Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: nbXgneHkMu188HIj3anD0IccxZviUmBkI7HicgP6pdU=
Subject key identifier: 89:80:00:D6:88:30:57:77:11:64:4E:4A:48:85:35:CB:B2:DA:83:4F
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 019CAAFD10BBFF3F42E82A8CC333BF395FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 0449
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: gssngUZvIkL6zsaSmivf+FW9zKm8UnKOKjY4HNrYrLM=)
2: m5v93tUMRlQaxfIjzpbnrJ9Lohk.roa (hash: 1uqxOdkBAdrXDzt6+/f4JBRjuvDt70ncNU0kmF4G9OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:10:bb:ff:3f:42:e8:2a:8c:c3:33:bf:39:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=898000d68830577711644e4a488535cbb2da834f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:ab:e4:5d:12:0c:34:a2:ea:b6:e4:b0:77:
40:75:ae:6b:f1:2e:1b:11:9f:41:c7:4d:a8:61:b9:
21:9f:9c:ee:f2:9d:b8:22:ee:5a:af:ba:8a:f2:0b:
a9:35:9b:a9:f3:0e:0a:71:d0:06:d8:cc:25:2f:3b:
b4:5d:6b:fc:78:aa:85:2b:8b:e8:a8:dc:9b:e2:05:
57:94:ce:3b:7d:f7:03:5f:ff:30:37:55:73:65:0d:
ca:ce:62:5e:c9:2f:e6:49:9e:11:0a:57:a6:4e:b8:
a8:12:85:17:db:34:4e:fb:5d:9f:ee:1d:78:e0:ad:
6c:80:e1:ff:c5:a3:8f:77:dd:2f:19:37:73:fe:33:
60:9c:bf:b7:e6:e0:09:53:9b:04:06:42:d1:6c:47:
1a:bc:27:45:a7:a8:7c:e9:a4:96:99:13:23:72:cb:
f2:a0:af:5f:73:2a:80:e1:29:23:53:0e:6a:e7:e1:
18:2f:10:c7:ee:d1:f4:c6:4a:dc:26:e2:d2:4c:54:
5d:65:26:78:e1:08:ba:e9:6a:0d:a7:81:c8:dd:68:
8f:7b:86:0b:97:a2:13:dc:2e:6f:8d:45:57:37:8e:
81:e7:fe:1f:c5:66:f2:13:d0:9b:78:96:31:f0:27:
76:64:01:74:78:ea:a8:fb:e7:fe:e7:da:ed:bd:0a:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:80:00:D6:88:30:57:77:11:64:4E:4A:48:85:35:CB:B2:DA:83:4F
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:62:76:15:03:81:bc:e0:20:f8:5c:c3:3b:5e:95:7b:93:a8:
2d:dc:d2:c2:c4:5c:e2:cf:c5:77:b5:53:7f:10:67:4f:ad:04:
63:51:d4:f3:ed:aa:c9:c9:66:7d:6d:27:1c:74:7a:60:aa:d4:
96:9a:f4:1d:5b:18:eb:d8:53:47:e0:f3:9e:6b:e7:32:e6:76:
83:81:a7:4d:79:5e:b4:e1:fa:a6:56:4d:87:39:4b:bf:e2:2b:
64:7f:f2:bb:24:05:5f:07:56:95:a4:1c:b3:18:93:f2:88:be:
e2:8d:9d:44:85:9e:5c:73:08:0d:c9:14:7d:4b:01:6b:51:e1:
48:fa:be:d7:da:63:ae:ac:b6:be:97:8b:76:ce:65:34:41:f8:
c8:5d:06:29:d9:5c:b9:ba:d8:ff:ab:89:5f:14:0f:cc:90:1c:
13:9d:69:7c:c9:73:2c:92:b4:97:66:0e:68:e4:98:ae:61:f5:
05:89:20:4b:08:fb:cb:8b:5f:37:b4:12:be:b0:56:d7:5d:a6:
84:f4:9e:73:29:78:1e:80:42:b2:40:68:44:d1:8d:87:ab:7b:
28:62:26:d4:80:19:e8:52:a5:f0:0d:f1:14:1b:69:5c:05:cd:
18:26:ad:80:f6:88:2e:85:d5:43:ce:5b:27:61:53:68:2c:6c:
6f:11:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:13 2026 by rpki-client