Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
File: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft (raw, json)
Hash identifier: hm5ENYQgsK+cnqMNuq6b1GVw1EKYMgyt+eGi1H7HkMw=
Subject key identifier: E0:07:6D:DB:EE:3C:19:80:C1:0A:D4:11:16:80:A1:89:16:12:0D:29
Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
Certificate issuer: /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Certificate serial: 019D389C53D9D34FF01FDBFA52FCADBDFA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
Manifest number: 0B19
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: 3vvkYggg9yd7bG-fFHqOzoZIhMI.roa (hash: Jrh7+DbyRftfJWMehnZ2UWj84adngEe9IfNQWMntaWY=)
2: KtwjJxqN8UH08FldgJvcpESkUzQ.roa (hash: VQpQKrducwAP8Rpog43Qsa4SpXdFqCQ1EvVdnE9AdDY=)
3: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl (hash: b7tBgJgw+4kEbmy84aFdAfVMJaJ0yw1aYs/Z/2igBBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:53:d9:d3:4f:f0:1f:db:fa:52:fc:ad:bd:fa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=e0076ddbee3c1980c10ad4111680a18916120d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:70:ba:b6:ee:a7:17:52:5f:9d:6d:3d:d7:
5e:cd:0c:0a:86:45:18:62:ee:28:77:d7:79:6c:90:
b7:99:c5:a8:b0:ad:fe:f1:21:fb:40:04:e5:1d:b9:
09:fd:7b:89:c7:3f:3d:3d:81:a1:42:a7:13:23:71:
51:88:ae:6d:12:c7:7b:82:9a:d3:78:23:7e:dc:8c:
74:d5:68:5b:fb:bb:4a:dc:c1:d1:15:5a:20:3a:b9:
0b:7e:ea:77:8f:f3:3d:5e:21:46:2c:d7:80:e0:81:
e7:50:1a:5b:95:3a:7e:f1:af:cc:00:a1:77:c4:d6:
61:1b:64:6f:64:54:0b:c3:dc:50:e9:ed:5a:35:6b:
0f:79:9e:65:e0:83:cd:ba:74:7e:63:f6:de:0d:81:
c1:1f:d4:95:eb:9c:0b:2c:42:9f:8b:a8:8f:bc:5b:
30:43:8d:7a:73:ce:f5:07:81:76:48:31:0f:cc:18:
1a:38:2a:b6:0d:cb:9b:75:c4:58:1f:ef:18:b5:c3:
83:06:4b:46:85:10:f4:04:47:cd:b2:25:a4:22:53:
47:b9:14:95:83:cf:ee:38:c8:b0:98:b0:89:af:ed:
52:55:3a:09:ae:82:4e:b2:b8:1d:a3:d0:a1:9e:58:
a2:3d:76:e2:57:75:24:ad:4b:61:3b:8c:b3:cb:0e:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:6D:DB:EE:3C:19:80:C1:0A:D4:11:16:80:A1:89:16:12:0D:29
X509v3 Authority Key Identifier:
keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:40:c3:9c:6e:bd:3b:69:6f:b8:ab:a8:1d:96:42:4b:c8:
63:8a:d0:36:c3:da:a0:07:e1:da:d8:63:5f:db:ae:a4:8d:6a:
3f:73:df:75:16:62:75:f9:12:9b:ca:34:34:9e:1e:50:b5:9e:
71:47:da:67:cb:d7:92:fd:5d:28:7f:e9:80:59:da:bc:50:47:
1e:47:62:3f:b9:4a:bd:39:1e:02:08:e0:8c:40:72:df:91:88:
ba:3d:c8:f2:1c:22:1c:11:1b:2c:5e:12:25:b5:31:49:7e:ae:
05:5b:42:03:57:1e:93:08:c0:97:a9:60:c3:cb:4d:e0:a3:19:
4a:48:24:cf:23:8a:76:3a:ec:b8:c5:32:1b:25:6d:0d:bf:0e:
83:13:01:a0:0c:b1:93:e8:8c:65:a1:fd:5b:07:10:0d:2a:56:
6b:04:4c:3c:7a:24:c6:09:fe:e2:03:ac:68:71:04:86:13:17:
0e:41:76:13:28:c2:12:65:55:c0:9f:a6:2c:82:bc:76:5c:bf:
5d:a7:79:3c:57:f7:ab:c2:cf:71:44:dd:c7:47:47:15:52:75:
df:f3:19:d1:7a:ef:06:47:9f:bf:0e:9e:0a:05:f8:55:f1:5d:
80:d0:19:6f:0d:ca:59:b6:84:77:16:78:97:f6:ca:19:e9:98:
dd:f4:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:54 2026 by rpki-client