Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier: L8fLcLg07UHFV9/mMY4Itd37HB71o1rXVoYhxu5RbkY=
Subject key identifier: 4F:F9:01:DF:4B:D3:AC:AE:F9:1B:05:32:5E:14:0F:B9:95:86:E1:57
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 019D38D2D6CE4BED1646D915DFE29440C38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number: 0813
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: eG+f1zRFuzQwz5tbM+H1dN59MB1qXiJeulsX8MnYN3s=)
2: nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa (hash: ybsBDRN+Wgxdd71NM5Q38e+H0vIZjbotj33kAgs43CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d6:ce:4b:ed:16:46:d9:15:df:e2:94:40:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=4ff901df4bd3acaef91b05325e140fb99586e157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:45:3e:ad:9b:fc:fc:0a:a9:10:73:80:8b:
de:0b:58:38:47:b4:58:cb:66:b7:01:c8:81:e2:6b:
76:71:22:99:fa:88:f2:c8:df:0b:38:85:35:45:7e:
99:f8:32:5a:b2:60:b7:c7:8b:38:34:07:c2:03:2d:
c2:1e:89:22:86:f6:11:ff:40:87:5f:76:93:21:a8:
9d:4a:51:e7:fa:fa:47:b9:f7:89:35:60:6a:59:76:
07:2f:95:9c:e0:a1:75:70:81:a6:df:d0:d3:4e:0a:
c9:ea:d1:b6:c2:c1:74:a0:42:52:0a:16:ec:17:d7:
95:eb:64:31:48:4a:40:f5:63:c3:73:b5:fc:77:2d:
a5:64:e1:c3:89:c6:1b:09:4c:17:9a:89:0a:d1:67:
bd:c9:9f:e4:f9:04:3e:ee:a4:b1:cf:8e:a8:06:22:
5a:63:db:30:5a:63:44:87:f5:f1:ce:4f:de:72:b1:
25:f4:c8:72:55:d8:33:b3:cd:3b:1c:99:0c:d0:69:
e4:05:b8:c0:f1:52:a3:f2:3e:f5:c5:a4:72:49:6c:
2b:9d:5f:2a:2d:3f:d1:3e:84:66:c5:35:e0:aa:bf:
c2:91:5a:ea:f4:a0:cb:75:3b:68:98:03:79:41:a7:
17:be:50:93:e6:d9:df:df:d8:d4:0f:2c:4a:2f:e6:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F9:01:DF:4B:D3:AC:AE:F9:1B:05:32:5E:14:0F:B9:95:86:E1:57
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3a:9b:14:39:94:41:cb:59:6d:cc:2b:9e:31:26:b0:2a:d6:
b7:a3:11:15:26:72:a5:67:7d:4b:90:12:ef:0f:3a:22:e1:de:
ae:04:77:c8:35:53:f1:90:3b:5a:25:6f:57:b1:81:24:b0:c3:
7b:c7:3b:64:2e:0d:94:68:50:de:8c:15:3f:e4:62:83:7c:01:
7c:75:fa:51:5d:ed:cd:cd:9e:15:0b:8f:b9:8d:6a:b9:35:d8:
37:2f:d3:7e:f9:0a:d1:58:0b:b0:4d:8f:7d:0d:3d:28:15:25:
8b:0b:56:b2:6d:af:c6:35:31:d0:f7:e7:e2:d5:93:c5:01:00:
55:09:c0:47:92:c6:61:13:58:2c:cc:73:d8:c5:8c:e9:0c:7e:
96:9d:0c:24:93:de:b3:02:17:b1:58:7a:ec:ca:3f:31:37:80:
27:41:0f:04:f3:37:46:81:f3:16:22:22:5c:cd:8c:09:c8:6a:
10:c1:1c:0c:3b:f2:fb:9c:0e:a9:dd:13:87:fc:e5:92:a2:cb:
6d:33:f3:8c:03:9b:de:d0:95:78:01:2a:96:3e:4c:6f:1b:3c:
52:00:d7:c2:2d:d4:8b:98:b1:19:bc:c8:67:21:44:32:f1:dd:
a0:72:60:2b:35:1e:06:16:f4:b9:83:25:80:e7:80:21:b7:00:
37:b9:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:37 2026 by rpki-client