Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: YJsrEGlkgaNNUJ0AG9JeQQliVHerA64WoTrjgK5j0LU=
Subject key identifier: F2:8E:51:CE:BB:3A:AB:6B:A3:88:5D:94:6C:5E:4B:E3:15:07:D7:1D
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 019CABD9D657CD4C0EF839DBACF1B4834209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 12A7
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: 9LR8XFTtqJtC7AX+XSKVz/y4yeihnr7JZUMOJqDbyGQ=)
3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d6:57:cd:4c:0e:f8:39:db:ac:f1:b4:83:42:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=f28e51cebb3aab6ba3885d946c5e4be31507d71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:68:a7:19:d6:71:2d:e6:b4:4a:3c:3c:7e:
05:27:6a:4d:30:df:8c:76:f3:8b:21:66:fc:a8:dc:
f2:df:8f:c1:cc:6e:6e:c5:2c:11:a1:39:af:76:ad:
7f:c1:c5:14:5f:f4:5b:bf:69:60:ea:e3:b3:ce:75:
69:32:ee:69:9f:ef:9d:c2:78:d0:97:d6:8f:85:34:
40:65:02:61:35:09:4a:7c:ac:82:a4:94:67:77:a5:
ed:cc:e9:ae:4e:99:24:e4:dc:d5:54:29:23:d7:08:
d9:be:33:e6:fd:58:8e:67:f0:36:0e:f6:72:68:ac:
1c:75:d7:a4:71:7e:9e:81:59:07:26:06:22:3b:df:
ab:5c:ef:b7:15:32:04:90:f7:e3:73:41:a1:8a:65:
fa:e1:cc:7e:cd:4a:ef:80:12:9e:3d:eb:ef:32:cb:
c0:1a:5a:d6:e1:2d:9c:15:ab:15:2e:3b:83:78:a5:
53:65:9c:48:9f:b1:81:5d:a1:44:94:09:f3:b2:dc:
4e:ae:fa:70:49:9f:52:2d:ac:11:59:19:75:a0:9f:
b3:59:8d:17:4d:dd:d6:97:6b:5a:8c:d3:34:e6:98:
c2:53:13:8c:37:ff:0b:76:82:7d:15:97:92:9d:4f:
81:51:34:0d:25:a4:a2:c4:a9:cb:22:1f:5d:b1:e2:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:51:CE:BB:3A:AB:6B:A3:88:5D:94:6C:5E:4B:E3:15:07:D7:1D
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:f2:92:10:18:e0:86:dd:86:53:10:32:1d:f8:a4:d0:e7:
7d:12:08:b7:00:d4:e4:09:2a:85:8b:89:c5:03:aa:df:fc:5e:
5b:60:c1:9a:65:8d:61:48:13:da:14:5e:e1:62:9a:86:88:e7:
8b:df:27:0c:4a:e6:3a:67:72:00:35:43:b7:be:68:7a:d8:bc:
8b:ed:a0:b3:cf:ce:e2:d0:7c:3c:4d:41:c2:f9:b8:78:f5:92:
58:1a:c3:fb:b4:53:d0:03:90:c5:51:4d:f6:c0:31:b7:74:c0:
6e:f7:3a:d9:26:0f:37:f4:66:dc:d5:1b:fc:ff:99:2f:46:e5:
c6:b6:0d:ec:d2:14:fe:50:a0:9d:98:71:77:93:87:be:15:20:
3f:0f:be:54:08:50:d9:07:49:5c:05:c0:52:ad:19:49:70:d1:
1d:42:b1:d0:93:f6:ab:92:81:29:ab:90:11:34:7a:58:e0:66:
e5:1f:e4:82:27:86:1d:98:d7:d4:8a:a8:1b:a7:25:46:1d:d1:
1e:e9:70:ab:88:37:5f:ba:ea:5c:9f:f1:4f:fa:76:7a:5c:f0:
fe:2d:d3:85:f3:0f:67:e3:26:cd:67:12:67:48:53:d4:bb:bd:
1c:76:a1:43:53:06:19:4e:67:58:11:13:f7:8a:7a:b7:19:17:
ca:eb:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:17 2026 by rpki-client