Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: 0k+Q7yiR8PJKOb56YbragLFehQBPuXIovv5bAWWVZ3o=
Subject key identifier: 34:9E:99:E4:BB:37:3E:17:26:6F:66:90:69:9C:E1:E9:B5:DF:9A:43
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 019D36E52D2F4ADF2F05E5D6934AF6AF91EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 1387
Signing time: Sun 29 Mar 2026 00:01:21 +0000
Manifest this update: Sun 29 Mar 2026 00:01:21 +0000
Manifest next update: Mon 30 Mar 2026 00:01:21 +0000
Files and hashes: 1: 0VnbCUUxMHz9IQSGbuoNhNu-3i0.roa (hash: hvzM8HfzEPqtWwc9Q56WgaJxRYytObZ9iUV/CwXnl4U=)
2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: 4e6LLnYtJSSnIkK5+tEsA4EkkEjDnFrvsn9lEJy6Rs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:2d:2f:4a:df:2f:05:e5:d6:93:4a:f6:af:91:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Mar 29 00:01:21 2026 GMT
Not After : Mar 30 00:01:21 2026 GMT
Subject: CN=349e99e4bb373e17266f6690699ce1e9b5df9a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:b6:12:8a:16:f2:ba:13:b1:f2:33:f3:dd:
01:8e:4e:b7:1c:ee:ad:8b:13:e1:21:fd:d1:e2:8f:
e0:33:87:7e:a0:e9:fe:ca:cb:7e:97:a3:c7:d3:e2:
89:6d:6b:2e:3b:12:bb:aa:28:20:4e:09:06:a4:76:
36:3a:5b:44:10:95:1d:9c:a3:e7:0c:19:b6:a2:a6:
ad:ef:80:91:3c:ab:53:29:b9:d2:c4:64:f7:f0:6c:
f5:6f:09:97:8e:ce:60:65:09:c8:62:24:33:a8:f1:
2b:f9:4e:5c:77:7c:d0:66:97:b7:b5:da:16:de:0a:
fb:d6:da:e7:b5:dd:b5:26:30:af:7a:e4:6d:1c:73:
0c:12:8e:7d:65:1e:a9:57:d4:ad:56:fd:0d:54:d5:
b5:cb:62:cd:41:98:c8:be:2c:fd:ec:61:e2:f6:dc:
57:22:92:bb:2e:59:c3:22:d2:f3:24:24:27:f8:77:
b0:e0:92:e7:ba:31:59:a8:38:1b:5b:0f:bd:6f:8b:
42:8a:c4:36:98:31:a6:45:79:1f:38:22:76:2a:ae:
56:ea:d3:c9:73:83:e8:1c:54:01:4b:9f:25:f1:a1:
97:cf:b8:86:5f:18:ba:dc:c6:d3:b3:86:82:48:0d:
ad:f3:43:e6:dd:f0:fd:3c:5f:bf:39:96:55:f7:f4:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9E:99:E4:BB:37:3E:17:26:6F:66:90:69:9C:E1:E9:B5:DF:9A:43
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9d:e5:0e:84:1b:36:ca:d9:a1:3d:51:ef:04:18:c9:02:21:
c4:a0:04:34:2d:d9:69:a7:77:15:8e:ee:33:33:b8:03:b8:3f:
61:31:00:92:ab:c0:91:0e:66:c0:ba:0a:ec:83:23:7f:5e:73:
68:00:02:24:30:2c:79:da:76:10:80:a3:52:f3:c6:62:55:b8:
d1:ca:f3:73:a7:a5:2d:d7:77:83:ea:67:bc:f0:9d:7b:63:60:
f0:39:5d:ba:aa:8c:5a:c9:8b:2d:6a:46:a1:ae:d3:e2:24:44:
50:f9:34:a5:be:b3:14:aa:e3:ed:88:eb:d6:f5:54:34:c0:0d:
0a:e6:e2:3e:85:0e:a9:b7:26:72:83:87:90:84:b2:e9:ca:f3:
3b:44:35:e5:8a:70:d1:04:e6:d0:94:ed:dc:ad:f0:00:44:af:
a6:21:44:64:82:a6:cc:48:02:82:66:2b:d2:04:a7:13:39:a7:
5c:cb:ed:3e:fc:c7:fd:40:d7:5e:a3:99:da:d4:b8:3c:c8:57:
fc:c9:cb:58:bd:b8:cc:3c:0d:f5:47:31:5e:17:e8:c9:00:a6:
f9:e4:07:e7:0d:d8:07:25:39:42:b2:5e:09:b7:c4:78:84:1d:
1c:11:51:86:e4:18:fe:93:29:d8:68:68:b5:18:a9:3e:a4:46:
7f:de:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:35 2026 by rpki-client