Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: ghRb+BQUPFuj6KcYbqfeJdaRp3DGSewf2kJahli5gFg=
Subject key identifier: 9E:6F:B6:CD:72:F1:C5:F3:BB:28:F5:50:0C:3D:1C:CE:10:63:89:FC
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 019D3752CC4AAE6EDB4A033B89776CFA01AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 05F2
Signing time: Sun 29 Mar 2026 02:01:06 +0000
Manifest this update: Sun 29 Mar 2026 02:01:06 +0000
Manifest next update: Mon 30 Mar 2026 02:01:06 +0000
Files and hashes: 1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: wexBqYf+Ks1JEHXQrB0xuQLkXRvORbGiHg9kF41EZfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:cc:4a:ae:6e:db:4a:03:3b:89:77:6c:fa:01:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Mar 29 02:01:06 2026 GMT
Not After : Mar 30 02:01:06 2026 GMT
Subject: CN=9e6fb6cd72f1c5f3bb28f5500c3d1cce106389fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:f1:a5:80:c7:6f:b3:23:cc:c2:95:04:fb:
f0:28:23:9e:9c:67:a8:bc:0c:fa:d0:78:88:12:3c:
e5:40:c0:83:53:c1:05:15:ad:89:da:15:fc:7e:f7:
75:7f:86:fd:29:01:be:37:45:a4:46:1d:6e:2b:be:
a9:69:c2:17:99:97:92:29:bc:db:92:1d:a2:4e:05:
98:19:43:a2:41:25:db:ce:07:8c:bd:6d:29:42:b2:
93:fc:33:bd:16:cc:de:ef:c3:14:7f:31:a1:1e:c6:
8b:7e:b7:30:e9:68:5d:bb:be:ce:65:b9:93:ad:7f:
31:32:49:ae:46:42:e1:8e:ed:37:9a:ad:73:12:66:
a0:0f:78:ad:fd:a4:7a:8c:4b:24:62:13:21:7b:ed:
20:5b:22:16:dd:d9:39:e0:18:ef:31:e5:06:6c:1c:
51:fb:50:64:72:66:38:a1:28:57:68:99:1d:8a:cd:
95:a5:76:96:fa:78:e1:de:cc:8f:3c:bc:47:49:f5:
cf:39:f4:5f:2a:0f:f4:ff:bf:83:fa:0d:a5:40:55:
20:c8:c3:e7:63:3a:87:48:c6:0e:34:0f:c4:0c:5e:
38:75:75:08:c6:ad:4b:a7:c3:11:d8:cd:47:6d:97:
90:01:cd:84:4e:2d:b4:bc:20:aa:a4:91:d1:6e:ee:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:B6:CD:72:F1:C5:F3:BB:28:F5:50:0C:3D:1C:CE:10:63:89:FC
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dc:4a:9f:ff:a7:9e:96:4e:b3:b1:5b:40:6c:cc:76:d0:93:
6a:01:30:2d:db:d0:ca:72:5a:d5:01:d0:63:4f:25:35:86:44:
3c:19:d4:b3:0c:92:4b:5a:0b:e9:3f:9f:b5:cc:18:67:9e:ce:
d1:a1:bb:fc:f3:66:f1:b1:1a:d1:19:f9:a3:06:65:d5:9b:26:
e2:2c:c7:57:9e:6c:bf:e6:e3:1e:e8:32:69:be:50:d9:b1:73:
14:a5:ad:4c:63:46:73:21:d3:10:18:24:6c:13:bd:a4:31:e1:
a7:95:ff:b0:be:50:d2:5a:99:87:c9:fd:a4:6a:63:e7:3a:15:
21:b7:80:8e:ab:b3:f9:a1:55:e1:06:f9:b2:5e:20:8e:07:e5:
1d:4b:93:18:d5:f4:26:e7:76:4d:50:6b:5b:26:4a:e7:71:8a:
5e:00:93:1b:85:3f:43:87:1f:d3:13:d2:01:63:01:84:ce:3d:
b5:a4:ed:3d:4e:25:bc:63:4d:cd:22:a5:99:3a:d3:da:44:75:
8b:56:ea:27:c1:20:f5:59:7f:97:cc:08:45:52:c4:6b:ca:bf:
3a:27:34:c0:e6:30:b1:cf:b6:8f:e1:af:66:77:96:79:aa:cd:
50:bf:1e:d5:ce:bd:fc:55:5b:59:79:a6:07:62:40:31:c2:09:
57:c0:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:57 2026 by rpki-client