Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier: EVNtbH6JBZlgwxw18ABgJP9JkHhxB37WS/NHnpYvYRY=
Subject key identifier: EB:39:FC:6D:33:48:29:4A:34:50:7C:22:DF:0D:0D:48:CE:9F:D1:F8
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial: 019D37C01FF6F79D11373D600135275347AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number: 15B4
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: MQ1rIvHKeTYhLT9zYntvVr0Ep7w.roa (hash: /nZ/kzhs/5Nc05vPwFMbSjWv3DV2VWk20JauYWJRGIY=)
2: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: +ACpa6mj3pQ1kFYWfarQSnpYsR1fJLFKcnRjNHCdqf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1f:f6:f7:9d:11:37:3d:60:01:35:27:53:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=eb39fc6d3348294a34507c22df0d0d48ce9fd1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:f4:d6:d7:ef:7b:c3:13:7c:a2:ce:10:cb:
b6:c4:1f:a5:7a:f9:6c:07:ba:78:3e:79:b4:17:ae:
77:61:e1:36:b7:04:99:e0:3d:3d:99:17:d9:e4:44:
35:54:38:71:a4:ef:f3:66:38:8a:68:30:2a:16:75:
f4:30:c8:9e:d6:5b:62:2f:80:d8:3e:60:2d:72:74:
6e:3a:df:bb:e5:d3:e6:b3:97:00:4b:1e:47:81:4a:
92:cb:c4:6f:b1:43:f9:14:e5:b9:96:ed:fc:43:1f:
91:b0:be:c7:36:85:10:a6:fd:bf:be:20:50:b9:74:
d4:32:53:df:1c:55:a4:02:b5:3d:6a:f6:8d:98:0b:
e2:a1:45:52:b7:68:cd:81:a0:04:af:9e:c6:04:ad:
36:a1:44:e3:f2:93:c2:4a:7c:e2:4b:a3:75:b0:7d:
75:4b:41:b8:d4:f9:00:de:74:96:60:8e:91:12:fe:
48:9b:28:f0:3b:6d:ae:9e:1e:d3:99:7c:14:46:75:
2e:4e:15:90:f9:20:e2:35:22:be:39:28:eb:6d:66:
74:f3:f1:be:f0:5e:6f:73:17:18:c1:ef:18:e8:7f:
81:4e:36:53:f0:51:ad:40:d9:54:a1:b2:15:b0:9f:
5e:1e:ba:eb:cf:d6:4c:8c:86:da:0d:e6:80:eb:e5:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:FC:6D:33:48:29:4A:34:50:7C:22:DF:0D:0D:48:CE:9F:D1:F8
X509v3 Authority Key Identifier:
keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3b:b6:dd:22:22:b9:24:82:25:72:24:cb:f6:88:06:5d:27:
e2:24:ac:08:8e:43:40:ad:8c:0e:db:bb:a5:df:b8:0e:af:77:
7d:11:1b:e6:a2:14:ff:0a:b8:0f:89:f1:f8:99:5d:66:7f:19:
6b:fd:8e:71:a9:d6:d0:c6:0b:08:b8:37:f0:1c:36:2e:1d:42:
a6:34:f7:09:bb:db:d9:1e:cf:11:c8:0d:f8:c7:69:fa:87:40:
49:19:14:cb:54:a4:01:71:c1:94:8a:39:3e:95:bb:6b:51:4e:
a4:9b:f1:e7:f2:ae:42:23:ef:90:25:f4:81:a5:3f:83:9a:f6:
5a:29:50:18:d2:e1:14:4b:af:21:76:ec:9e:71:12:21:74:f2:
e1:4c:70:0c:f9:d3:ba:fa:d5:d0:0f:f7:a4:15:77:ff:9e:50:
ec:fe:39:28:2d:e4:ad:2b:35:2d:07:fa:eb:9d:75:e4:35:78:
21:dd:0b:32:31:e7:b6:f6:b6:4a:90:47:9b:08:39:bd:ce:2e:
0f:18:2c:a0:a4:0e:e5:1d:e4:80:c4:f9:06:50:cd:20:e9:bc:
68:b8:b5:e5:75:a6:ed:34:57:54:30:eb:c0:15:0c:38:3c:2e:
d8:3f:d7:32:62:55:90:41:6b:3c:4a:0e:1a:e9:e6:37:b7:87:
f4:0c:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:52 2026 by rpki-client