Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: 40OU+wh8Ku0dN90KPgl3QoSry179jfDCuYZRFv7G9+g=
Subject key identifier: 2B:5B:F3:BA:2F:D7:25:3F:56:68:FA:C3:B7:45:F1:0C:C1:86:72:B9
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 019CE33551EEA662D9F6638DA391C082E11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 05CC
Signing time: Thu 12 Mar 2026 18:00:47 +0000
Manifest this update: Thu 12 Mar 2026 18:00:47 +0000
Manifest next update: Fri 13 Mar 2026 18:00:47 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: N7N/vjO5fl0fpqdjS1LqE/OyjYgISIK3RqzY0Lw3+vE=)
2: oqNjVEEZfgF_pXpWc6CrASntmYs.roa (hash: jOJJEomQIaI7d5om0st81IDIJu3E4sOZ9MO04rQCsvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:51:ee:a6:62:d9:f6:63:8d:a3:91:c0:82:e1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Mar 12 18:00:47 2026 GMT
Not After : Mar 13 18:00:47 2026 GMT
Subject: CN=2b5bf3ba2fd7253f5668fac3b745f10cc18672b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:c7:3f:0a:40:69:31:fc:f4:73:e1:2b:5b:
0a:92:3e:28:09:b8:f2:44:f1:45:1b:75:27:ef:b6:
a8:95:38:b1:da:c7:83:13:3f:1d:dc:3a:ee:ee:e0:
3b:c7:3a:e6:fb:e2:bf:f2:82:48:c6:d3:d8:9d:9f:
b6:8b:6a:58:fc:d4:ca:53:6b:ab:11:37:a8:11:16:
fe:1b:08:57:c5:b6:a3:63:0e:6a:12:03:59:05:d5:
bb:ec:f3:a6:6d:f3:30:da:e6:4f:42:eb:e8:83:42:
f9:6f:bf:bb:25:0f:dc:b6:4d:41:98:a8:10:8f:4f:
10:c7:e5:d2:72:69:16:31:6b:b6:20:ec:84:e9:12:
3a:5a:13:85:7e:0a:90:90:85:60:b0:d7:96:bd:ac:
f0:f2:1e:eb:4c:38:fd:ab:db:29:39:82:de:d7:ca:
ba:28:dc:57:ae:da:d2:9f:0b:91:b9:74:ce:50:33:
e2:ac:41:53:0d:f5:b2:a4:ad:00:54:31:5f:88:c3:
47:ce:36:62:52:43:f0:07:e6:25:c7:c8:cc:50:27:
a3:25:e9:40:7b:e9:18:eb:10:f6:c8:d0:1a:20:45:
1e:6f:60:44:a2:b4:95:37:b8:bc:ca:54:c4:86:65:
8e:c9:8e:93:cd:63:e8:74:79:e1:45:b4:d7:ac:66:
18:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5B:F3:BA:2F:D7:25:3F:56:68:FA:C3:B7:45:F1:0C:C1:86:72:B9
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f8:fd:62:53:14:45:1a:9c:71:ec:37:c5:23:65:16:fa:de:
ea:e2:a0:16:26:b6:b3:b3:57:05:38:db:59:f7:61:52:8b:dc:
fc:72:f2:69:18:36:17:73:3a:4a:4d:61:04:28:91:f1:df:a6:
17:c4:3d:b1:1f:e8:25:40:f1:95:85:59:78:c1:03:22:1b:31:
3d:91:5d:82:6f:6e:86:c7:0b:8c:ce:33:80:bb:bb:80:9b:f9:
05:c1:e2:de:8b:01:41:24:e2:84:2c:e6:c0:94:60:8e:5f:33:
a0:b0:61:b4:a7:3c:bd:0a:6b:d1:20:e4:eb:9b:6b:67:83:cb:
6e:7d:92:dd:f1:86:17:f4:fb:9c:e9:7c:cf:cd:c1:a7:99:1a:
61:f4:dc:5c:23:d3:dc:51:91:54:d3:67:54:a2:1a:2e:1f:d8:
fc:d7:d3:00:b8:9f:26:d0:35:41:d5:c6:0e:de:35:1b:66:7b:
1b:c8:69:a2:90:83:e8:de:56:6e:f3:72:6c:3d:69:39:70:6c:
77:3b:b9:64:aa:2c:98:90:3d:ab:88:d8:2c:47:c7:44:31:a4:
82:99:49:b0:6c:a6:3f:f2:89:14:4c:1f:9e:a3:52:c3:f7:39:
38:0a:d9:c9:0e:89:14:15:c2:62:ea:55:9a:44:c0:a7:27:65:
a1:8b:10:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:48:13 2026 by rpki-client