Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
File: WbWUsQer_jKkbE0dvge7tOa7Fjo.mft (raw, json)
Hash identifier: J6QsBvs8qvSilKmfriIEqkyWRTr6nSbv7WaplR9urHg=
Subject key identifier: AD:E4:83:C3:8A:BE:D3:D9:E1:9F:60:7B:AA:D7:48:C1:E2:9E:03:8F
Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
Certificate issuer: /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Certificate serial: 019D38655E9B5C26EFA1A2C3D25FE1C0EEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
Manifest number: 0D22
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: JhQxSoi2iumg0lFCDyE9tVAHyro.roa (hash: kFCWDQuRpVX6RQjX0F/ydaMYuJeOh1OJyMfx401HTi4=)
2: WbWUsQer_jKkbE0dvge7tOa7Fjo.crl (hash: H7v72JL4gK1Kat34QhLh/ajjimoOyT5QhdwclTcPpsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5e:9b:5c:26:ef:a1:a2:c3:d2:5f:e1:c0:ee:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=ade483c38abed3d9e19f607baad748c1e29e038f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:4a:37:ad:f7:a5:9d:38:be:48:32:cc:8f:
4d:ef:7c:38:51:89:93:34:1c:03:2f:7c:67:6b:6f:
7b:4b:69:3f:c3:40:63:b9:5c:94:8c:3e:22:13:df:
dc:83:08:7f:f0:98:79:21:a8:37:16:5d:37:4b:83:
5e:73:05:7d:94:70:91:5c:d9:7d:e8:41:6b:36:f1:
38:2d:c9:94:66:27:db:17:b7:ff:c0:73:be:35:21:
44:b5:f2:dc:4c:b4:13:8c:74:95:ba:4c:d2:31:49:
1f:e3:1e:f9:79:41:fd:34:1b:1b:51:f1:38:8a:32:
b6:60:75:af:0a:c1:3c:f0:55:94:02:d2:60:93:3f:
e5:ea:61:0f:6b:8f:8c:08:41:a0:16:5e:da:b7:4c:
74:42:9a:fb:87:d8:76:77:96:21:c9:30:38:28:b5:
84:35:b6:77:84:c9:02:7d:6d:0b:bb:df:8d:5a:a4:
6d:9e:ad:a5:2d:f0:cc:90:a0:18:98:6c:3c:27:ce:
bd:aa:0b:39:2c:93:6a:8b:13:96:bf:77:2a:d9:9e:
dd:16:4a:f7:ef:cb:e5:5d:1f:30:20:39:22:08:4a:
8d:da:0a:23:14:92:3e:d6:9c:71:2c:b3:6a:d2:75:
84:22:62:d5:20:d6:e9:71:58:0c:82:7e:62:a8:eb:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:83:C3:8A:BE:D3:D9:E1:9F:60:7B:AA:D7:48:C1:E2:9E:03:8F
X509v3 Authority Key Identifier:
keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:5c:b4:65:f1:3e:7f:cf:0b:bf:b4:23:4a:70:26:6c:17:
72:05:ca:20:1a:5e:78:ff:82:5a:6e:6e:1c:00:47:c9:d2:7c:
3e:d3:44:29:35:01:d3:c7:6d:ab:55:6a:54:a3:bc:1f:8f:bb:
2e:74:79:78:1f:eb:84:73:a3:86:48:09:ce:58:e4:37:a2:1a:
0a:f6:f1:74:a8:c3:21:1c:07:3d:2f:17:40:ca:8f:95:51:08:
91:08:b8:55:5a:f2:c7:4b:d6:73:df:8f:a6:a3:85:b4:04:45:
bc:dd:82:88:7b:75:1c:c1:35:7d:ac:06:9b:7b:46:0b:f9:74:
0c:70:ca:c5:89:87:d0:71:89:90:47:cb:11:16:3a:35:52:60:
c2:0b:a1:3e:61:7d:fa:97:89:37:51:f9:cb:81:08:c8:14:45:
9c:fb:86:d9:20:06:65:89:f1:3d:16:69:de:51:89:a7:27:cd:
db:57:b5:b4:0d:1e:46:4c:cc:b6:91:1b:99:4d:cc:86:9c:40:
7f:9e:d8:0e:de:2e:11:69:ae:60:9b:5d:f0:76:3e:f7:8f:b7:
38:51:97:be:54:d6:69:00:0f:60:84:fe:0b:9c:88:c6:15:80:
50:59:7f:c9:9b:9e:0e:a5:e8:36:8d:94:24:fc:f1:89:19:a6:
5f:41:c4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:28 2026 by rpki-client