Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier: zyZjKsJhNFoVuP16KnITzAknIoGR42gTHPqxlUh+NCA=
Subject key identifier: 12:3B:EE:FF:F2:35:D7:65:18:CD:F4:28:BB:62:BE:17:F0:89:D5:B8
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial: 019D389C041FBAED45D86B19D93E9119C7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number: 07B1
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: lM6nTeP9+fWqTDSq7BXikra37fYoPIMC0X7YcIF+5JQ=)
2: uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa (hash: n7rmT7eWhWaDz6MLyzDuXY6l9WnAuvoKMn9XsT5ZVWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:04:1f:ba:ed:45:d8:6b:19:d9:3e:91:19:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=123beefff235d76518cdf428bb62be17f089d5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:77:72:cf:6d:74:ad:b7:b4:37:5c:91:77:
7b:7b:9a:1d:5e:02:c1:98:d1:22:5f:09:e9:b7:df:
b6:55:a8:42:05:a1:80:4d:23:f6:95:a4:df:85:60:
d4:b0:f8:18:ed:ab:b2:0b:f0:87:c3:91:8d:93:dc:
b1:ab:f6:cc:e3:c3:b2:09:65:c2:c3:6a:34:7c:50:
81:28:45:47:6a:11:c2:80:c6:9d:76:05:4f:5f:8d:
93:12:9d:f4:5d:db:8d:96:1e:b5:11:52:20:cb:81:
af:b4:fc:9d:98:53:77:11:10:3d:b5:ec:cd:76:3f:
b2:24:3a:04:c5:d1:f8:a8:6f:09:a3:9d:a4:8b:fa:
66:8e:c8:88:3a:2d:d4:75:a4:dc:2e:2c:07:eb:a3:
33:f5:15:a3:8f:75:34:f2:c5:63:58:ff:f9:ae:70:
7e:a6:30:a8:df:5e:3a:bf:fb:dd:cd:c0:eb:a1:7e:
13:5f:9a:f8:c7:a8:12:e2:82:05:fd:e7:94:97:47:
d9:49:1b:c7:46:3d:5b:4e:4d:d5:5d:8a:8f:b5:25:
c7:82:6c:5e:1c:aa:0a:a4:8e:31:8c:31:b8:e8:dd:
b2:f4:20:40:34:3c:6d:c1:ee:a1:9c:27:e6:ec:64:
02:68:3c:c4:9c:fe:d4:84:bd:b2:43:7e:4d:0c:cc:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:EE:FF:F2:35:D7:65:18:CD:F4:28:BB:62:BE:17:F0:89:D5:B8
X509v3 Authority Key Identifier:
keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2e:14:b8:b6:8e:a1:94:93:22:d8:1e:23:29:82:63:57:c9:
65:84:47:82:cd:c9:6a:13:2a:cf:2d:fe:b6:78:b8:60:47:64:
39:9e:60:3b:65:8f:8d:19:91:d9:1e:2a:0e:98:d4:9e:55:cd:
a1:f5:27:fe:85:8b:7b:b8:77:2b:76:af:f0:60:c5:47:d1:d5:
11:7e:c7:f8:bd:51:9f:5f:fe:41:ca:46:c5:fc:c8:dc:cd:ff:
94:6d:07:21:b3:d4:ff:bd:89:19:b4:02:a8:0e:09:ed:d0:3a:
2e:25:fa:84:4b:1e:c8:64:7b:7d:26:2c:ea:73:44:83:c0:40:
48:82:14:2c:d3:d9:88:24:b0:33:a8:76:bc:b9:cf:75:aa:59:
e1:6d:15:13:04:ee:6a:38:bb:10:b6:3a:20:56:61:5e:f2:e4:
98:fc:b6:a8:4b:c7:c3:1a:27:d6:4d:ec:18:bb:b2:5f:97:1d:
3b:2e:54:25:73:e2:4d:de:03:6f:70:4f:9c:19:2c:f9:53:e3:
d7:9b:d5:92:fd:37:05:6a:c1:f2:73:c5:6e:e9:05:ba:79:6f:
13:cf:fb:5d:98:ab:5a:76:e0:f5:13:39:ec:12:9a:83:76:e1:
77:79:b3:a5:61:2d:06:e9:3b:2a:3f:5d:39:3b:76:bc:16:55:
4d:2c:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:15 2026 by rpki-client