Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: O+4y/hMCWcPvrrrpKKllPLL3rZwQPBsphTG/jYd2bxo=
Subject key identifier: 31:87:69:02:62:ED:E2:6A:11:58:41:5E:F6:63:9B:41:27:69:F0:FE
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019CAAC65928D69621097D4E316078471904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 12C7
Signing time: Sun 01 Mar 2026 19:00:51 +0000
Manifest this update: Sun 01 Mar 2026 19:00:51 +0000
Manifest next update: Mon 02 Mar 2026 19:00:51 +0000
Files and hashes: 1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: +7Q9pZZwMcGkr8GBWKgyVL3bbU7zPu9uMPtkCnkez2c=)
2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=)
3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:59:28:d6:96:21:09:7d:4e:31:60:78:47:19:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Mar 1 19:00:51 2026 GMT
Not After : Mar 2 19:00:51 2026 GMT
Subject: CN=3187690262ede26a1158415ef6639b412769f0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:15:29:95:bc:02:32:6c:ac:c2:e5:c8:6c:fa:
a5:79:2e:8a:5d:83:77:ae:8a:73:de:4e:30:63:f3:
c9:90:97:e5:87:ce:6d:b1:81:23:09:53:6b:18:7b:
9e:c4:01:81:35:1b:9e:aa:62:4b:ff:73:f3:67:82:
43:37:57:20:88:b3:eb:ba:2d:56:57:8b:05:61:b8:
bd:c9:b3:16:04:2f:16:59:15:49:1d:4a:96:e1:6f:
7d:b5:9f:c3:11:47:c9:9e:54:66:a7:2d:9b:da:34:
2c:2e:e4:70:62:cd:c1:0c:b6:75:69:bd:26:91:3a:
2a:12:4b:69:1c:0e:fc:b0:34:64:c7:b8:aa:44:d9:
7d:29:f1:d7:7c:5d:5d:18:2b:d0:79:8b:9e:9a:e5:
7c:65:ac:87:6d:9b:7b:80:b8:4c:61:64:af:57:e7:
bf:91:91:f9:77:8c:64:8f:a1:f4:4a:9a:69:69:de:
80:d4:11:d5:1e:70:3e:eb:dc:bc:b3:1a:c4:76:1b:
da:b7:bf:92:9a:6f:71:cf:6f:63:15:aa:47:cb:05:
d2:c8:9b:35:3e:a2:f7:13:56:99:ca:01:03:40:92:
0e:40:0a:96:76:c1:69:e5:51:2c:5b:60:54:cf:b7:
7d:b2:ef:c5:10:53:65:e3:cc:25:24:bd:94:2b:13:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:69:02:62:ED:E2:6A:11:58:41:5E:F6:63:9B:41:27:69:F0:FE
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7f:80:be:71:09:05:a7:d5:dd:60:a5:8d:1f:9a:58:60:3b:
84:38:e1:23:ff:f4:2a:3f:44:d1:ff:9c:6c:42:df:d9:68:c0:
c5:dd:df:0f:c1:86:97:12:91:da:9a:93:a5:55:3d:18:08:7e:
88:b2:fa:6a:e4:40:94:8d:64:0a:a2:a5:73:b6:dc:8c:da:2f:
db:4a:a1:4a:69:fd:84:67:a0:a6:45:ed:52:b8:8a:5f:16:b3:
4f:04:2d:22:f9:45:fe:41:44:99:59:41:28:02:5a:b4:d4:7d:
bb:11:d0:08:27:da:40:d0:49:d6:b0:c3:ba:06:23:9e:03:e7:
15:75:31:14:75:e8:f2:34:60:45:ff:16:00:70:ab:f2:ad:53:
11:43:7d:92:d3:9d:95:66:c7:13:83:44:e9:54:ff:c7:ae:85:
7e:2f:d5:8b:9d:00:46:e1:b8:5b:13:e0:75:6d:c4:c2:ce:e2:
14:77:62:bb:41:9e:86:84:81:db:1e:f3:98:c1:4a:93:56:76:
ef:ec:a9:09:4e:69:bc:6a:33:b7:cf:ff:80:4e:cf:bf:5e:71:
2c:77:be:08:17:e0:f5:c1:5f:69:05:ff:e1:de:94:f4:2f:c4:
ee:79:bf:1b:b7:8f:65:7b:c3:8f:76:f4:76:1a:2d:6c:3b:b0:
5b:c2:1c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:35 2026 by rpki-client