
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier: oL49Bo+yWObHeXxhGsh2DBb/6m8YubllV0N9vdYKt/A=
Subject key identifier: E2:4A:B4:64:7C:21:EC:72:54:FB:E3:F8:AA:45:36:CB:B1:5B:60:D2
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial: 019D3941A445B5D092E3EC5083DE83898704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number: 0CF2
Signing time: Sun 29 Mar 2026 11:01:36 +0000
Manifest this update: Sun 29 Mar 2026 11:01:36 +0000
Manifest next update: Mon 30 Mar 2026 11:01:36 +0000
Files and hashes: 1: ISoN8Hz1Tt-g6dokZBe32zhY29I.roa (hash: jqVnvsymB8ypbwPu5QGw3Kqpgjs5LT+P+1zvgA/xIZg=)
2: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: FvlGCMHgr/EjbAUtSra7z78e9ow4MssE2g1klRcwWac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a4:45:b5:d0:92:e3:ec:50:83:de:83:89:87:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
Validity
Not Before: Mar 29 11:01:36 2026 GMT
Not After : Mar 30 11:01:36 2026 GMT
Subject: CN=e24ab4647c21ec7254fbe3f8aa4536cbb15b60d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:de:77:16:67:13:dc:0e:f3:0d:a0:40:d7:
d8:86:2f:05:47:5c:08:00:c4:d1:96:1d:8f:8d:46:
74:31:1e:fa:30:72:56:28:1d:e6:c2:6d:5b:75:6a:
7b:33:bf:b4:39:bb:c5:11:8d:bb:bc:65:08:98:4d:
c1:dc:1c:e0:cc:d4:f7:0c:fa:8a:fd:a6:5a:dc:5c:
84:d9:dc:00:19:13:03:5b:cd:32:50:75:2a:f3:5b:
d2:09:be:bc:ab:02:68:74:5d:9d:04:59:37:51:b3:
93:cb:37:89:b0:74:0f:c3:62:62:56:a6:fb:86:76:
3a:96:d3:e0:39:38:28:94:fc:01:65:14:c0:9d:ba:
e6:23:fc:54:5c:65:e9:05:46:a6:75:ad:32:b6:70:
2b:d1:f7:f8:b1:ac:9e:8b:2f:38:cd:e0:1a:87:0e:
82:c1:af:8b:be:36:e2:58:f1:4c:32:dc:d3:16:ea:
26:bb:56:18:33:7b:1a:54:54:56:2f:22:1e:4b:94:
16:38:47:45:78:69:4c:9d:47:d3:ff:e3:ca:9d:22:
e0:99:96:ba:c3:cf:4e:7a:62:bc:74:5b:51:e4:4d:
86:d4:25:81:ac:29:a8:dd:54:f3:27:9b:b0:b4:55:
73:f0:35:ab:22:d7:ef:bd:70:8d:31:88:51:93:87:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4A:B4:64:7C:21:EC:72:54:FB:E3:F8:AA:45:36:CB:B1:5B:60:D2
X509v3 Authority Key Identifier:
keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3b:27:0d:28:9c:d3:61:10:6a:61:04:30:03:8e:d6:26:a6:
87:74:58:22:37:9b:5f:19:83:e4:ab:e8:8d:56:cc:b2:e1:d2:
c1:66:63:a2:7f:38:64:70:7b:ed:b9:fb:9d:5f:fd:fc:4c:fd:
12:23:20:c3:c1:8b:9d:cb:97:13:d7:d5:aa:cc:21:59:94:28:
af:69:39:c9:7c:1a:0f:a2:55:7b:56:1a:3c:9e:47:de:17:9d:
ec:bf:8e:3a:2d:b6:b7:bd:ca:9f:54:22:9a:1d:9a:66:bd:94:
d3:2e:60:b5:65:c6:f9:c1:42:c8:72:b5:5b:5b:8c:ed:70:dc:
1d:f2:11:f3:b2:fb:cc:16:42:e3:63:29:dc:6f:ba:83:04:97:
1a:0f:56:2d:df:27:8d:6c:72:c4:a8:c2:83:d9:23:f8:d3:7b:
86:fd:fd:37:d1:e8:24:e9:fc:b8:23:b8:35:55:29:8e:14:6b:
13:eb:10:e1:6f:9c:eb:6f:22:7d:40:a1:71:42:21:a9:a5:2c:
75:ce:53:b9:3a:be:51:0b:07:29:23:68:98:af:c9:ef:f9:9c:
0f:ce:cf:b4:94:3d:df:8f:2a:97:e4:84:2f:c3:34:9c:e4:11:
40:35:c9:c4:26:8b:fe:14:88:56:fe:28:e1:4f:11:e1:1b:ea:
30:a4:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:57 2026 by rpki-client