Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier: Fs84tD3qJ2u68GNHYHs8l+orDfQRPWFFK3mU/xfn2Vw=
Subject key identifier: 6D:34:B2:10:73:2F:6F:10:9E:3C:81:9F:AF:E0:3B:82:C8:19:15:D8
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 019D99995C5427ED0191DF212D5467C977DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number: 0E6F
Signing time: Fri 17 Apr 2026 04:00:57 +0000
Manifest this update: Fri 17 Apr 2026 04:00:57 +0000
Manifest next update: Sat 18 Apr 2026 04:00:57 +0000
Files and hashes: 1: 0J1Bc7T3_t7yJTtYF6gyqQOIoEY.roa (hash: 3ugWvtC3e0ymV2WWg87hGLJ6EMMogW9erVq2BTyhB5Y=)
2: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: nZi5R2crHDAZRcJSmuXINsndILzMBRl6oDpjKdWQ6N0=)
3: wYcSTIG9yPUOdwiZYdcH6Snch7w.roa (hash: L5swS2Xsfc3itrCGB3zwgUSqAdZhGxhUnlsXS9NZLLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5c:54:27:ed:01:91:df:21:2d:54:67:c9:77:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Apr 17 04:00:57 2026 GMT
Not After : Apr 18 04:00:57 2026 GMT
Subject: CN=6d34b210732f6f109e3c819fafe03b82c81915d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:66:3a:13:cd:bc:56:3e:5f:43:0d:c8:d8:
cb:d4:ae:70:19:2d:18:14:18:2b:ab:c1:b2:39:1c:
cb:80:6d:74:d8:8a:7b:e2:89:9c:d3:cd:38:ae:50:
a9:2c:a4:76:11:86:e0:87:4d:53:56:26:ba:18:1c:
cc:fe:d6:28:24:ea:75:b6:49:1c:aa:a6:80:61:96:
ea:48:14:4a:f5:9f:3b:40:c0:06:59:28:48:09:ce:
7e:12:92:80:0e:18:07:c5:f2:1b:53:05:87:9f:6e:
d6:57:11:59:e6:28:81:dc:96:c3:a5:97:ae:e8:13:
cc:d5:5e:71:e8:01:ce:62:e6:92:79:65:f9:e4:f2:
29:fa:c4:85:30:18:0d:cd:cd:a9:fb:e0:ea:73:63:
a9:06:69:75:31:7e:fb:33:5c:20:25:2c:ae:45:ac:
1e:1c:77:2a:a3:3f:c1:44:d4:60:f6:ce:b4:0f:6e:
95:5b:8f:40:a1:e9:f4:33:31:8c:9d:b5:61:eb:2c:
06:03:63:19:eb:2a:c7:34:e4:52:07:2e:0b:30:b1:
a8:2e:94:96:49:96:e1:e3:56:7f:6f:34:3a:c2:0f:
5f:98:8b:aa:ba:c7:ad:8d:ed:17:4b:35:a2:f3:0b:
0d:b6:33:be:7b:e8:38:3d:fc:cf:4e:4d:91:85:80:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:34:B2:10:73:2F:6F:10:9E:3C:81:9F:AF:E0:3B:82:C8:19:15:D8
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:1e:d1:2e:09:de:ab:bc:60:1e:54:1c:fd:e4:e4:36:8d:
40:d8:41:88:55:0e:66:b5:8c:ab:a3:48:ab:e2:a6:1f:83:09:
b0:bb:e8:d1:a4:5e:ca:08:67:f2:30:2c:84:a5:a4:54:0a:0a:
07:4f:be:47:81:18:0e:13:ac:8e:c3:41:b3:19:2c:57:d0:31:
38:69:c5:c4:84:4c:9f:6c:3b:b8:0a:1d:ba:aa:db:b3:35:18:
96:9b:6b:86:ff:1e:ef:9b:f7:96:b3:c2:9b:3d:0b:7e:05:f1:
e9:d7:12:b2:f2:4f:16:b2:20:a4:7e:d9:3a:9c:f4:62:69:cc:
a3:1a:45:04:3b:c9:44:26:c7:de:ab:ee:a9:cd:28:4e:1f:89:
bd:a4:c7:09:5e:1b:67:f4:07:bf:1d:1b:d2:14:ce:c1:d7:f5:
1b:25:6d:3b:25:53:a1:72:d3:04:ce:aa:50:31:8e:c8:c5:d9:
f6:89:ce:4d:ba:77:e1:2f:0f:b8:f6:9f:a3:9d:6a:21:1e:2b:
ed:f4:37:ba:22:5f:4d:d0:c4:c3:59:58:e1:4b:d4:84:49:c4:
ae:a7:27:7a:fb:f2:f7:e7:96:1d:2e:85:cf:92:ad:2e:cb:15:
1c:2a:3e:21:fe:53:6b:d1:be:dc:45:1a:b6:83:77:a8:6f:28:
68:34:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:44 2026 by rpki-client