
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
File: WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json)
Hash identifier: v9Tnn0jQjSIjXNrKbmwaOi8V8bWjiRMnbt7vM68QYsw=
Subject key identifier: 09:BD:D1:AE:2C:5A:36:4F:B4:9F:56:1E:95:3D:69:51:83:52:03:FB
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 019D389BAE9A3A3B06F5F843056572477302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
Manifest number: 093C
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: Ig_WgszMhVHZYvhX0AKKIeaHqO4.roa (hash: 31Kwv0BFF15OinZPzQ5WYpqKoqx/spvM+71+hOhfBu8=)
2: N3r4w-QIKvt5t1EKPBx4W22sMKU.roa (hash: Qa8i2BVXp+zXiBbIFyM8ihwV78k0q1+vinEYtsDy1/E=)
3: UhhULK4VhHUpXbHrquJFK5XwzTM.roa (hash: cTOGj51BZIsKfKZvp1Y6kCOw9tCtCwH0h8hrKoSZm2w=)
4: UqpRL__Efeid9a8cIN4aVjD7btc.roa (hash: Jo0BVJIAZaCqo9aHwqKM5mX9gen1oqBNsGDUzTFR458=)
5: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: g1Ble9iXaokG5bZhn7DmDLj/w6PjqSvttf+Jij8MxTM=)
6: ZyRWAC7NCFedZIOpxUg9JU9IHfM.roa (hash: djiwnDUBrkX+JjGnUgH9ECdWKDO/0XRL0v5VkTR1fr4=)
7: dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa (hash: YlXWb2ZjWO3ovA5560Lai+bFI6OdRPrtCGWZJCxeZw8=)
8: eiNx0hyWr9_GPT53IvxQM9d7nQM.roa (hash: 24M5NJX5qdMlDv9jNkA+N6M6xg4k0uj4d4NoagskJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ae:9a:3a:3b:06:f5:f8:43:05:65:72:47:73:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=09bdd1ae2c5a364fb49f561e953d6951835203fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:a5:a6:2b:3e:7e:da:f3:c6:c5:65:7d:37:
9b:12:fb:49:5f:22:3e:3f:94:32:77:e4:4a:4d:dd:
66:41:17:d5:19:51:cf:5f:45:3c:c1:c2:99:e4:d9:
22:30:71:bf:28:00:2a:2e:29:12:c8:3d:ad:eb:78:
94:cb:99:59:bc:c9:06:d2:ed:b0:e4:aa:6c:34:92:
e7:75:a7:5b:34:0e:30:27:c0:af:03:c8:25:48:e0:
5a:03:cc:f8:2d:4e:64:4a:f6:aa:d1:01:24:34:e8:
a0:3a:77:fe:61:3e:81:8b:cf:64:7a:32:af:8e:38:
f2:27:ab:0f:13:c3:e7:5b:a1:e9:31:b4:11:e2:9e:
47:41:94:94:2f:43:f3:cc:7e:18:85:4c:52:ba:03:
82:63:40:be:4a:89:0f:71:d2:6e:ff:48:6e:11:f0:
9c:b8:86:52:49:20:65:9f:ca:1e:e4:a5:7f:59:1f:
6d:b2:44:f5:13:ff:af:6b:3d:ff:32:78:0a:97:4a:
a5:d2:7a:56:32:0a:69:b5:e8:79:ae:68:16:f3:5f:
cf:ae:bc:d6:e2:bf:32:0c:cb:0b:f0:9d:cd:ab:3b:
20:3d:bf:aa:23:8a:a9:89:aa:91:61:1c:c8:c9:1b:
50:77:6a:c1:0a:00:51:ef:61:3f:be:5b:e9:77:ba:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BD:D1:AE:2C:5A:36:4F:B4:9F:56:1E:95:3D:69:51:83:52:03:FB
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0a:b2:8c:dc:7c:1a:b2:ca:80:d0:89:cc:2e:03:fc:6e:73:
5b:19:0b:5f:bd:1d:46:65:91:d1:11:b2:f2:04:16:00:da:9d:
d0:2c:32:4f:85:4b:13:d3:5a:42:04:e1:9a:5f:a9:86:56:8c:
ec:c3:19:a8:5c:a4:7e:0a:fa:ee:72:01:ac:bb:d3:29:b0:b6:
24:33:5d:2a:83:ef:e2:1e:76:ce:aa:bb:9f:df:c8:d4:ef:7f:
73:4b:c7:e7:ac:6c:8d:dc:ee:b8:62:0a:36:d5:a8:2c:97:a1:
ef:95:b6:55:b0:9f:3e:28:54:af:74:0a:17:c8:96:cd:ae:ed:
18:92:5b:86:04:19:6b:1c:46:ef:ae:42:53:09:01:67:a3:eb:
1b:5e:b9:05:92:8b:9b:47:cf:5b:48:d5:a1:7f:39:ea:51:4a:
e8:84:e6:5f:3d:d1:ca:21:70:ff:f3:b5:dc:e1:45:15:04:bc:
e1:9e:21:1a:a3:e3:e4:ac:10:bd:91:ab:09:f9:07:d7:ce:19:
35:a0:56:1a:43:15:cd:b9:23:3f:8d:b8:f2:2a:69:14:0c:e9:
8f:be:26:d6:de:9b:20:b4:29:3f:f4:ce:a7:6e:26:75:54:af:
58:52:34:e7:02:c8:ce:f7:b6:51:17:b3:27:db:dc:97:17:ca:
26:c7:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:35 2026 by rpki-client