Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: Ht0VEOKakdZXAySJhLuDSjSW53KuwyhixixxEYo5c3M=
Subject key identifier: 15:4E:8F:2D:21:2C:6A:7A:ED:A8:A3:B7:0C:4E:53:D5:7B:4E:24:94
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 019D389BFAC4D8FD49455C2DBC3FFCFCC574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 0C3B
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: C0FSud6nu0_Eyfo1MhLrfHdFT0M.roa (hash: tqmfcAHZDKuD6gEpt3xtWJydvSkzRm2I6adf38pIDlc=)
2: GkQO5rcPfgn2w75NaD9qydi-Rgw.roa (hash: p26ROjD8Y6lyqnpvxzkXIxQnFLDkFbszO+JOYh9DarQ=)
3: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: 12Zz/ecQYdmCjge2KpBNn+yCra91/yDAPj7iTZTqPSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fa:c4:d8:fd:49:45:5c:2d:bc:3f:fc:fc:c5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=154e8f2d212c6a7aeda8a3b70c4e53d57b4e2494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:d1:2e:bf:ba:68:82:9a:39:e8:e3:bf:56:
08:22:d0:cf:9d:ed:05:08:ae:5e:de:0f:3d:3b:99:
9b:f8:f8:9e:59:b6:8e:d8:30:d0:b9:04:f7:e4:76:
52:a5:88:8a:8d:03:f7:32:52:e3:1f:da:0e:74:7d:
1b:c7:0f:45:b0:74:ff:73:7e:4d:52:6f:2b:eb:7f:
12:33:27:61:48:70:a3:61:b5:66:fb:78:ea:21:98:
1a:5a:7e:c9:d9:73:87:bb:f8:2f:a7:95:be:38:b3:
70:95:32:d4:e9:1d:3e:7c:0a:49:4d:55:b5:9f:15:
20:d2:39:fd:ab:6b:2b:1b:d8:81:16:78:3d:22:26:
79:c9:e7:b8:56:c6:a7:7d:88:08:66:9b:96:b5:55:
45:d6:7c:b0:7e:94:bc:01:10:24:41:36:21:88:d7:
6e:1d:27:16:21:83:af:40:f4:8b:37:93:b1:29:c8:
d1:13:52:ae:d2:5b:45:eb:e2:99:a0:b5:77:f1:5c:
c8:2b:8c:2e:8d:18:e5:4c:a9:fe:79:b2:8f:82:8f:
9d:75:31:39:cd:81:1e:61:ef:27:8f:e3:e5:49:f2:
53:ad:48:30:f3:84:50:97:93:e5:92:f5:6b:4b:46:
4e:a3:7c:10:93:62:b8:a7:75:1c:57:96:f2:56:71:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4E:8F:2D:21:2C:6A:7A:ED:A8:A3:B7:0C:4E:53:D5:7B:4E:24:94
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:f9:d1:ef:52:d5:13:95:c3:df:b8:15:e3:db:43:6b:4e:
43:91:a8:6d:9a:93:ce:a8:0a:20:df:ec:7d:04:a7:b8:3b:14:
9b:4c:be:03:82:d1:2f:21:58:b0:3a:97:95:6e:17:27:37:dd:
61:11:07:f9:26:56:66:a8:ae:16:8d:b0:53:7b:df:f2:a1:37:
0d:c0:2f:38:38:2e:2a:1e:34:e0:b8:5f:1b:03:06:c4:b1:89:
1b:a0:c0:b3:b3:3a:40:93:61:44:d3:12:58:33:5e:b3:59:8b:
9e:a9:19:10:97:5e:a8:06:fe:31:52:2b:5b:f4:8a:c1:dc:d4:
25:e5:88:f8:07:55:17:65:7a:bd:9f:fd:98:f5:fa:c1:69:d4:
4f:47:e4:b9:14:9d:13:c1:35:fd:f7:1d:e4:b3:df:e7:c2:af:
84:29:a7:98:df:18:87:c5:77:da:73:0e:66:fc:2d:a8:f7:53:
7e:71:d3:6f:69:de:da:10:df:8e:12:8b:dd:f0:4c:c7:c4:e5:
24:bc:7d:16:82:a6:71:64:51:16:71:13:5d:7b:c0:e7:d7:8b:
5b:83:6b:e3:82:e6:75:3b:39:db:f6:78:ee:af:19:f8:01:28:
46:74:ad:2c:ee:3a:a2:63:14:43:0e:33:80:d8:10:57:7f:b4:
a2:1d:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:50 2026 by rpki-client