Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: F46YEcUbv9loF10Ta//1NFdYtYzG6Ef+lSrYsHZ3iPA=
Subject key identifier: 87:FB:18:CD:64:21:47:39:A6:B5:9D:2B:38:59:A1:A7:E3:14:44:EA
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019CAA591354E388490A7EA18A5E0EE41589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 11C4
Signing time: Sun 01 Mar 2026 17:01:30 +0000
Manifest this update: Sun 01 Mar 2026 17:01:30 +0000
Manifest next update: Mon 02 Mar 2026 17:01:30 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: w3OGhx+UzDJW2Z+JFFVXTRqTLxNzUuWLkWjyvzLX/14=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:13:54:e3:88:49:0a:7e:a1:8a:5e:0e:e4:15:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Mar 1 17:01:30 2026 GMT
Not After : Mar 2 17:01:30 2026 GMT
Subject: CN=87fb18cd64214739a6b59d2b3859a1a7e31444ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:ff:28:bb:b5:4e:92:9f:03:24:ac:ef:20:
28:8d:0f:58:bd:5f:91:a9:d5:50:9e:de:9f:93:07:
39:60:f4:41:08:86:62:0a:3b:33:18:ea:8b:c1:0b:
4e:72:ae:6a:2b:a9:b5:d1:29:77:e7:d4:c9:52:82:
07:14:5f:ac:66:a0:b0:23:b3:2c:ee:5f:4e:22:21:
56:b8:11:e6:04:61:39:8b:61:24:be:1f:1b:cc:ac:
5e:73:f3:7b:6d:c4:10:f4:de:c2:26:c3:82:9b:d6:
fc:01:cd:39:d2:56:b6:9f:59:b2:48:26:7f:63:b4:
12:2e:d3:3e:ed:00:4e:00:e7:0b:d6:1d:aa:dc:43:
89:53:77:b9:0f:ec:ee:b6:8f:6b:0c:8e:83:32:d4:
a3:39:01:58:83:f3:17:9b:1b:12:a0:65:96:e2:ac:
d1:ae:b3:71:c4:a7:ad:2d:c3:97:ca:c7:45:19:11:
a4:e5:d6:76:65:e5:58:9d:f3:b7:e3:e2:48:7e:25:
68:ef:00:e0:26:39:90:c6:09:15:ad:14:dc:8c:b0:
5f:7b:4e:f9:d8:bd:1f:32:2f:7b:54:95:5e:8c:54:
cc:af:a4:e1:59:8f:d1:5f:5e:43:cb:57:d7:e9:4e:
60:66:eb:20:33:5d:cf:0a:29:d0:d7:5f:09:78:ff:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FB:18:CD:64:21:47:39:A6:B5:9D:2B:38:59:A1:A7:E3:14:44:EA
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:da:b2:71:38:7c:07:2d:48:44:0a:59:26:eb:ef:94:c0:ca:
4c:1a:da:a1:5e:6d:7c:a8:67:32:d9:73:a1:88:e5:e3:b1:66:
b9:e7:f4:49:6b:5d:08:63:cd:ed:0a:45:8c:3a:7e:be:fc:2a:
ee:eb:5d:13:1c:04:1e:7d:23:3b:11:1e:37:c2:e6:84:01:a5:
45:bc:f5:57:8f:a3:8d:62:a0:2d:8b:e9:48:19:57:b3:cc:ed:
ef:3a:4b:38:c2:1a:7f:55:08:2c:cb:1d:fd:f5:ae:24:3f:b3:
60:80:3d:de:69:4a:47:58:6e:f8:42:0d:68:f9:11:78:6b:3c:
3d:8b:29:23:bf:ad:fc:6b:79:36:05:6a:23:de:0c:e6:e2:17:
92:c4:20:4b:7e:04:71:06:11:96:e4:9b:fc:09:2b:c9:e4:7f:
ad:0d:5a:12:d3:21:c6:30:ec:0a:58:1e:95:7b:12:aa:11:aa:
ac:5c:e7:b0:72:90:eb:26:27:da:71:02:f2:ff:d5:6f:6c:56:
0f:ff:86:20:58:bd:92:f3:2d:2e:99:52:d7:f2:23:b1:77:fc:
d9:9c:3b:02:d8:d1:25:9e:41:be:df:57:96:10:57:c8:ec:ec:
89:3d:12:b5:08:40:06:7a:3d:b5:10:94:57:fd:7d:c6:2e:53:
77:61:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:10 2026 by rpki-client