Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: YFfGY4zH+4I0VhHjK+8+pdFHoYlkM4JMgSnIvzMPslk=
Subject key identifier: DC:00:7B:E1:CD:1B:89:25:89:F3:15:96:14:D0:5F:0E:A5:94:15:02
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 019D37F76DC4139DD4C36BD1362420F69E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: JaKxh+JUVSA75Fk7EUbxhqGnOuxSARYC1OuTRN6fa68=)
2: o1zjZNlBpE66dvhTYzI4pj6m9jM.roa (hash: wVl4rNHZWCUbMyCjP/aG6EY9BIdfaxUELJ3NnDLrmak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6d:c4:13:9d:d4:c3:6b:d1:36:24:20:f6:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=dc007be1cd1b892589f3159614d05f0ea5941502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:ed:9e:64:cb:2a:48:99:1b:58:08:87:8b:
97:35:e5:75:85:37:45:ec:ab:6b:c8:c1:d9:5d:3c:
09:16:09:19:e7:e0:69:20:24:0a:c4:4d:1d:6e:88:
ad:ff:ff:d3:08:fa:9d:a2:cd:2f:fa:c0:97:a8:07:
e3:93:91:13:76:6d:b4:1e:d3:39:64:83:18:0b:9a:
65:4c:ea:05:86:68:b8:37:92:03:d6:05:90:ce:80:
20:37:3e:9c:9d:76:08:d5:b8:fb:06:0b:44:1d:ca:
7b:56:14:c2:65:3b:5a:eb:9f:ce:a0:6c:70:cc:e9:
2d:8d:96:30:a2:80:9d:18:0c:e9:45:03:7f:c9:88:
4f:40:85:24:8b:2b:b8:c3:43:80:dc:af:d5:44:3d:
de:bd:78:b9:8d:68:f5:d3:66:e9:3a:9d:e4:c7:b7:
e8:e3:45:98:bc:21:15:14:e7:37:3d:12:b8:4d:23:
0d:33:46:91:94:a8:79:06:bb:b7:e8:bc:33:ca:47:
29:e8:72:39:95:9f:54:76:52:90:32:ec:39:b5:78:
0e:d5:b5:d2:6a:c5:fe:04:c4:69:aa:96:a5:25:00:
bd:41:57:4d:7f:80:30:4c:94:a3:a9:3a:a4:dc:a1:
9d:f2:b1:71:0a:2d:c5:35:aa:85:35:f3:c2:24:0f:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:00:7B:E1:CD:1B:89:25:89:F3:15:96:14:D0:5F:0E:A5:94:15:02
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:6b:c0:f1:91:5b:46:eb:d8:23:11:e9:ea:12:58:a1:9d:
78:7e:5c:3a:82:08:e7:d3:d7:90:60:4a:db:08:b2:2b:da:9c:
d2:15:aa:c6:ac:99:eb:13:c2:1d:c1:5e:15:cc:ca:00:f7:b0:
f4:83:e7:5f:83:62:02:59:af:d1:89:26:c4:fe:76:41:5d:cf:
f7:55:b1:ff:10:dc:b8:61:a9:a5:1d:cb:55:0e:e7:9f:2a:68:
58:90:7f:81:ac:db:1e:b3:da:ff:45:2b:95:89:af:18:7c:3d:
26:6a:cf:8e:85:1a:f1:a4:21:ab:b0:04:2b:c6:1c:fd:d5:12:
53:31:b8:d8:2c:9f:36:9a:4d:24:24:64:74:3d:50:bd:3b:34:
fb:68:59:74:bb:09:c5:30:09:c2:91:2f:fc:34:dd:8f:53:8f:
a7:cd:55:a8:d4:1b:ba:4d:15:fd:a9:45:65:9c:79:be:a3:6c:
7f:d9:49:10:1b:ca:27:af:b1:18:50:2a:59:08:88:e4:6f:02:
24:30:16:8f:0f:02:92:88:9a:35:ca:a1:66:09:f3:35:4f:f2:
25:5a:67:d0:47:8f:56:13:1b:16:df:c7:e7:58:f8:dd:8b:5e:
26:7e:6a:37:1f:2d:c2:d8:31:4a:e7:4c:50:82:5c:92:b1:81:
08:9e:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:02 2026 by rpki-client