:fd:5d:8f:1c:ba:d2:78:34:e8:78:6d:c4:85:c8:dd:65:
e3:b9:c2:75:85:53:59:f5:fa:66:56:3f:7f:ce:d6:b5:65:3b:
a7:66:b9:36:60:2f:52:eb:58:24:39:02:3c:2c:2c:21:3d:98:
0d:23:d3:f0:43:f8:cb:cb:c6:4c:83:ed:1b:6b:8a:4a:2c:07:
bd:65:4d:82:c1:5c:be:eb:a0:db:0a:08:d9:36:7c:ad:ba:c2:
03:bb:6a:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lc2MzlAHN238F4P5y78kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTVlZDhlM2VjYzkyYTJkZThjODBhYmU5YTgxOTVkNWZm
OTk3ZTYwHhcNMjYwMzI5MDYwMDE4WhcNMjYwMzMwMDYwMDE4WjAzMTEwLwYDVQQD
Eyg3YTQ3MzBjMWZmNDY5MDdiMWNjODEyZWFmNWZhMzliMGZjMzllZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE2OGM22KXHomr1fRLwDOe0AFjM9
PbX5L1oV3ZSneGLl6lhFoznCPALrcKU7b/4g59AbVgE1/Ky7XsQZeg6PQaMYLL+E
4W5t7QN5eRy8l5qSRA5vxswphVIteLYqJyZojJQ+v3DgRj8hq5sReflW1iRh5Xfb
4+5XMWp3sG1V4CnI2nMFR6eP3UNuCB//BedEhg1S0ajD4SvxOZfjpCeKId2nF4hd
+ZpMwkzSTzhndkTvPve8T47Q7N/E+F5SoTtzMLtwPOWEmxSlxakVCNmCiCIY3xdo
bdBwg+V8bYBl99aflRR/1XJzo2+af+nl6oO1qDdJ/ANjN1376ley/9341wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpHMMH/RpB7HMgS6vX6ObD8Oe6qMB8GA1UdIwQY
MBaAFFil7Y4+zJKi3oyAq+moGV1f+ZfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5Nzct
MDA2N2JjYWYzNzcwLzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5NzctMDA2N2JjYWYzNzcw
LzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfoC44Br
faKsAIsutK/L2mzc+8gIZXWd3WzRwSRQlgcxjDwFlWypL0YW7mhIS4P5VVWwvbiC
n/FrjdcqTea66XvuTctnLs6WfKWPR/bIPnHNvs29j2A2gnqld0rSORNIIH1UQyg8
pMS0ofhT/9iEwOF10XfAWEjJ4nEOvdmlIzyu0J+En5AnP9r4/NQ/mxHnx3yQouEa
IknbYOdx3kaLx9Unu0n9XY8cutJ4NOh4bcSFyN1l47nCdYVTWfX6ZlY/f87WtWU7
p2a5NmAvUutYJDkCPCwsIT2YDSPT8EP4y8vGTIPtG2uKSiwHvWVNgsFcvuug2woI
2TZ8rbrCA7tqNQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:14 2026 by rpki-client