Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: ulYNQxUQLVmJ9z10kIBfxUdI7nd/oQTqbhU6q21fjC0=
Subject key identifier: F9:4F:EF:49:6A:E8:8A:8B:F8:4C:A2:3D:63:60:FE:E1:32:28:55:25
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 019CE5C8F61250463A3F0DF295B79A7F8014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 0514
Signing time: Fri 13 Mar 2026 06:01:18 +0000
Manifest this update: Fri 13 Mar 2026 06:01:18 +0000
Manifest next update: Sat 14 Mar 2026 06:01:18 +0000
Files and hashes: 1: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: JMs/8lYiW4aJ0PO/Da6RH2je260N4d4YbKmF/oUri2I=)
2: sFO9X8d0Bx_2aIHVFCIHpaGqYP0.roa (hash: oq/KxEUUzKF1vMqboj5ZmQdOj47aimAfTePT45c7Ho8=)
3: t59DTwtpsezlr8EDU-BygwzxAls.roa (hash: x2nikxPQqGzwSgfTDKs6YhYnWV/ZCJ22eSxvnYU38CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:f6:12:50:46:3a:3f:0d:f2:95:b7:9a:7f:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Mar 13 06:01:18 2026 GMT
Not After : Mar 14 06:01:18 2026 GMT
Subject: CN=f94fef496ae88a8bf84ca23d6360fee132285525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:bb:96:0d:30:17:e7:14:fe:96:d3:dc:33:
1b:d2:ae:3b:c4:25:01:11:d8:28:e2:49:11:4f:f4:
99:df:42:07:7d:95:0f:e0:e6:f6:7e:46:3b:fb:3c:
e0:b1:22:53:5e:2f:ad:cb:bb:63:ff:00:f8:84:37:
76:8f:41:be:d1:88:41:e6:ee:a5:1b:da:d7:9f:b0:
7c:e9:75:4e:1a:53:55:a0:f3:04:a4:7d:84:9a:d5:
9c:44:86:2a:d1:6a:8e:52:ee:ad:09:37:81:9e:3d:
a5:6c:c5:64:e7:2b:c4:bc:67:d4:77:62:75:94:1b:
84:b6:2c:c9:2d:f0:a1:38:be:5f:27:30:9f:37:22:
b5:09:b2:f8:f9:45:12:82:d7:35:e3:a8:b9:3b:a0:
b9:21:98:61:55:00:0a:fb:16:82:d0:61:9d:d8:b7:
46:2c:2c:9e:75:cc:7e:73:2b:d4:b7:95:d7:e8:77:
3b:a3:08:e3:e8:e1:2e:48:b2:fc:21:e4:20:0e:d6:
69:03:1d:11:28:6d:29:f3:4a:5c:53:2c:50:e7:74:
7e:e3:c5:a1:e8:b6:13:d3:e1:bc:d8:27:f9:09:ad:
6e:d5:b5:e1:e8:b6:c3:44:e4:94:d9:42:27:21:0f:
ea:e2:d9:96:4d:39:c1:d2:77:36:12:cc:65:df:35:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4F:EF:49:6A:E8:8A:8B:F8:4C:A2:3D:63:60:FE:E1:32:28:55:25
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:34:67:3b:70:d0:9f:49:e9:d6:4a:5b:5e:b2:3c:10:b2:e8:
30:2d:f4:56:c5:13:21:a0:ad:0d:80:5d:52:4b:24:eb:a0:8a:
87:36:6e:75:de:90:f7:f9:71:fd:6c:7a:cc:33:7f:de:2b:db:
1b:68:a6:49:67:c6:dd:79:2a:aa:1f:ed:32:69:e2:95:07:6c:
28:8b:07:ab:41:85:d0:b6:9b:3b:10:f2:be:eb:a9:9b:0a:0f:
41:12:25:31:5a:a0:88:fb:09:4d:99:54:ef:90:73:cf:cf:84:
66:22:ad:38:1b:1d:6d:4f:7e:a2:07:71:ff:aa:fb:b1:fd:56:
78:72:da:50:8b:4a:61:2c:b0:1b:f6:4b:03:a5:62:7f:d2:e2:
2c:46:43:7a:e7:2d:48:7f:75:c2:77:a3:21:02:f4:69:46:a2:
06:c3:82:63:dd:7d:48:99:c9:49:aa:c5:7c:73:4e:45:3b:a7:
92:7b:50:09:a5:fb:17:5e:79:c0:00:26:70:af:be:cb:89:43:
46:ee:c8:ec:41:e8:25:4d:97:08:4c:c4:09:67:bc:e0:10:19:
0a:8d:2b:2b:8f:5a:a6:ae:17:04:7a:05:1d:15:92:16:df:e7:
f4:b2:fa:55:94:9e:66:e0:5b:55:22:fc:d6:5c:bf:4a:16:c2:
7f:c8:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:30 2026 by rpki-client