
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: crWFp1aS1nxpySkFdZCN721lUhosqvgZMavphx7qUYg=
Subject key identifier: D0:DE:B6:2E:E1:91:28:CB:CD:D3:80:07:EB:F3:7E:C8:29:EA:15:E3
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 019CAC46B5A6744EE938132784297D3DDA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 06C4
Signing time: Mon 02 Mar 2026 02:00:40 +0000
Manifest this update: Mon 02 Mar 2026 02:00:40 +0000
Manifest next update: Tue 03 Mar 2026 02:00:40 +0000
Files and hashes: 1: V7dSFe54YguWMOBd5igSa3CG0jM.roa (hash: rMSDIp9OV5dVl6Akl8E0YEDyEMw4raUR7F/H+734+DI=)
2: pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa (hash: sH0uhgJw4LrCTAOetXBWIMlVqm3VIDbyxnZ0hMsIubE=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: qob9vFBLr4vZCrJBJRbKn4uS9ufS49foIzkJYuwlQmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b5:a6:74:4e:e9:38:13:27:84:29:7d:3d:da:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Mar 2 02:00:40 2026 GMT
Not After : Mar 3 02:00:40 2026 GMT
Subject: CN=d0deb62ee19128cbcdd38007ebf37ec829ea15e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:83:03:fd:bb:d1:b6:b2:b4:a5:cc:df:2f:
02:68:73:9b:56:fb:03:a3:18:bf:c6:6f:36:c2:e0:
f7:e0:6a:0f:99:ac:a4:21:26:df:61:4d:90:2e:1d:
79:57:b9:0e:f5:f8:31:59:23:7d:98:57:c1:29:60:
8c:1d:1e:bc:3c:07:a5:f8:ac:50:5c:3e:f0:46:85:
8d:aa:0c:9c:38:82:6b:ff:60:c0:57:cf:31:2e:2b:
03:af:e9:c0:89:9f:07:16:59:1f:ec:18:22:91:9b:
5b:a5:c0:f5:05:a8:82:92:72:f3:d2:af:7b:9f:d5:
04:25:bb:3f:de:90:65:20:e2:40:d5:c0:1c:fd:17:
a1:18:b5:7c:2d:98:6b:96:0c:f7:9d:bc:32:67:85:
86:b0:63:bc:96:64:a1:f9:51:e4:19:65:83:28:9f:
56:fe:78:7d:8b:0a:7a:7d:70:65:23:5b:f9:5e:ef:
ce:7a:d6:ff:c6:11:f1:77:5b:fc:48:4a:7f:4e:1f:
76:c4:d0:e5:8e:9b:66:5e:71:01:c5:cd:31:32:82:
4d:24:59:d5:de:57:65:1b:45:f0:9a:fb:6f:47:c7:
43:c8:f6:cb:27:96:64:cf:cf:b7:13:81:04:f9:d8:
4c:16:d0:24:2c:ed:1e:2a:76:b6:a2:83:81:d5:38:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:B6:2E:E1:91:28:CB:CD:D3:80:07:EB:F3:7E:C8:29:EA:15:E3
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:73:cd:87:7a:ad:23:ed:d3:3a:5e:40:92:79:97:22:b3:ff:
ab:89:68:8f:2a:9b:3f:b9:4d:d0:91:44:8a:07:e9:14:ce:a0:
76:6e:e6:44:bf:0f:60:c0:54:f1:c6:db:93:b8:b2:59:44:02:
1f:8c:ce:b3:2e:20:45:d4:b5:82:88:1d:41:75:81:4c:e4:ab:
8d:6f:5f:27:ec:11:f5:ae:bf:bb:4e:1f:ec:80:52:00:91:09:
a9:4c:eb:7e:ab:04:07:59:38:1b:e0:dc:7b:8f:a7:20:83:38:
0b:a0:f3:36:71:1b:5d:23:bb:f3:9b:e1:76:c0:84:60:08:45:
ab:ab:8c:c9:68:83:6d:a0:37:31:69:2e:88:5f:de:ef:94:5f:
16:25:47:dd:79:1b:7e:a6:24:40:4e:2b:97:69:b8:db:06:2e:
1e:85:fd:49:5f:f3:83:91:25:de:2d:31:d6:0f:1f:c4:74:b4:
aa:1e:b2:1b:86:03:d1:dc:a3:94:29:67:54:fb:2a:dd:3c:64:
2e:cf:f2:55:94:a6:eb:66:44:3d:e8:6b:5e:6d:15:df:24:1f:
fb:d2:16:a1:cb:c9:a2:e9:59:4d:c8:22:8c:9e:c9:ea:3a:1d:
48:31:30:04:a6:d4:87:60:f8:5a:b5:eb:3b:aa:5f:13:53:0f:
ca:c1:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:06 2026 by rpki-client