
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File: WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier: rGu1C2InF80CcXBBOqYPT3vdkLn0/S2yAkF0WexnEwY=
Subject key identifier: 72:9A:52:45:CA:D6:84:80:75:9A:5D:FD:2B:EF:08:EE:4A:FF:D1:EF
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer: /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial: 019CAB3479AA075F48030A965B943CD85270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa (hash: iXyMvC2zcRw1kQk9NMVDBWBfZ7cLWCvnkd2tBslhHyk=)
2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: 9hjS+sr8vKqyj/Nwl8QoHFspGLk3q6/CB04hMQHFjuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:79:aa:07:5f:48:03:0a:96:5b:94:3c:d8:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=729a5245cad68480759a5dfd2bef08ee4affd1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:7d:54:61:b3:86:70:93:96:3d:92:d9:19:
63:60:d9:88:40:51:2c:73:bf:c4:e5:d9:36:4e:79:
ca:cf:cb:a6:1c:e3:4c:c9:dd:27:4e:60:49:b1:9d:
b6:38:87:b7:46:3e:15:88:ed:5f:d0:02:db:8c:8c:
a4:5f:25:70:e5:91:8c:c2:5d:d3:04:ab:85:67:21:
f8:42:3a:71:aa:7c:1a:4a:ec:e7:d4:a9:b5:b9:43:
bd:73:68:2b:df:76:6d:8d:ea:19:0d:7e:3a:6c:c1:
50:90:ca:43:50:5d:65:79:f8:6f:2d:8a:85:e7:eb:
08:9a:64:5d:11:d7:1e:a8:fc:2a:32:b9:1a:fd:13:
83:64:56:d0:b8:14:a0:0b:92:88:0f:e4:60:73:bf:
e2:1d:b6:32:0f:77:17:d7:7e:72:59:fd:c8:55:c9:
bc:91:62:12:ad:db:32:0c:07:9c:a1:28:15:74:dc:
53:07:ae:17:ee:2d:49:d1:00:12:ed:cc:98:5f:55:
45:3d:46:a7:ae:16:e7:29:1c:d8:43:53:77:58:0f:
e1:e3:e6:01:b7:55:e4:90:db:98:21:48:91:73:6c:
c7:05:22:ad:a5:44:8f:a5:25:30:14:ec:ea:ea:4a:
1f:11:21:19:81:27:7b:3f:b6:34:86:f3:87:e0:71:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:52:45:CA:D6:84:80:75:9A:5D:FD:2B:EF:08:EE:4A:FF:D1:EF
X509v3 Authority Key Identifier:
keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:81:12:d6:af:68:50:b6:43:22:bb:86:0b:da:cc:e5:ec:3a:
05:70:8b:0b:23:c9:43:d1:53:b0:d6:a2:2e:36:27:45:eb:c1:
8b:07:3e:8a:81:9a:4b:49:70:63:8d:3f:a1:0c:ec:f4:3d:3d:
6b:2c:52:50:8c:f1:a4:d2:df:7a:85:9a:bf:87:cb:f2:8d:e7:
f3:b8:72:3b:74:a2:52:7d:59:c7:a1:9e:cc:d6:dd:37:8d:63:
8f:b0:dc:77:f5:a9:95:de:87:23:27:96:10:b1:30:6b:3a:03:
7a:f6:20:a2:74:5c:b8:05:bb:a8:61:90:b9:b9:96:be:21:fa:
4b:7d:f8:f1:22:21:bc:f1:59:9c:06:c3:7a:96:c2:af:fb:76:
cb:a5:bf:73:14:4e:80:b0:5d:5f:5a:6a:ed:68:a3:77:44:76:
a4:4f:96:2a:6b:a2:be:d9:50:84:61:f5:3d:65:18:0d:4b:d0:
60:9d:b5:34:07:c4:a9:a2:ef:2c:48:a5:4d:1f:e5:dd:d3:bf:
6f:99:d6:42:97:b6:6a:3c:c0:eb:c7:5d:ef:32:ba:dd:ee:29:
5f:e0:3f:85:4e:73:ba:f7:6a:56:04:69:a8:75:2b:b5:cd:5f:
f1:16:40:c2:06:5c:2d:7d:e3:cd:47:3d:78:c6:b6:08:f3:ae:
ed:01:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:13 2026 by rpki-client