Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File: WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier: 9hAAn9952ivMCsuwCsqrHRJXPfD16QHwhaSk5tH8DXY=
Subject key identifier: 6C:CB:66:14:94:04:6D:BA:89:46:C0:B2:B2:6B:13:1A:3D:83:75:2E
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer: /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial: 019CAB6B30DD5562AC9CDFC6A7C7C72C9BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number: 04F4
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: xyAdx3Ehad9ZyVcZ+zu9S11LJ+tVUXns1XtlHyoT8+o=)
2: Xedx6t18K1lN2iVg6JylZsX90O8.roa (hash: rknrmpVMbPTrGouqD8ol7zOt5zIU+0aREZj+NOBKEmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:30:dd:55:62:ac:9c:df:c6:a7:c7:c7:2c:9b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=6ccb661494046dba8946c0b2b26b131a3d83752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:4f:09:59:f6:94:63:a6:d9:9d:07:f5:cc:
1a:77:bb:12:ac:95:ac:df:be:a1:8e:73:63:bc:34:
5b:75:5a:40:5b:36:b1:dc:70:4d:56:b6:9d:81:b9:
35:a6:ca:c9:1f:12:ff:97:e7:6c:e8:76:04:5b:49:
16:c5:36:c2:43:67:92:69:17:c8:9d:fe:a0:ce:a3:
77:77:f5:7b:16:1a:e7:bc:b5:23:ec:78:c2:2c:5e:
68:f8:fb:00:9d:b6:4f:ed:58:41:ec:86:53:35:01:
2f:29:12:60:ca:cd:e2:ac:07:0c:c2:82:e5:bf:43:
05:e3:80:a9:96:d3:5c:fb:8a:a6:ff:b5:13:c6:1b:
e7:85:bd:7c:f0:55:12:16:3b:3d:b6:b8:8c:b4:db:
f7:1d:9c:77:24:97:a2:e5:dc:71:c7:b1:e1:38:a4:
c9:c8:d7:04:0b:73:40:f8:7d:81:80:8c:0a:6d:a8:
69:44:8f:5f:d5:96:98:a2:3c:57:6d:0c:c2:f2:b8:
5f:4f:2c:17:42:34:02:98:fe:33:b1:b9:48:99:4b:
a4:1b:db:c9:94:32:a0:b7:28:ec:27:a4:85:75:e5:
08:41:46:e5:62:db:2d:34:f5:1e:9c:e7:ca:fc:c5:
e7:fb:f9:83:b1:d5:39:24:8f:4b:4a:f6:b8:bf:c4:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:66:14:94:04:6D:BA:89:46:C0:B2:B2:6B:13:1A:3D:83:75:2E
X509v3 Authority Key Identifier:
keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:32:d5:5e:a8:f5:8d:36:0d:f9:fc:40:89:f4:33:40:f6:ea:
8b:fb:2c:8f:d6:7b:11:6a:2f:e1:29:8a:a6:2c:04:ce:85:65:
6e:a5:c7:43:c9:c9:da:32:82:ac:39:2c:a3:0d:7c:08:e8:24:
08:80:e1:fd:18:76:ce:db:f8:71:1f:5f:e9:16:d7:33:12:c5:
9a:45:84:d5:9b:af:da:1f:14:8a:df:f7:d9:29:8f:31:26:f0:
84:e8:79:8c:19:17:ec:16:de:08:3c:d1:cf:50:ff:6c:28:81:
31:36:d9:32:c6:f6:9c:ae:7b:32:2f:5e:78:b7:42:25:3c:02:
48:a6:11:60:44:62:8f:c0:73:b2:f7:d4:34:0d:94:9c:21:3e:
60:a3:fb:0e:af:74:d2:5b:e4:9c:f4:09:57:72:f9:6f:7c:7a:
20:9b:09:ec:94:a0:22:35:71:22:95:27:75:ee:2b:8b:a1:f8:
bb:b7:17:7e:60:6a:7d:3e:49:5a:01:45:4d:36:f8:a1:3f:d8:
81:4a:b2:00:bb:a9:94:de:4b:5e:ef:dd:5d:65:49:c1:b8:c9:
78:40:df:da:00:4e:52:b6:df:88:89:8f:03:05:c3:86:2e:22:
26:8b:c1:e4:6f:28:5f:c6:92:28:7e:98:07:6c:24:0d:19:75:
41:a4:97:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazDdVWKsnN/Gp8fHLJvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDFhNDA2ZmRmZmVlMjU5Mzg0OTZiZTVhYzlhNTNlMWJi
OWM2NTkwHhcNMjYwMzAxMjIwMDU0WhcNMjYwMzAyMjIwMDU0WjAzMTEwLwYDVQQD
Eyg2Y2NiNjYxNDk0MDQ2ZGJhODk0NmMwYjJiMjZiMTMxYTNkODM3NTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytZPCVn2lGOm2Z0H9cwad7sSrJWs
376hjnNjvDRbdVpAWzax3HBNVradgbk1psrJHxL/l+ds6HYEW0kWxTbCQ2eSaRfI
nf6gzqN3d/V7FhrnvLUj7HjCLF5o+PsAnbZP7VhB7IZTNQEvKRJgys3irAcMwoLl
v0MF44CpltNc+4qm/7UTxhvnhb188FUSFjs9triMtNv3HZx3JJei5dxxx7HhOKTJ
yNcEC3NA+H2BgIwKbahpRI9f1ZaYojxXbQzC8rhfTywXQjQCmP4zsblImUukG9vJ
lDKgtyjsJ6SFdeUIQUblYtstNPUenOfK/MXn+/mDsdU5JI9LSva4v8SGzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzLZhSUBG26iUbAsrJrExo9g3UuMB8GA1UdIwQY
MBaAFFlBpAb9/+4lk4SWvlrJpT4bucZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUt
OWI0ZmZkMDhlMDQ4LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUtOWI0ZmZkMDhlMDQ4
LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjLVXqj1
jTYN+fxAifQzQPbqi/ssj9Z7EWov4SmKpiwEzoVlbqXHQ8nJ2jKCrDksow18COgk
CIDh/Rh2ztv4cR9f6RbXMxLFmkWE1Zuv2h8Uit/32SmPMSbwhOh5jBkX7BbeCDzR
z1D/bCiBMTbZMsb2nK57Mi9eeLdCJTwCSKYRYERij8BzsvfUNA2UnCE+YKP7Dq90
0lvknPQJV3L5b3x6IJsJ7JSgIjVxIpUnde4ri6H4u7cXfmBqfT5JWgFFTTb4oT/Y
gUqyALuplN5LXu/dXWVJwbjJeEDf2gBOUrbfiImPAwXDhi4iJovB5G8oX8aSKH6Y
B2wkDRl1QaSXPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:50 2026 by rpki-client