Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File: WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier: U9J8n8rr0Zw+4gqxlxONm2EhaKcQLZwHHLo1plvjO3U=
Subject key identifier: A8:33:3C:F8:63:CC:A9:AF:FE:A3:B4:1B:C5:F1:B9:1B:F9:68:0C:52
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 019A51BEE6DA61926F5C986D5A434B50BAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number: 026E
Signing time: Wed 05 Nov 2025 02:00:56 +0000
Manifest this update: Wed 05 Nov 2025 02:00:56 +0000
Manifest next update: Thu 06 Nov 2025 02:00:56 +0000
Files and hashes: 1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: D6yOIOtvGYuDzhwrGwjVMvV83mD45e9BFZSw/B22Gbo=)
2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e6:da:61:92:6f:5c:98:6d:5a:43:4b:50:ba:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: Nov 5 02:00:56 2025 GMT
Not After : Nov 6 02:00:56 2025 GMT
Subject: CN=a8333cf863cca9affea3b41bc5f1b91bf9680c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:42:1b:4c:4a:51:b4:e9:24:21:46:96:45:
00:12:c6:1e:5b:f4:4d:9a:de:9e:39:a4:08:ad:37:
17:07:7b:16:84:e5:f0:71:a1:c6:d7:30:a2:79:40:
18:a7:27:95:58:ea:96:bc:80:45:8f:ad:e9:b4:21:
0c:ce:4a:c7:5d:51:4d:7c:66:f1:95:17:63:79:af:
34:1b:81:6a:18:ca:6a:39:04:75:5c:9b:a3:e1:7f:
32:1f:7e:e8:51:29:ed:f8:ac:9c:e7:32:bc:4f:4b:
d8:a3:29:76:c8:c9:53:05:ea:20:d8:d4:c5:73:51:
96:cf:d7:89:da:ca:e7:e3:8f:8a:1c:0a:20:44:01:
e8:08:dc:a7:b1:b4:33:e0:d9:e3:8c:4f:64:d2:bd:
ca:70:f6:85:b7:51:96:5a:ee:da:e3:69:42:01:4f:
af:37:db:af:b1:13:48:7f:b2:ad:08:76:8d:66:f6:
75:a5:f4:a2:fc:24:45:5f:01:c8:b9:21:b1:58:76:
ef:ae:9a:14:4c:19:f1:9f:b9:1d:54:68:b4:b3:56:
32:00:4f:56:fc:38:78:7f:a8:bf:af:ca:5b:cb:90:
c5:80:bf:ca:0f:9b:2f:eb:85:a9:98:e4:c9:d6:d7:
67:83:b3:26:7c:54:c8:2c:35:fa:19:7d:eb:11:b1:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:3C:F8:63:CC:A9:AF:FE:A3:B4:1B:C5:F1:B9:1B:F9:68:0C:52
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:83:a2:1e:f4:3b:67:66:43:cb:fc:9c:7b:4c:76:0b:0e:0c:
df:62:96:21:48:9d:bf:c1:b9:27:3b:e2:09:05:d6:ae:ad:6c:
72:62:5c:62:ba:d1:2c:6d:ef:80:56:51:09:e4:4c:0d:04:19:
cb:2a:e5:5d:95:a2:93:25:cf:69:58:88:68:ff:1f:e2:5a:40:
77:09:ca:68:3a:3a:c1:ad:06:60:f7:69:55:78:1a:89:f1:4f:
bd:11:b8:3b:ef:65:79:60:fd:16:43:a1:94:5f:57:5b:c7:0d:
43:71:3e:bf:3d:ee:6b:96:c5:9a:9a:d0:5b:49:de:60:3d:f4:
58:5f:90:27:ef:33:d6:7f:ba:60:c3:83:db:8b:ca:ab:7b:4e:
c6:28:54:5e:df:b9:84:8b:14:67:4d:18:27:f6:1e:f7:16:a7:
27:25:b5:5a:e8:78:aa:b6:49:d3:31:a9:17:f8:e6:ec:ba:bb:
96:98:63:77:0e:ab:b5:7a:1f:93:0d:3b:19:c3:d3:af:ae:47:
f3:13:41:a6:c3:87:92:e2:b1:65:3f:c2:f9:37:8b:b4:48:b9:
bd:32:b2:6e:e2:e7:6a:7d:b4:42:4c:98:3c:9c:c1:db:35:fd:
3b:09:d1:09:11:19:47:4c:7a:cc:e4:3c:ce:e4:3a:29:da:b6:
d8:4a:df:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvubaYZJvXJhtWkNLULqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTRkNDFjZmE5NDNkYTE5ZjI3NzhhMGQzNzNkZDJhNzc0
MWQwNmQwHhcNMjUxMTA1MDIwMDU2WhcNMjUxMTA2MDIwMDU2WjAzMTEwLwYDVQQD
EyhhODMzM2NmODYzY2NhOWFmZmVhM2I0MWJjNWYxYjkxYmY5NjgwYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vZCG0xKUbTpJCFGlkUAEsYeW/RN
mt6eOaQIrTcXB3sWhOXwcaHG1zCieUAYpyeVWOqWvIBFj63ptCEMzkrHXVFNfGbx
lRdjea80G4FqGMpqOQR1XJuj4X8yH37oUSnt+Kyc5zK8T0vYoyl2yMlTBeog2NTF
c1GWz9eJ2srn44+KHAogRAHoCNynsbQz4NnjjE9k0r3KcPaFt1GWWu7a42lCAU+v
N9uvsRNIf7KtCHaNZvZ1pfSi/CRFXwHIuSGxWHbvrpoUTBnxn7kdVGi0s1YyAE9W
/Dh4f6i/r8pby5DFgL/KD5sv64WpmOTJ1tdng7MmfFTILDX6GX3rEbFfewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgzPPhjzKmv/qO0G8XxuRv5aAxSMB8GA1UdIwQY
MBaAFFgU1Bz6lD2hnyd4oNNz3Sp3QdBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMt
MGUwZGY2OGNkZTAzLzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMtMGUwZGY2OGNkZTAz
LzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIOiHvQ7
Z2ZDy/yce0x2Cw4M32KWIUidv8G5JzviCQXWrq1scmJcYrrRLG3vgFZRCeRMDQQZ
yyrlXZWikyXPaViIaP8f4lpAdwnKaDo6wa0GYPdpVXgaifFPvRG4O+9leWD9FkOh
lF9XW8cNQ3E+vz3ua5bFmprQW0neYD30WF+QJ+8z1n+6YMOD24vKq3tOxihUXt+5
hIsUZ00YJ/Ye9xanJyW1Wuh4qrZJ0zGpF/jm7Lq7lphjdw6rtXofkw07GcPTr65H
8xNBpsOHkuKxZT/C+TeLtEi5vTKybuLnan20QkyYPJzB2zX9OwnRCREZR0x6zOQ8
zuQ6Kdq22ErfMA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:02 2025 by rpki-client