Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File: WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier: OrddnE806PRNavWI0nkilgUln+QCb8CJmQbHa3qIZDs=
Subject key identifier: B5:FF:8A:04:BA:30:86:97:E5:08:13:4A:66:5D:52:A6:28:83:45:D1
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 019D389C3401B88CF30D0A36AA2790AE6DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number: 0A71
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: 9Wfw7dNgON3Iv-f4gZLKJwmqfdk.roa (hash: VxggZehfP0xQ0L6heJyDzgszhdPfd2ExPOVBUF5TwOE=)
2: GsroAK5IWq3NdNiW9BwK5WuY-VE.roa (hash: H3yE7psnQWokNhBsDlT4htqiP5CFlu91pIZ4Z5Ln4rg=)
3: PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa (hash: upIljczPhg0qz3Pzpmtl5kRlJn9GZ5N1pBXA6jY4G1g=)
4: Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa (hash: f+vgH/8lCAyoaopM+ARWem0PqsHCRHeZDcYhmCyBUow=)
5: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: ZQ69qWdisCgfUZ9mFLzLr/zRXltwv9Nkwdcu5WT8jck=)
6: beCqMYhwCg21aSUTwrhNMW4LcEY.asa (hash: 1lmykIh7IPZhs4mpEd/DgaG6yCKrGTPv5ZzBaPKUw4c=)
7: hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa (hash: iKpwOj9nTc417SKhdao7QMWeIdAHHJ1ZRWb6QVPeswk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:34:01:b8:8c:f3:0d:0a:36:aa:27:90:ae:6d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=b5ff8a04ba308697e508134a665d52a6288345d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:ea:1b:6d:f1:7d:b0:46:da:ea:7f:67:ba:
3e:6f:4b:38:31:4e:fd:f2:ba:77:97:dd:cc:58:c8:
b3:90:09:35:db:ac:14:05:64:e8:83:47:5c:ef:ce:
69:b0:bd:17:74:6e:3b:46:39:6e:24:63:9d:87:00:
79:64:cb:05:c8:f8:cb:c7:11:69:19:2b:0c:dd:9e:
90:c3:9f:0a:90:ee:6b:1c:90:ee:dc:3f:af:9a:ca:
80:3b:5b:84:2b:3f:4a:50:b1:55:86:30:91:09:95:
f6:3a:4b:6d:20:d4:9f:89:28:ce:74:de:14:ce:5a:
fb:17:de:a3:3d:1a:dd:64:79:c1:fd:51:12:6d:65:
f4:86:d2:5d:10:3c:35:d4:3a:a2:cb:e2:93:ac:4c:
0c:bb:b9:bd:73:d7:9d:f4:41:25:9d:0c:cf:b5:a8:
7f:cf:2e:b6:8d:1d:c3:0f:5a:3a:7b:2d:76:24:58:
65:11:cc:e3:84:1f:bf:01:8d:aa:a5:c0:31:be:ad:
25:45:b2:98:ae:10:5c:fb:40:f7:19:4d:75:45:51:
9e:26:b1:2e:ad:3c:2d:05:84:5f:bc:73:66:1e:0f:
3e:78:1f:d9:14:75:3a:5f:e0:b2:86:cc:74:da:06:
16:25:31:4d:dc:f8:bd:fa:dc:a1:cd:7d:f2:59:76:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:8A:04:BA:30:86:97:E5:08:13:4A:66:5D:52:A6:28:83:45:D1
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:82:5f:4e:f0:4f:be:61:c4:5f:0b:ed:ac:1c:1d:c6:3b:9b:
80:c5:e2:0e:8d:38:bc:a6:14:f9:7e:e0:e4:d8:41:92:2d:09:
86:0a:9b:6f:0d:e2:5c:5c:7b:6f:c4:2c:1a:a7:14:ac:38:07:
31:f4:0e:bc:1c:e1:cb:a8:d8:d6:e5:68:26:d2:1a:e5:85:6f:
b0:6a:ef:23:b1:16:71:44:87:ca:02:d3:5b:9b:78:c5:08:21:
0b:bc:60:62:d4:37:78:83:eb:db:f9:b1:09:85:e4:3f:3d:1a:
13:aa:7e:6c:41:fe:ff:85:08:7c:9e:64:88:3c:7c:02:6b:d6:
9a:d8:d9:75:a1:62:3b:48:92:70:8d:e9:85:a5:21:38:7c:e3:
f5:08:35:7e:e4:32:03:66:fc:3e:ed:0d:a8:9e:a4:d0:6e:d8:
ac:12:09:7d:49:67:37:3a:e4:48:e4:e9:d0:c9:6b:f9:25:f5:
fc:b4:ee:92:cc:69:a1:c7:5b:4e:36:70:a1:85:63:a3:5b:b6:
d4:3e:7a:9d:0b:89:c7:07:cc:11:fe:25:0a:7d:b4:09:79:a3:
e5:31:d9:4f:7e:f9:fb:8a:33:bd:e4:58:f2:92:d6:9d:83:1d:
a4:a3:81:97:44:b5:28:85:b7:86:60:a8:d0:d9:e1:d7:f0:bb:
02:05:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:12 2026 by rpki-client