Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: 6B8sccXKfPg+O3l2Aif3GsRMntpL6XVy8qaVhQFgygc=
Subject key identifier: 69:D6:01:5F:D7:D4:6A:EF:D7:30:75:4C:E4:79:5D:8A:CD:57:AB:89
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 019D3A1CF6B811078EBAAA3052E0B6309FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0F17
Signing time: Sun 29 Mar 2026 15:01:09 +0000
Manifest this update: Sun 29 Mar 2026 15:01:09 +0000
Manifest next update: Mon 30 Mar 2026 15:01:09 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: x/aneTN/otKGdGqZBRk8l3QwYEgm9sjdJ8LrMw8qky4=)
2: f5k5qCfc97nrWBFtHlPeoZAbHU0.roa (hash: 5U/u1GLlwPYY0FROjlFUf8bRvu5+K/AhZTkC/PSthCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:f6:b8:11:07:8e:ba:aa:30:52:e0:b6:30:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Mar 29 15:01:09 2026 GMT
Not After : Mar 30 15:01:09 2026 GMT
Subject: CN=69d6015fd7d46aefd730754ce4795d8acd57ab89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:a6:98:cb:d7:a6:c8:0b:1c:9b:9c:c6:cf:
ae:c4:9f:2a:94:3d:d6:be:b7:3e:23:f9:96:22:78:
3c:bd:2c:fe:be:4d:08:e7:f8:d2:26:57:13:54:b8:
05:25:fe:43:89:03:12:f3:77:c9:0e:ca:fe:68:63:
1a:6c:39:3f:57:2f:cc:e4:9e:15:9c:b1:a2:88:df:
17:d0:d0:31:a2:d2:d8:6f:fa:ae:da:a8:f5:2a:b6:
57:83:cc:2b:54:0c:84:00:9b:e6:2c:d1:04:35:8d:
fc:46:30:0a:67:fb:9a:c4:7f:30:eb:b5:55:05:3a:
a6:87:07:09:b7:f1:60:fd:1f:21:8c:95:e3:36:7c:
f5:e1:2e:f4:02:2e:6e:ef:60:13:96:a5:98:fb:52:
5a:69:01:41:c5:72:45:66:db:5a:ac:3a:63:3b:dd:
f7:40:11:a9:6b:dc:4a:0f:7c:62:7a:17:03:ec:a3:
f4:c1:36:fa:e7:12:b7:ce:c2:88:67:11:82:c0:e0:
45:f0:e9:dd:ff:23:10:91:4c:9e:3a:52:dd:30:76:
b5:79:c9:ce:f8:7b:36:08:fa:6d:9b:bf:05:d1:9d:
be:38:9b:de:4b:0f:b9:0e:f2:05:6e:e3:50:32:16:
9c:fa:0b:ab:50:0e:4c:4a:94:9f:d3:a6:10:01:00:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:01:5F:D7:D4:6A:EF:D7:30:75:4C:E4:79:5D:8A:CD:57:AB:89
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2a:6f:63:69:6b:cb:b9:02:2e:46:00:6a:d7:a1:24:0a:c6:
52:a0:bb:43:27:86:43:cd:ca:92:d0:36:20:c2:71:0d:c4:60:
69:9c:77:42:9f:76:3b:ac:2d:2b:1a:ec:3d:b7:88:5b:d6:92:
ac:92:0f:43:6d:03:f3:b4:49:28:01:d2:ac:00:d5:58:94:98:
b1:c7:84:06:cc:6c:bd:e4:b3:72:da:93:82:ca:b6:b0:9d:ad:
f9:49:88:81:e1:47:57:f2:ed:3a:e9:2b:90:db:6e:9e:44:9d:
b0:a8:5e:5d:32:61:97:13:d8:b8:a1:67:5f:73:41:81:39:f2:
e7:4f:1c:34:cd:86:f9:c9:cc:06:48:86:aa:6d:1c:e8:26:f5:
f5:01:ee:ad:65:d0:9e:dd:09:f5:a0:9b:6d:5a:d4:bf:4a:ed:
19:52:2f:5e:a9:c4:87:62:e4:75:8b:5b:d5:a3:d9:fa:00:a7:
5a:50:28:c5:87:db:f4:96:f5:86:e6:74:67:fb:3e:67:b7:cc:
f6:14:51:91:ca:fb:d1:a0:fe:06:18:99:4d:60:a9:b4:0e:0c:
c9:9a:96:84:3f:14:f5:30:38:d6:81:38:f8:91:fd:a6:8c:e6:
b8:07:75:36:3a:56:cb:c8:9f:f3:a1:2d:05:84:35:f1:e2:6f:
2c:f1:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:58 2026 by rpki-client