Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: MmsxsFlF6SCkWFyeWlYOFv5lb9QIl0MssxA9EKDKq8U=
Subject key identifier: 9E:8E:37:EB:E3:3C:88:96:31:C0:10:74:8B:C0:1A:87:9E:5C:57:98
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019CA9EA8651734CC443B865C1C0E51EB206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 0256
Signing time: Sun 01 Mar 2026 15:00:45 +0000
Manifest this update: Sun 01 Mar 2026 15:00:45 +0000
Manifest next update: Mon 02 Mar 2026 15:00:45 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: ELOo+FimfSOFoNOc5yPisbApy3KvCGkb/IivAl1Ovmo=)
2: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:86:51:73:4c:c4:43:b8:65:c1:c0:e5:1e:b2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Mar 1 15:00:45 2026 GMT
Not After : Mar 2 15:00:45 2026 GMT
Subject: CN=9e8e37ebe33c889631c010748bc01a879e5c5798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:38:d0:80:5c:0a:ca:b6:d4:bd:3d:59:f4:
7e:0a:9e:4a:b8:27:07:75:b4:83:2e:be:73:85:76:
d9:69:52:c7:0e:a2:f1:65:87:8b:36:70:65:db:5e:
01:03:85:d7:e3:49:b4:b9:81:19:d8:79:a0:88:89:
cb:19:b0:36:c5:59:12:37:4c:2a:d6:de:67:37:87:
e6:1c:53:9f:e8:c3:c2:75:7f:1a:b8:d7:f6:e1:87:
e6:8c:f3:2a:d3:55:7b:63:41:aa:45:26:f9:6f:e4:
2c:40:6e:a4:87:cd:88:a4:11:10:9a:a8:ae:0b:46:
f6:b1:16:e7:e8:25:1d:d1:5b:bc:4c:3d:94:e4:82:
3b:ff:f2:5d:3d:c8:2d:c2:c6:f3:c9:51:16:3f:46:
36:62:09:7c:06:8f:1d:57:39:ae:93:8e:1b:04:3c:
b9:ec:23:ca:bf:0c:74:08:ce:d0:9a:df:40:73:69:
82:b3:a9:98:79:f9:19:3a:cf:49:78:f4:16:5d:dc:
54:25:e4:9e:d9:17:3f:93:ca:d1:81:59:bc:91:7e:
51:62:3f:87:82:9a:8d:98:81:18:7f:06:1e:7f:e7:
86:0a:a6:c8:22:a8:0b:59:bf:9f:a0:97:9b:0d:44:
0e:6d:ac:da:0f:f6:92:c6:d7:c5:80:80:c6:9b:57:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8E:37:EB:E3:3C:88:96:31:C0:10:74:8B:C0:1A:87:9E:5C:57:98
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e6:ce:66:2c:a0:bb:15:72:27:81:26:b7:85:4b:4e:c7:4c:
8c:cc:34:ff:be:78:f6:1e:f7:9a:c3:7c:38:58:d7:9a:92:0b:
90:1c:2e:dc:6d:53:5c:05:2c:43:4a:5c:79:d9:f5:c4:e3:70:
88:1e:13:7c:8b:52:d3:bb:06:d7:9a:52:06:b0:2f:5c:ad:a5:
39:1b:70:ac:7b:4c:0c:b8:ec:09:b9:1a:15:e5:dd:89:ed:eb:
97:41:04:40:9f:c2:ef:c9:04:29:c3:2d:8d:75:1f:ce:0f:94:
47:08:19:c3:36:0f:69:26:25:f4:d3:85:de:aa:a5:26:79:eb:
46:3a:1c:ee:b0:5d:51:bb:75:fe:87:1c:85:db:3b:31:97:cc:
84:e0:32:d0:58:e8:58:e7:5f:6f:02:32:90:25:04:1a:16:0b:
63:a4:b7:24:3e:2a:3e:13:7f:fd:a3:dd:b5:7c:eb:d2:07:bf:
fb:e2:47:a9:5c:0e:cf:a2:51:b3:1d:46:1f:50:73:41:67:5b:
7a:d6:1e:ba:0f:02:f8:10:52:2d:58:93:74:42:5a:ed:41:3d:
ad:42:a8:c3:48:98:d4:6c:e7:de:82:4b:dd:04:d5:a4:c8:2f:
5d:fc:07:8c:ee:fa:89:69:63:ab:b7:73:42:39:c2:fc:9b:09:
83:7a:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:28 2026 by rpki-client