Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: k++IEnh5xLco86DQr7uMy4kvcsL3jQt18ZFb/B6hXpM=
Subject key identifier: 40:F6:89:3E:1D:0D:DE:2B:83:3C:1E:A7:22:DC:71:94:FD:DF:EE:F3
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 019D39AF2B1DAE7346FB8E5C38F8A63A93AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 0676
Signing time: Sun 29 Mar 2026 13:01:14 +0000
Manifest this update: Sun 29 Mar 2026 13:01:14 +0000
Manifest next update: Mon 30 Mar 2026 13:01:14 +0000
Files and hashes: 1: ra29butMifiezKtKfx76h0-beS4.roa (hash: CSRhvGkVJgI5m+Ih+PZR1asLchKiPtTXHdFmOp2umxE=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: mPj+mQvsQET8tP8IPVWXFBwyXEP2s8e9BVKQP3Locls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:2b:1d:ae:73:46:fb:8e:5c:38:f8:a6:3a:93:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Mar 29 13:01:14 2026 GMT
Not After : Mar 30 13:01:14 2026 GMT
Subject: CN=40f6893e1d0dde2b833c1ea722dc7194fddfeef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:0e:31:8e:63:3a:5d:93:9c:e1:34:51:e5:
86:69:5c:76:b3:de:9d:66:77:35:90:a9:95:17:cb:
9d:de:cf:9f:e7:e4:a0:6b:94:3a:94:ec:dc:bb:6b:
83:d9:86:e1:2f:19:8e:31:cc:7b:04:f7:d8:41:8e:
7c:7d:00:a2:b5:91:2d:0f:7b:90:61:b1:f6:90:2d:
8f:67:52:94:bb:65:28:8c:3a:3f:ca:b1:68:1d:53:
da:04:9e:b0:f6:c5:04:2e:26:4f:b6:a7:29:4a:6f:
48:d6:5b:8d:29:22:02:93:fd:35:97:a1:66:4e:88:
34:30:19:eb:a7:03:ad:b9:3e:cf:0d:27:6c:76:1b:
67:40:bb:49:7e:82:a5:e0:61:5a:87:8f:88:64:e6:
02:98:47:2e:9b:13:e4:43:a8:df:d7:3c:d9:66:91:
f1:0a:19:9b:59:8c:b9:27:98:68:ea:d3:93:77:d8:
d6:df:c0:8e:62:7a:1e:5f:ff:42:53:e5:bf:b5:80:
73:6e:87:5b:31:10:5b:f1:6e:9f:19:4b:ab:9d:63:
23:c7:90:d3:3b:9b:a8:3d:54:a2:0e:42:85:9b:15:
69:43:d5:e3:c7:53:40:6e:c4:eb:7d:dc:64:bd:cb:
95:16:8d:e4:4b:ad:99:fa:9c:9d:fc:27:3d:91:c2:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F6:89:3E:1D:0D:DE:2B:83:3C:1E:A7:22:DC:71:94:FD:DF:EE:F3
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b9:06:01:20:26:c2:1e:35:c7:3c:a3:f8:c2:37:d5:e8:64:
59:99:fc:95:e9:37:a0:65:88:1b:61:9a:04:0f:ac:55:c3:8d:
c1:17:56:f2:72:1e:aa:d2:21:e4:81:8c:b7:34:09:3e:78:1b:
83:b9:60:23:35:fd:84:ff:e5:80:dc:c1:7d:3c:4b:11:7c:fe:
f5:20:18:dd:80:cc:55:96:8a:d6:56:6d:7f:46:ae:16:4f:85:
45:dd:3f:05:b0:37:c8:ba:87:49:7d:e0:d5:68:e6:9b:59:b8:
03:7e:01:20:79:48:e2:26:21:79:25:e0:c8:0f:38:50:8f:40:
bd:a2:04:5e:f9:44:54:94:7e:d0:b0:c5:b3:40:fe:98:bb:d7:
78:27:90:62:a5:63:db:77:7b:d3:1e:fe:e3:01:ce:fd:54:b0:
ad:bb:c9:33:26:a2:de:6d:50:6a:cb:33:e0:95:19:4f:13:55:
ea:1c:dd:a4:72:f5:26:02:4d:5b:6a:1d:cf:bd:60:54:e8:40:
6c:46:c3:4e:2d:98:cc:1f:25:13:dd:85:c1:12:71:52:8f:09:
f7:56:8c:91:e7:ef:e5:60:12:49:6f:6d:fe:0e:f4:9d:81:59:
32:00:72:c7:2c:3d:5d:96:38:d8:f3:b9:f5:89:60:1c:7a:7e:
4c:d1:43:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rysdrnNG+45cOPimOpOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz
YTE5OTYwHhcNMjYwMzI5MTMwMTE0WhcNMjYwMzMwMTMwMTE0WjAzMTEwLwYDVQQD
Eyg0MGY2ODkzZTFkMGRkZTJiODMzYzFlYTcyMmRjNzE5NGZkZGZlZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PUOMY5jOl2TnOE0UeWGaVx2s96d
Znc1kKmVF8ud3s+f5+Sga5Q6lOzcu2uD2YbhLxmOMcx7BPfYQY58fQCitZEtD3uQ
YbH2kC2PZ1KUu2UojDo/yrFoHVPaBJ6w9sUELiZPtqcpSm9I1luNKSICk/01l6Fm
Tog0MBnrpwOtuT7PDSdsdhtnQLtJfoKl4GFah4+IZOYCmEcumxPkQ6jf1zzZZpHx
ChmbWYy5J5ho6tOTd9jW38COYnoeX/9CU+W/tYBzbodbMRBb8W6fGUurnWMjx5DT
O5uoPVSiDkKFmxVpQ9Xjx1NAbsTrfdxkvcuVFo3kS62Z+pyd/Cc9kcJgAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED2iT4dDd4rgzwepyLccZT93+7zMB8GA1UdIwQY
MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct
NzFhZWE1NGFmODU4LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4
LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbkGASAm
wh41xzyj+MI31ehkWZn8lek3oGWIG2GaBA+sVcONwRdW8nIeqtIh5IGMtzQJPngb
g7lgIzX9hP/lgNzBfTxLEXz+9SAY3YDMVZaK1lZtf0auFk+FRd0/BbA3yLqHSX3g
1Wjmm1m4A34BIHlI4iYheSXgyA84UI9AvaIEXvlEVJR+0LDFs0D+mLvXeCeQYqVj
23d70x7+4wHO/VSwrbvJMyai3m1Qassz4JUZTxNV6hzdpHL1JgJNW2odz71gVOhA
bEbDTi2YzB8lE92FwRJxUo8J91aMkefv5WASSW9t/g70nYFZMgByxyw9XZY42PO5
9YlgHHp+TNFDtg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:05 2026 by rpki-client