Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier: cDADHwWLsDXq/mED8i+NFdH0gmOohyj6Xj5B76o4eco=
Subject key identifier: 4F:0F:A1:BF:40:CE:BC:44:0F:2D:0E:D6:D9:13:FC:EF:5B:05:9B:22
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 019CABD8EF3D588CDF96216EE9245F4169E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number: 0DEF
Signing time: Mon 02 Mar 2026 00:00:46 +0000
Manifest this update: Mon 02 Mar 2026 00:00:46 +0000
Manifest next update: Tue 03 Mar 2026 00:00:46 +0000
Files and hashes: 1: 0J1Bc7T3_t7yJTtYF6gyqQOIoEY.roa (hash: 3ugWvtC3e0ymV2WWg87hGLJ6EMMogW9erVq2BTyhB5Y=)
2: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: PiQyau1V+iTCGgnJx4Gn4R0CU+13dmgGsz0aV+bua/g=)
3: YI0pCgu2ykn3yzVOtlSfyJA849I.roa (hash: EahNolpQ9StYuOrtKhWwzZ1bxJLzeXPdTxQKSkepaik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ef:3d:58:8c:df:96:21:6e:e9:24:5f:41:69:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Mar 2 00:00:46 2026 GMT
Not After : Mar 3 00:00:46 2026 GMT
Subject: CN=4f0fa1bf40cebc440f2d0ed6d913fcef5b059b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:a7:41:e7:13:2d:d3:ef:c7:e0:ce:55:f8:
3a:51:97:85:21:75:00:7e:74:16:a2:0b:d9:96:19:
1b:14:99:20:d2:d7:6a:90:c0:d1:5f:23:eb:42:47:
49:80:15:bc:02:8a:7d:d6:00:5c:30:42:1d:b1:3b:
1c:56:46:9e:e6:5b:8d:f2:91:0a:a6:e9:60:28:72:
2a:c1:5c:04:df:9d:be:b4:24:63:9d:25:99:9b:76:
96:c7:9f:39:20:70:a5:cd:73:d4:31:98:39:ac:de:
ca:cf:88:29:b5:2c:1f:73:ff:41:9f:e5:53:28:1f:
13:ef:7b:46:56:25:9c:09:4d:af:35:6c:45:ab:43:
88:89:84:d5:fd:db:3d:1a:23:33:1c:74:f4:19:17:
1e:14:be:3d:a8:e0:f4:2a:a8:59:3d:41:e1:ca:6f:
21:bf:79:c0:e3:f2:b5:4a:65:48:a4:f0:bf:bb:03:
33:0e:80:07:98:c7:e4:20:92:f9:51:bd:e8:13:1b:
d3:61:aa:9f:82:a2:e2:00:39:98:85:b7:af:0a:3e:
5c:94:4f:10:d5:8c:4f:64:a0:e3:59:ba:8b:c0:77:
b8:ca:d8:2f:89:fa:22:58:5a:7c:be:03:d7:5c:74:
0d:82:3b:24:e1:a2:7c:e8:0d:b0:d5:2b:09:10:3a:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0F:A1:BF:40:CE:BC:44:0F:2D:0E:D6:D9:13:FC:EF:5B:05:9B:22
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f7:32:71:ae:d0:78:05:8c:0a:75:15:04:48:89:60:d9:5f:
aa:4f:76:cb:9a:35:80:5a:58:b6:b3:a7:4b:fa:18:ec:23:17:
3d:34:af:94:b2:4d:97:fa:3d:7f:83:51:a5:a8:bb:a1:c2:0e:
39:40:e8:17:82:ca:95:37:ea:34:14:00:75:3d:c9:6d:05:d6:
01:00:55:3e:33:ee:53:c0:84:9b:4c:b6:a0:14:6f:79:87:1b:
31:3d:90:de:54:66:f4:32:9a:ce:62:c1:30:87:13:df:0c:94:
be:8b:a4:d7:84:eb:4c:2f:1e:d0:f9:42:32:38:e6:2f:a8:d3:
ab:18:ea:3f:27:5f:01:da:83:35:46:77:34:6b:6a:62:77:0d:
0f:10:e6:66:23:65:94:33:65:38:4d:6f:05:fe:e4:37:54:07:
46:2c:f3:dd:8f:c5:eb:e8:96:5c:b1:bf:68:92:4f:42:d2:ac:
c1:05:c1:a8:06:1e:62:a7:60:e8:d8:5d:e5:a5:95:2f:43:f7:
5b:69:58:e5:fa:c6:a3:91:e8:91:4b:89:c3:da:7d:67:c4:3a:
22:23:ef:84:f3:3f:74:b7:0f:52:88:08:b6:2f:8b:9f:6b:30:
ac:32:2f:e6:2b:bb:14:94:9e:68:32:5b:3b:60:41:2c:28:4b:
2c:3c:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:06 2026 by rpki-client