Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: Ga2TWaDf5Vm2xS0VABB9KLucwL1tiMEvEhQmF09YO6A=
Subject key identifier: 5B:3D:5A:EA:09:35:EF:27:71:21:D1:35:F2:FD:37:4A:5C:E1:FD:42
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 019CADFDF93FAC5F71C7996C9BAAD6B33AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0DBD
Signing time: Mon 02 Mar 2026 10:00:28 +0000
Manifest this update: Mon 02 Mar 2026 10:00:28 +0000
Manifest next update: Tue 03 Mar 2026 10:00:28 +0000
Files and hashes: 1: hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa (hash: vntZWOVkcSUsnEymKfN5wS2x8DI+HCyMmnVf/ey0knI=)
2: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: Sf7cZZZk6VbqLWqFxlSPRvFRy4caalVbxCA46Dyf+TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:f9:3f:ac:5f:71:c7:99:6c:9b:aa:d6:b3:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Mar 2 10:00:28 2026 GMT
Not After : Mar 3 10:00:28 2026 GMT
Subject: CN=5b3d5aea0935ef277121d135f2fd374a5ce1fd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:7e:09:48:3c:b2:93:a2:b9:b4:d7:ff:2f:
86:e2:3a:10:86:83:59:81:2e:55:61:21:7e:42:c6:
e7:97:8b:bf:c4:0e:d6:36:29:3b:c6:ab:e1:6a:6c:
bb:61:1b:27:1d:46:a2:16:17:04:b3:07:e0:ad:1e:
5f:0d:3e:f2:f2:ea:61:c4:17:dd:7b:ca:78:4c:6d:
d3:ef:fa:f0:86:18:5c:03:c7:79:f9:91:8c:75:31:
8b:2c:8e:b3:29:fa:8e:ed:5c:e2:68:0c:bc:8c:f6:
9c:04:99:c1:79:ae:6a:4a:aa:4c:88:c5:af:eb:1f:
29:2e:62:58:6d:00:4f:69:fd:bf:a9:73:be:e2:ea:
cb:34:6c:a6:da:f1:d5:4a:51:07:2a:fb:40:bc:ee:
36:1d:c3:0e:44:fe:2f:c2:7e:9e:53:f7:15:e1:75:
e7:8c:cb:e0:a1:84:49:23:be:b8:a0:11:a4:93:7f:
4b:86:b4:7d:32:ae:98:0f:1c:9d:7a:db:c9:69:b4:
23:c4:ba:1f:cc:92:c8:cc:4c:e9:ef:74:9a:80:3a:
38:27:88:22:5b:5a:75:6e:e0:31:c3:9e:53:45:20:
d7:40:32:5e:a4:5b:83:01:22:8d:60:4d:bb:04:d9:
fe:69:8e:48:34:29:27:b5:b9:aa:6f:72:bf:7f:9f:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:5A:EA:09:35:EF:27:71:21:D1:35:F2:FD:37:4A:5C:E1:FD:42
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ea:71:29:98:31:4c:c2:62:22:61:ff:a6:02:db:6e:13:f6:
53:e2:2e:0a:52:7f:b4:35:90:f6:55:0c:4a:e7:d9:07:ae:e6:
96:1b:ee:93:13:b7:5f:46:64:b9:3d:15:5a:10:85:b1:7e:39:
ed:52:65:6b:29:47:88:90:ba:e0:61:d4:3f:ec:33:8f:c2:ed:
25:09:20:ea:a3:4f:3b:82:a0:95:1c:42:65:16:a8:a0:ad:55:
0d:3b:3e:48:d2:bf:66:f0:f4:e5:07:b5:77:8b:51:ea:f4:25:
67:03:01:9d:99:cc:3d:02:a9:a3:3b:c6:dd:e5:94:19:5f:f6:
c6:1d:35:66:6d:4f:16:68:ab:41:df:db:20:06:13:ae:04:82:
1c:5e:5e:06:e8:40:be:d6:e3:a1:d1:b1:b7:61:50:13:74:bb:
7f:02:eb:97:91:d8:62:d8:5f:8b:07:64:fc:68:05:55:8d:77:
e8:5a:04:4a:5f:fa:68:40:07:38:ce:5b:d9:a5:06:c7:17:63:
7e:42:93:79:c3:d9:a8:41:3c:4e:0a:00:bd:10:13:ab:64:88:
df:20:08:e9:88:f5:e0:4e:94:e9:9a:46:d9:4f:05:1e:20:64:
b2:ef:3d:80:74:76:45:67:4c:90:2e:d4:05:d2:12:47:e6:e0:
44:ba:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:38 2026 by rpki-client