Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier: /xopKORc4Hdrj1qhKETGBmV2Wfnjp4OAez0jYsXBHlY=
Subject key identifier: B7:A6:47:D0:9D:96:51:C8:C7:AB:79:F8:A7:22:60:0C:2A:15:D7:46
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial: 019DED122F4B27AF4B2C1D4B217445A235D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number: 0446
Signing time: Sun 03 May 2026 09:01:25 +0000
Manifest this update: Sun 03 May 2026 09:01:25 +0000
Manifest next update: Mon 04 May 2026 09:01:25 +0000
Files and hashes: 1: 3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa (hash: 3n/tlWwRztOB/Yu2+sFP0seUelZYfaMtfMJ5VRgA2p0=)
2: 3lscwPyVq0HwpYOhe1qOH376GbY.roa (hash: ABURxSq0W7iaabEt0YGRwE5xtvDmIVi3eCKYaDM6tzo=)
3: AnOV32OnLS7vzP0Ic_vNsSbH3VU.roa (hash: 2+tbTXLyonVPPU5Qc4ONeo44MFYnrVJPmBUJMwxiq4M=)
4: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: 2XVJ0jZbv4uM6iuBFpLimHY0/ZUz9rQbsr9Z0NMjQWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:12:2f:4b:27:af:4b:2c:1d:4b:21:74:45:a2:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Validity
Not Before: May 3 09:01:25 2026 GMT
Not After : May 4 09:01:25 2026 GMT
Subject: CN=b7a647d09d9651c8c7ab79f8a722600c2a15d746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:4b:51:9e:0f:73:cb:78:8d:c6:e3:47:c0:
c9:a7:15:9b:1a:4c:59:5d:83:4c:8d:93:39:d1:14:
5e:74:e1:d2:88:af:96:29:bc:15:ad:92:34:46:45:
d9:d0:a8:71:74:ad:1c:c5:67:b6:54:bd:fb:46:77:
a3:d1:4e:72:82:65:84:e6:fd:30:3b:68:35:4b:8a:
0a:57:02:ba:43:5f:fa:87:fb:60:dd:29:a8:f3:a1:
11:d5:3f:38:2d:68:63:cf:b8:64:ff:30:fe:14:d7:
da:26:c7:e5:e5:19:ce:ff:96:97:fa:c8:2b:7b:b4:
da:4f:a5:dc:b4:a8:18:bd:e1:b9:39:33:b5:bb:52:
66:35:62:88:de:b9:72:26:a8:10:21:d1:5b:37:c5:
85:11:8d:5c:65:40:38:c4:93:d7:12:c4:52:97:6e:
c0:c5:5c:41:58:3c:cd:76:ab:55:13:96:ff:8b:81:
80:cd:f1:c4:e8:23:bd:33:d1:d1:e7:5f:84:c0:2e:
67:ab:d8:76:58:79:cb:c7:7a:5f:4a:5c:a2:24:9b:
95:4d:a4:b5:9b:cc:0e:33:bb:63:84:fd:32:b4:2e:
13:15:21:e5:a1:e7:c6:ce:f7:de:c4:84:7a:56:70:
15:47:a7:ed:77:ed:69:d6:10:21:f2:aa:0f:2e:5e:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:47:D0:9D:96:51:C8:C7:AB:79:F8:A7:22:60:0C:2A:15:D7:46
X509v3 Authority Key Identifier:
keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b4:da:d4:32:60:21:7c:72:60:61:91:87:f9:01:b1:b0:88:
46:0d:6a:0d:9a:16:ef:52:90:21:e7:0c:b8:53:39:f0:42:75:
54:7d:d9:ac:67:54:e5:07:42:da:05:8e:74:2f:1e:66:43:5d:
39:32:e6:b2:36:e4:ce:85:51:a6:7b:29:74:92:65:86:58:70:
fa:38:60:b0:08:43:10:d4:83:f7:88:05:d7:32:ba:b8:8f:3e:
3c:fd:d2:72:ca:49:0d:2b:f3:49:cf:fb:84:7c:39:9b:1b:75:
e0:04:9d:46:de:16:c7:4d:88:8c:a1:1a:a8:13:d8:6a:89:32:
37:7d:c9:ff:d5:e0:69:c4:06:28:e6:56:ce:35:56:34:b9:21:
e1:ac:97:a5:24:44:bd:9b:42:49:36:11:33:11:36:e0:83:1f:
e3:3e:d0:7d:59:4f:62:76:6e:8d:d1:d3:34:5b:46:5d:af:19:
70:6c:36:56:c6:b8:40:9d:bc:36:63:38:96:dc:31:b1:15:fa:
5b:ce:55:de:6b:f8:63:35:7c:bf:ec:b0:18:e4:ed:fc:87:db:
f5:5b:4e:a4:d4:89:a9:4e:30:12:17:c9:af:36:30:4b:ce:63:
9a:f1:f9:9e:5f:21:48:a4:74:66:f4:5c:97:ff:33:9a:79:38:
51:b2:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:00:48 2026 by rpki-client