Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File: WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier: LW+0l5JKzIWT3blxcR5yajWHgTM4eJWjPogSMb53T6g=
Subject key identifier: 34:FD:48:51:C9:B5:DF:5A:F0:A8:8E:DC:18:74:F3:F0:E1:00:83:4A
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 019CABD9B8361E582E35E15324BC51C087AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number: 03A6
Signing time: Mon 02 Mar 2026 00:01:38 +0000
Manifest this update: Mon 02 Mar 2026 00:01:38 +0000
Manifest next update: Tue 03 Mar 2026 00:01:38 +0000
Files and hashes: 1: 3ROQujXGNLqdu4u_7p3X6MZFjqo.roa (hash: gsfXZvICCIs7dkt15+pJ7BF5UxTZq1/LQLpC6Nx+te8=)
2: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: 4NNzCE04IfUqUqb9VTzT1XEyliXC1z3WrEYBsJ2Fa1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b8:36:1e:58:2e:35:e1:53:24:bc:51:c0:87:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: Mar 2 00:01:38 2026 GMT
Not After : Mar 3 00:01:38 2026 GMT
Subject: CN=34fd4851c9b5df5af0a88edc1874f3f0e100834a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:36:e3:f9:78:15:95:61:c9:22:f9:f1:d2:
6f:d8:52:4f:9a:0a:a0:a4:4e:f6:18:e1:80:82:3c:
0d:f6:bb:84:ad:82:ae:26:86:21:e9:bc:46:9b:ff:
80:dc:ce:e6:8d:cc:99:61:59:c5:b7:c2:05:78:56:
9c:e2:9c:6a:ee:95:30:73:f2:0d:3e:1a:c4:6c:3e:
35:c7:96:fe:48:3e:1f:fe:f1:78:19:87:f5:50:49:
2c:2e:e2:eb:91:c5:04:62:d8:08:95:fd:0e:0f:57:
76:fb:01:29:69:8e:93:a9:02:de:80:a8:f2:3a:44:
32:96:33:80:2d:cf:66:aa:d6:42:88:d8:e4:97:9d:
a4:6f:67:90:45:d4:fe:5f:e2:76:9b:da:0b:98:a4:
d5:46:b9:22:3f:35:fb:89:4a:44:99:4f:c0:10:f3:
f5:0a:ca:67:55:aa:2a:3a:50:35:cb:4e:e7:85:1e:
70:83:7f:4d:59:94:1a:05:7c:db:03:0d:f5:e2:d1:
2d:af:a3:17:72:2f:ab:67:3f:9b:1d:ef:3c:25:82:
c5:44:c1:18:e6:18:97:eb:99:26:6d:c0:e6:a4:ec:
18:b0:fb:cc:66:a1:5f:49:41:3e:61:39:0c:8f:41:
c2:76:a5:06:d3:1b:fb:a1:55:e8:a7:cc:f0:ef:ef:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:48:51:C9:B5:DF:5A:F0:A8:8E:DC:18:74:F3:F0:E1:00:83:4A
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d8:b5:8c:08:15:59:84:ec:c6:9e:a7:59:a5:47:1b:9d:9f:
ff:e7:c1:ad:6f:55:44:05:a1:ad:c8:24:70:45:42:ae:80:b1:
06:c6:b7:06:12:19:06:1d:9c:f2:79:f8:bb:24:51:4d:18:3a:
11:59:63:17:44:67:41:9e:d8:a4:58:64:71:cd:2f:c2:dc:70:
e7:65:3f:f4:db:96:ce:0e:a0:9b:a7:62:bd:94:ad:93:0d:fe:
b6:3b:c7:bc:09:8b:58:23:2c:3e:44:8d:56:5b:f0:40:51:29:
2b:b4:26:00:51:54:42:53:01:ec:a9:40:db:d9:f1:f0:e4:ac:
c2:88:7e:9a:b9:2f:ed:f8:6d:e0:fe:85:9b:75:28:6f:b6:5e:
0c:d1:f9:81:fd:83:86:68:10:88:99:2a:85:b1:88:7d:d3:f8:
b0:fe:1e:eb:f5:3c:14:de:4a:6a:be:ac:7b:0e:a1:c4:72:64:
a5:be:35:7e:10:50:b8:53:cc:e1:42:92:8e:b8:de:11:ab:d9:
a1:f5:95:64:69:41:22:3a:38:02:69:53:cc:1d:56:c8:42:ff:
85:d5:93:f6:a0:57:42:48:ee:b1:cd:e0:e6:32:00:f3:85:56:
c1:69:b2:0d:90:89:e0:3d:4a:da:b2:5d:50:03:0d:ba:01:8f:
f3:cc:50:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:24 2026 by rpki-client