Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier: Hwl/LbPUlDnu2vs8N1HSh1LKDjyQpt6LpmnnaQS5BqQ=
Subject key identifier: BF:DD:35:B0:7B:47:EC:3B:4B:14:F5:01:EA:49:FB:11:32:4E:04:49
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 019D390A19A404AB2F84CB00B507E0548B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number: 0748
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: OjCZNS0V7bS6o9kNX-GazXkNt6g.roa (hash: h0RBZKwBDu9T2bG9WT98CcP4agiyp1k9fyQRDt70M9A=)
2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: wAmYUs2EQCM6GX7/ozoI6vL4gnI8OyU4UeT+UUX8r/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:19:a4:04:ab:2f:84:cb:00:b5:07:e0:54:8b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=bfdd35b07b47ec3b4b14f501ea49fb11324e0449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:41:5c:4d:09:5a:82:d8:6b:18:f8:93:e0:
e9:99:27:dd:f3:6c:b6:69:16:a4:a1:b2:2f:e9:7a:
dc:52:34:a4:8f:8b:fe:db:df:20:22:23:54:c7:e5:
bd:04:37:7a:ce:2b:85:b5:5e:eb:84:6d:82:b5:a3:
39:36:49:ae:8a:e4:67:84:da:df:83:a0:0b:76:16:
da:ee:23:8c:4d:db:ee:af:b6:7c:ed:f6:76:2f:70:
9f:d7:db:59:84:1d:3c:db:33:ff:aa:d1:9e:98:3c:
64:02:72:06:ea:5f:0e:3a:0d:89:23:bb:f9:24:08:
69:1e:b8:bc:53:87:2a:32:0c:17:e5:73:8f:a6:81:
41:fe:df:c3:a8:01:fb:f4:27:31:00:b9:43:77:84:
8b:4a:9c:41:08:82:6c:4b:2a:18:c1:39:0f:26:ae:
c0:35:91:9d:e8:9c:c5:61:5f:98:16:9d:b5:69:b3:
7b:44:ed:c0:95:d0:bc:c5:31:df:13:38:41:55:9c:
8b:4e:79:64:53:db:9a:af:dc:ed:63:46:ed:6b:97:
cf:3f:68:e6:67:b6:eb:96:dd:33:a6:4e:ff:d5:13:
b5:a2:e3:50:1b:76:1f:99:6b:2e:9e:8c:e8:4d:39:
23:58:18:b7:08:d4:fd:be:36:eb:e5:25:77:e1:af:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:35:B0:7B:47:EC:3B:4B:14:F5:01:EA:49:FB:11:32:4E:04:49
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:19:a5:f5:bb:d0:8d:9a:f9:33:c6:3d:20:04:a4:fd:08:f7:
00:5c:a4:eb:a6:6d:4a:b1:ae:fb:9b:71:ef:41:2c:c7:db:bf:
50:a6:2e:1b:cd:58:44:01:bb:eb:19:85:13:9e:85:36:6d:f6:
08:32:03:99:c0:fd:ed:36:0a:a7:1b:83:b5:a8:bc:d6:0c:d1:
71:6e:75:c7:b1:32:9e:c6:9b:ac:62:77:1e:e2:43:8b:df:9f:
bc:11:4d:f8:ef:aa:54:8a:ef:81:ff:f0:15:0c:71:54:72:aa:
7b:c9:00:46:de:2c:e4:02:30:9a:28:d2:a2:73:41:c5:2d:69:
99:5d:5f:88:46:56:8e:f8:d0:53:89:31:a9:39:89:f8:86:43:
27:07:ad:a3:46:a4:00:3f:e7:7a:e6:fd:f7:42:a2:d4:0c:b9:
ac:f9:70:e8:3f:36:78:5b:79:c2:06:0a:c6:3c:4f:54:15:ea:
8c:84:e8:25:fa:e9:0b:40:1d:66:7b:eb:28:90:54:a2:0a:bc:
60:4c:90:c6:cd:73:99:b2:9c:9b:3f:9c:82:aa:1e:c0:08:f0:
ba:77:17:f1:64:f1:40:bd:87:65:35:3c:8f:ca:34:9a:03:9f:
36:0e:c6:1d:d3:52:2d:ec:93:5f:88:a8:d7:e2:44:cc:70:52:
2e:69:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:46 2026 by rpki-client