Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: HqBPT5pIlYGOQmvyEghEBIS13cG6JiAapbCJLJWwoFM=
Subject key identifier: B1:15:E4:61:45:1E:E4:68:20:E3:22:29:E0:4C:7C:4D:3F:6E:39:AE
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019FACAD83B0450E28D43DBDAFDB6C21E332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 053E
Signing time: Wed 29 Jul 2026 07:01:20 +0000
Manifest this update: Wed 29 Jul 2026 07:01:20 +0000
Manifest next update: Thu 30 Jul 2026 07:01:20 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: ABa9bDj8xca0arP3dlCQ5eCExdDBVeBkoDF4P0fhuAM=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:83:b0:45:0e:28:d4:3d:bd:af:db:6c:21:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Jul 29 07:01:20 2026 GMT
Not After : Jul 30 07:01:20 2026 GMT
Subject: CN=b115e461451ee46820e32229e04c7c4d3f6e39ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:c3:d1:02:4e:9e:93:78:16:f7:98:d8:07:
c1:13:34:34:83:bc:4b:a9:29:f0:df:e7:3b:b0:48:
66:37:73:bd:da:3e:c1:18:6b:4e:c7:96:79:32:12:
1d:ad:cd:62:67:6f:32:00:8c:49:84:3b:3f:8a:dd:
93:ea:7f:34:dd:05:d5:a0:95:ed:22:41:f4:b5:19:
bf:29:15:eb:02:28:0f:87:97:3c:b0:f9:b8:c0:8b:
65:e4:0a:49:0f:eb:37:1e:1e:af:63:33:53:a4:39:
82:56:50:27:b5:7e:bb:30:7d:07:18:9f:ae:2b:43:
2f:c6:57:97:c3:f5:cf:75:30:9b:1d:ff:3c:97:7e:
bf:2a:3f:bc:66:b2:0d:38:b0:cb:70:e0:32:18:82:
d3:6c:27:60:8f:f0:9f:ae:51:28:34:f1:d0:f3:2e:
55:e8:a4:6f:d6:03:46:9a:e9:57:a1:24:e6:10:04:
d6:bf:7f:8f:19:27:24:9f:55:86:9e:57:6d:1d:d7:
c4:43:e5:58:4c:6e:08:c4:79:d1:86:53:4b:73:0e:
90:f3:6f:37:e9:75:5d:d1:dc:b8:40:03:50:e0:73:
1e:4a:48:25:99:1d:f2:da:36:82:41:04:4a:b8:ad:
ba:3e:08:eb:60:ab:95:6d:3e:16:78:12:66:d9:c4:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:E4:61:45:1E:E4:68:20:E3:22:29:E0:4C:7C:4D:3F:6E:39:AE
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b5:34:40:a7:9e:bf:b3:68:1a:c9:33:c9:79:38:22:14:3f:
cf:7e:05:f2:a9:45:4e:2e:c4:20:cd:5d:86:7d:4f:60:99:66:
73:76:bb:f2:9a:69:e3:f8:d4:58:b2:bd:81:28:d3:9d:5b:ff:
42:b7:cd:cb:47:8f:62:b5:f0:20:41:df:37:4a:8f:04:c9:f9:
fc:b8:0d:5f:50:ff:74:06:16:64:9a:53:ea:93:07:1b:8c:8c:
ab:99:29:e2:01:b3:dd:ca:c2:15:ba:9c:c8:24:58:7c:ba:71:
22:bb:f7:f1:3a:a1:0e:ec:f8:40:bf:43:0c:b9:77:70:2e:5c:
68:2c:5e:74:6f:fa:08:4a:97:3f:5a:a3:e6:c6:7b:f0:93:83:
29:a1:3f:20:d2:f9:20:97:cd:e8:35:54:46:5a:e2:d9:7c:3d:
ea:a8:2a:1d:6b:b4:77:fe:69:54:93:fa:f8:69:84:02:7e:6f:
3e:1e:a9:19:fd:e9:d9:10:f8:26:20:8f:60:5d:60:bb:93:37:
b3:4c:fd:b9:ca:74:43:ab:91:42:cf:8c:a2:b8:15:d2:b4:bd:
96:13:4a:24:a3:a9:f3:50:4e:53:66:b8:bc:cb:aa:a9:5f:77:
cb:46:b4:49:f5:80:a4:28:84:fd:a5:84:89:43:dd:47:9c:5e:
5b:0f:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:20 2026 by rpki-client