Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
File: Wddq-QkdoVgbul7BPl29tzYtnQ8.mft (raw, json)
Hash identifier: snS9fLYngF3QJ/PNnNL+6qEmnt7SpjzJIPRx975hzFI=
Subject key identifier: 14:3B:90:C7:45:F0:E3:5C:25:36:15:BD:65:69:0D:23:82:A1:9C:04
Authority key identifier: 59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F
Certificate issuer: /CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
Certificate serial: 019D39E541E62F927E3DED37581FA328B3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
Manifest number: 131D
Signing time: Sun 29 Mar 2026 14:00:18 +0000
Manifest this update: Sun 29 Mar 2026 14:00:18 +0000
Manifest next update: Mon 30 Mar 2026 14:00:18 +0000
Files and hashes: 1: DeKuqizCFF-AbYWhXDXOxqoCjF4.roa (hash: ic9mHLNp4V14NC+w44nD4ClXiGT/GxVQlBA6nqtiyx0=)
2: Wddq-QkdoVgbul7BPl29tzYtnQ8.crl (hash: elhuf+01qKezz7rFQ4NoPcN5AAqS9ewwGLZILgwehqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:41:e6:2f:92:7e:3d:ed:37:58:1f:a3:28:b3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
Validity
Not Before: Mar 29 14:00:18 2026 GMT
Not After : Mar 30 14:00:18 2026 GMT
Subject: CN=143b90c745f0e35c253615bd65690d2382a19c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:65:e4:df:ca:60:a8:29:db:e4:79:a9:21:
21:d2:ae:05:79:82:b8:fd:2a:dd:de:51:05:0d:18:
70:1f:84:21:e8:19:a5:23:0a:78:bc:5f:83:a0:74:
31:d8:7b:e9:14:f0:b5:48:3f:40:58:3a:62:88:09:
8e:49:9f:20:1f:85:c3:9b:57:48:1e:9b:9f:c0:19:
71:ba:f6:1e:04:b7:3b:1e:c6:17:3c:41:9c:b6:0c:
83:cd:01:eb:a0:91:2c:a0:31:b8:fd:fb:67:20:9e:
25:6b:c6:19:2b:98:86:ab:a0:63:b9:9b:da:05:58:
e9:3d:e2:cf:a1:f0:43:94:bd:21:9d:78:8f:f0:d6:
6e:22:cf:27:ce:00:d4:d0:03:b1:c5:3a:06:b3:4b:
f9:01:93:ed:60:63:27:c4:1d:71:86:bb:d0:d6:73:
03:06:75:fd:6b:ba:f9:5d:95:4b:95:c9:b5:e9:ac:
16:8f:47:9f:2c:b6:f5:cb:36:0b:ac:93:b4:fc:df:
79:04:16:7e:20:6f:d9:b0:15:64:5f:60:7c:c0:32:
3b:dc:91:81:b2:78:14:9a:59:bc:23:c0:bd:f8:85:
26:dc:ad:da:64:8f:ce:c1:20:02:03:7b:ac:45:32:
8e:7e:3f:85:bc:3a:57:f7:53:34:12:34:ec:1c:1f:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3B:90:C7:45:F0:E3:5C:25:36:15:BD:65:69:0D:23:82:A1:9C:04
X509v3 Authority Key Identifier:
keyid:59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:91:77:81:b0:d2:5a:91:13:5d:76:a5:9f:64:6a:36:84:62:
d9:d1:77:24:35:96:e9:77:5c:e6:d2:a7:a0:08:21:1d:b2:3c:
4e:45:1a:ea:eb:41:b3:9b:04:4d:9b:a4:12:6f:e9:2a:08:7d:
74:2c:42:77:df:61:fd:59:74:47:e4:b4:45:e2:91:65:97:2f:
24:de:2f:aa:46:bd:b0:48:f7:27:b1:7f:b6:a1:91:eb:bf:41:
a7:32:7a:c1:84:a0:38:8e:b3:da:62:9c:47:b6:ce:cc:0c:b3:
d3:2e:71:26:e3:76:f0:6d:b6:f9:20:72:51:15:06:ac:a5:bf:
09:99:88:38:55:7f:4d:5c:8b:2f:23:f7:e7:3c:4c:ca:88:84:
0a:69:d7:79:c2:00:07:4c:01:b5:0f:02:cf:f5:34:f4:40:0a:
1d:f3:ce:97:1d:f8:d1:a3:29:81:88:4c:75:1c:bc:89:32:f3:
60:5f:ab:54:00:df:8f:63:6c:c3:29:c8:c5:35:18:f1:5e:e2:
06:7a:5d:7e:b3:b4:be:25:ae:ec:84:10:62:83:9f:61:a4:df:
a3:80:dc:73:66:73:a0:2c:0d:22:08:bb:87:60:6b:f3:3e:33:
ac:26:23:d9:84:60:7b:44:d8:9a:23:59:ce:26:e7:2c:c1:b8:
ed:56:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:52 2026 by rpki-client