Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
File: WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json)
Hash identifier: pA1pl++QcTGI5yY0apTWn5geICR04R2EBPJOsS1dsMo=
Subject key identifier: E3:4A:C8:CA:78:21:B2:92:40:EB:9F:37:77:79:E1:8C:83:9C:84:EE
Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840
Certificate serial: 019D3909A523C84060DCABE651ABB5E536F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
Manifest number: 03C1
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: VNGUqHUxxeCMBkTDrYo9p0+zj7CKHLEY79LxbUENu2I=)
2: iCGtMcKWAgHtdBjYxb9RAqEOB7w.roa (hash: guUNmnJF7IxeIWyJsGQHdkbHY/AzsyJbtsB8emR784k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a5:23:c8:40:60:dc:ab:e6:51:ab:b5:e5:36:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=e34ac8ca7821b29240eb9f377779e18c839c84ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:a9:3d:42:ec:54:0d:c6:d9:d2:08:51:4c:
83:a8:e4:b4:f1:d3:41:a7:e0:ff:de:4a:68:46:4c:
23:5b:df:55:db:03:8e:c7:e3:cd:67:97:8f:84:d5:
54:96:5e:b9:d4:48:12:75:a5:20:94:98:47:4d:5f:
fe:12:60:1d:b5:85:e1:d2:be:fd:79:09:94:bb:54:
e2:59:3a:a1:d9:6a:29:a5:34:38:61:00:fe:36:e1:
69:27:23:12:c2:2d:d5:59:59:52:15:52:1a:89:73:
18:c1:51:3f:30:06:65:c6:60:cd:07:16:66:f2:11:
97:44:b2:f4:60:5a:c1:1a:82:0f:f2:9b:be:1c:9d:
ef:d2:bb:1f:48:7a:5d:66:8c:a0:29:dc:07:d3:7d:
22:9b:3e:d6:b1:ae:fd:af:54:58:4a:00:96:41:f5:
0a:37:19:f8:87:e1:bd:d4:5c:73:21:ad:89:5c:ff:
71:c7:31:00:13:4f:ce:d3:72:e3:4d:7f:22:55:17:
44:a1:78:a3:bc:70:7f:9d:b9:d0:b3:70:cc:36:4e:
17:5d:2e:5d:18:11:13:ab:70:2c:21:75:ea:d4:94:
36:bd:3d:cd:75:7a:bd:e7:06:2b:41:e5:02:6a:9d:
1f:ae:67:4e:d1:6a:ae:fb:08:d5:dc:8f:db:d8:cd:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:C8:CA:78:21:B2:92:40:EB:9F:37:77:79:E1:8C:83:9C:84:EE
X509v3 Authority Key Identifier:
keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:98:96:02:d2:2f:2b:af:d5:dd:1a:3e:d9:b6:b2:bf:36:d7:
cd:1f:c9:43:19:29:a7:30:25:60:06:85:f4:02:36:21:71:3f:
0c:ec:b2:4d:cb:e1:d2:8a:55:88:ab:bc:34:c1:d3:bc:32:98:
b6:a4:8b:e7:3d:b5:77:81:6d:2c:24:e0:a6:bc:2e:6b:3a:c1:
99:1f:00:30:92:ee:b8:32:19:eb:43:2e:37:9f:2d:67:a3:d7:
de:02:d3:45:a0:5c:53:85:b3:2a:c4:02:d8:8c:ce:ff:90:91:
fe:97:d6:65:c3:3d:2d:69:61:86:81:18:14:fb:6c:5a:82:83:
a1:3f:06:0b:5c:1f:0d:92:3f:e7:e2:40:8d:e5:27:10:4b:1d:
a1:70:e2:fb:a7:3a:26:a1:e0:71:99:1e:48:fa:8c:dc:1c:fb:
92:b1:db:8b:78:9b:a2:f7:d6:b8:0b:1f:db:38:13:fa:cb:55:
e9:39:6e:3d:38:43:a1:b1:13:7c:18:06:eb:12:0a:d4:54:a2:
eb:c2:fa:5b:e3:46:84:b0:f0:50:09:4f:bd:9b:2f:cd:ec:bd:
b3:b0:6b:c0:c7:8a:4f:3a:c0:0d:7b:ea:f7:ce:a6:85:93:11:
ac:2f:53:29:9c:0a:e3:31:9c:98:c9:57:c1:c8:7a:1c:0b:0f:
3f:54:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:33 2026 by rpki-client