Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: J9Y+ZaQaUc299Z3p9iHWn1qowrT059iOMKsGi46KzSg=
Subject key identifier: 11:28:BE:F7:DC:A1:59:06:C0:1F:8B:76:6D:5F:37:6C:6F:DF:F9:43
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019CADC80FB9F940AC05173FCB755755CCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0955
Signing time: Mon 02 Mar 2026 09:01:35 +0000
Manifest this update: Mon 02 Mar 2026 09:01:35 +0000
Manifest next update: Tue 03 Mar 2026 09:01:35 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: oLxKtS2InaRhV4JqVW2gXYH5wSG1wAPl28r5rAawXcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:0f:b9:f9:40:ac:05:17:3f:cb:75:57:55:cc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Mar 2 09:01:35 2026 GMT
Not After : Mar 3 09:01:35 2026 GMT
Subject: CN=1128bef7dca15906c01f8b766d5f376c6fdff943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:ab:83:9d:73:d2:3d:2a:a4:66:39:01:4a:
7d:19:d9:94:a8:0b:22:b6:bc:c1:9f:ef:56:9d:b4:
b0:e8:bc:11:d6:11:af:f0:58:40:6d:87:48:b5:40:
6d:15:f2:f6:f0:f7:5d:fb:19:fc:18:47:e6:84:4c:
20:b9:3d:fb:40:80:be:cb:70:58:da:a0:c7:b1:70:
b0:66:1d:c5:45:00:61:d5:21:2e:5e:c8:0d:08:0d:
f4:36:25:d5:68:bf:eb:cc:8c:40:46:f6:70:f1:23:
6c:96:36:66:89:36:f0:cb:e0:cd:78:e0:f5:ec:39:
d8:f5:97:87:09:af:41:06:22:ed:41:07:26:5a:8c:
30:6a:c5:d1:2b:d4:01:6f:fc:2a:e9:df:6d:35:0f:
e5:80:65:32:26:92:b5:73:d6:d9:12:be:81:55:87:
ca:75:65:94:ca:ab:e9:dd:1d:f3:5b:6e:6e:85:73:
75:c0:4a:e9:45:6f:af:55:7e:46:69:27:99:c8:da:
c9:2b:44:58:fc:d5:5b:6b:68:9f:ca:06:ed:66:fb:
48:a2:11:82:e1:97:3f:a7:cd:61:18:b4:38:2c:c0:
0b:6d:17:27:e9:94:91:59:88:5a:44:80:1c:1d:d1:
83:7d:50:de:6f:1d:16:98:ea:fd:c9:8d:cf:8a:8c:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:BE:F7:DC:A1:59:06:C0:1F:8B:76:6D:5F:37:6C:6F:DF:F9:43
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cb:68:8e:9e:c1:b5:fb:a9:be:d6:97:84:bf:59:ca:56:96:
4c:96:6f:3e:b5:52:0d:52:b9:01:ca:51:b1:c1:d1:b5:1d:98:
1d:cc:0d:59:5c:1a:1d:aa:d0:26:87:c2:e4:6d:dd:bd:53:42:
68:9d:50:96:1d:4f:9f:47:3a:32:49:91:23:b7:3b:c1:f1:7e:
ea:bd:5e:19:71:25:d3:a8:2a:ae:08:5c:3a:97:c7:6d:2d:6c:
ec:07:f1:a6:59:c0:54:3b:69:48:7d:fe:40:93:ba:cd:dc:eb:
bc:fc:f7:c9:af:7e:19:cc:d0:e5:a2:b2:08:02:80:26:00:1e:
08:02:a7:02:ed:c9:b7:f6:7a:d8:a3:35:a1:82:98:6e:82:67:
ed:34:d1:ba:7c:71:17:49:41:46:e4:1f:75:c7:c9:14:63:d2:
10:63:47:db:04:2d:64:4e:32:3d:5c:f8:9a:e1:55:62:77:fc:
32:e3:c8:be:98:a4:47:33:05:7b:8a:3c:42:d0:1a:55:75:3a:
ed:6f:95:fc:6b:3b:02:6c:87:d7:86:15:7e:e3:04:9a:5c:1f:
32:e0:55:67:0b:4d:56:92:fe:d4:3e:b6:69:dc:f0:3c:7f:d6:
aa:be:1e:2a:85:11:1b:c6:ac:0f:08:2b:87:8d:1f:b4:06:fe:
50:2f:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:46 2026 by rpki-client