Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
File: WFRbn70B0owOptCPW0cts0-tLqM.mft (raw, json)
Hash identifier: cqZg/6l3ooMnMNMiMHp2hIJZUPSWoZvcFgTflRDb3O0=
Subject key identifier: 60:DB:71:CF:24:D4:89:9B:C4:30:85:89:09:CA:E7:58:20:A1:61:77
Authority key identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
Certificate issuer: /CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Certificate serial: 019CABD9C6AC01CF658DCD2E2BC27390488D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
Manifest number: 180C
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: WFRbn70B0owOptCPW0cts0-tLqM.crl (hash: SBir5Grbfy4rNTl1UIEDjjM6S2XQr1rFE0TFU7J/TaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c6:ac:01:cf:65:8d:cd:2e:2b:c2:73:90:48:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=60db71cf24d4899bc430858909cae75820a16177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:e7:d3:1f:b2:9f:dd:8a:9c:0e:d2:26:a0:
e0:ef:88:ca:4e:95:65:e0:03:cd:8e:75:18:49:6c:
a4:73:31:db:00:b2:88:8d:d9:12:0f:3f:61:1d:37:
c8:9f:81:40:4b:b9:c0:65:d0:3d:51:ba:a5:0c:34:
fe:9e:46:29:ce:22:23:66:7d:90:ae:b1:77:0d:87:
4c:b8:5d:18:04:41:9b:5b:14:77:ce:8c:c8:d8:2f:
70:b0:e4:3d:f4:10:6d:7b:57:74:91:f1:75:de:71:
f6:c6:94:07:8a:b4:57:5e:99:c7:f8:6c:98:80:fc:
f4:35:72:2a:e9:c8:3b:0a:81:f6:63:24:c8:a5:7e:
40:ec:83:46:98:5a:3e:f1:bc:d4:8a:87:f0:18:45:
3c:93:55:db:25:da:af:81:d0:bf:76:4a:07:e7:b7:
64:08:b8:2d:d0:85:8e:03:67:b9:7f:69:b6:13:08:
32:0a:4d:77:88:6f:a3:17:5a:9f:db:de:18:7a:67:
99:15:1b:9c:e0:73:8e:7f:88:eb:9e:02:69:38:af:
57:1d:a6:0b:7d:ab:4c:2b:4e:b9:a0:ac:f1:cf:95:
d6:c3:6f:5c:a2:c5:64:42:cf:5d:c9:70:85:32:39:
a1:79:cd:da:1c:30:48:e8:22:e9:80:98:c3:93:37:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:71:CF:24:D4:89:9B:C4:30:85:89:09:CA:E7:58:20:A1:61:77
X509v3 Authority Key Identifier:
keyid:58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:df:8f:dc:61:06:c8:e4:d6:bf:09:f4:a8:89:11:84:23:4b:
04:c7:9e:ca:74:fd:95:8e:f4:b7:29:b3:b2:ed:43:6a:8d:56:
18:65:fc:9f:73:f5:9b:02:58:0c:e4:0a:93:3d:6f:5c:1f:09:
f6:02:7a:82:51:13:d0:a7:35:23:92:2f:b7:c6:a0:9b:de:09:
64:66:fd:e3:12:ee:f4:20:54:d7:20:3a:58:53:f6:b2:06:b5:
ab:57:85:10:8d:a4:d8:1f:0b:98:c5:d7:eb:3f:77:51:70:62:
70:b7:cd:ca:33:e5:24:34:83:50:2c:02:bf:d1:5c:46:d6:d2:
08:ce:01:c0:17:87:16:26:ec:8e:e2:07:8c:ee:f8:dc:26:5f:
82:b1:1a:03:6b:79:8e:4b:d2:c4:b9:d0:fe:45:ce:4f:ee:54:
49:83:d3:1c:cd:42:0a:54:80:f9:e8:2e:ce:6c:42:26:65:50:
19:65:9e:24:6d:d7:ed:f5:53:c7:2d:d1:ce:e9:8e:41:2c:b8:
17:43:8a:d8:81:22:f7:3c:e3:58:36:37:af:85:3d:80:bb:fb:
36:d1:21:f6:ec:9f:3e:5f:0b:11:11:d4:45:7e:59:75:03:06:
7a:f1:97:29:06:a4:f4:a7:87:af:b6:20:24:43:d5:1d:88:7e:
9c:a9:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:50 2026 by rpki-client