Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json)
Hash identifier: ApmBsBvJW1l5u//67z0ZKC5eyEA0O4DKj61JBX4TxUE=
Subject key identifier: 24:CF:42:AB:A1:3A:C5:A7:59:06:0B:24:1E:EE:25:1A:76:F0:37:B9
Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Certificate issuer: /CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Certificate serial: 019CAB345DC1FA935243E9839027D5E41D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
Manifest number: 0C71
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: w4c3z0SO3z9ISgZYYZf/j0nBGlTDu4IUr9J2Q5xaenc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5d:c1:fa:93:52:43:e9:83:90:27:d5:e4:1d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=24cf42aba13ac5a759060b241eee251a76f037b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:67:83:37:4b:00:21:ec:f3:c6:43:96:9b:
de:ea:40:71:e4:ae:86:4f:60:78:2f:42:81:5d:63:
ca:f1:9e:5f:2c:21:31:0a:1c:9a:b5:e9:03:50:4b:
50:42:d1:fb:66:a7:49:28:e4:6d:bc:39:87:48:f3:
25:f2:91:37:98:e3:8f:b8:9f:e3:60:83:bb:79:a8:
f0:c0:ef:ab:46:0b:23:55:1f:d4:89:82:24:60:06:
2b:e8:64:66:e9:d0:e4:c0:8c:88:37:90:75:b9:f2:
c4:f7:e5:b9:65:2c:fd:5b:65:da:13:c8:97:07:4e:
b7:79:8b:76:d9:fb:5f:6f:b3:72:47:b5:88:94:5b:
18:38:f7:7c:4e:34:a2:b8:42:6b:01:fa:be:74:89:
7b:23:81:ad:ef:ab:7c:95:5b:08:ee:30:de:c1:f9:
23:f3:21:49:12:94:0d:c0:b7:b4:01:08:87:8e:e4:
c6:e9:c9:cf:05:e9:bb:97:80:4b:86:0b:fd:a9:fa:
12:cd:49:07:d3:6f:68:76:18:4a:43:1b:91:fa:15:
72:41:be:b0:09:45:35:a6:01:a3:3c:42:31:17:f5:
06:f6:5d:f6:8e:8e:7d:73:88:97:fd:a3:d4:d6:69:
2f:9a:0a:1e:24:fa:f9:0e:4c:b0:d4:69:29:b0:a2:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:42:AB:A1:3A:C5:A7:59:06:0B:24:1E:EE:25:1A:76:F0:37:B9
X509v3 Authority Key Identifier:
keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1f:84:26:e3:3c:b4:cb:7e:4a:be:0e:e2:71:cd:b1:fb:0f:
6c:75:1e:d5:1a:88:7f:6f:04:14:93:4d:66:34:77:63:e1:e4:
61:3e:01:39:48:5a:b6:70:78:cb:bc:e1:f5:8f:36:94:6f:20:
6d:66:41:ab:bb:b3:cb:bd:f3:d5:ed:83:b5:a2:2e:cc:82:8d:
8b:0d:80:a8:f5:a6:0e:f6:c4:e5:b7:17:1e:3d:47:56:75:91:
a1:70:46:c2:d1:b6:dd:8d:90:b5:7d:1f:2d:bd:ee:8f:46:3b:
c2:f7:27:ce:48:5a:80:9d:97:79:7f:49:62:a5:41:a9:9d:cb:
56:80:cb:68:7f:15:7e:89:5b:a1:6c:e9:f7:cb:f6:e4:3d:f4:
39:74:59:9e:fe:82:a5:fa:d0:28:b1:26:a5:88:93:81:7d:6f:
2e:d2:5d:64:cd:ec:20:fa:7f:7f:f0:48:ee:5d:79:9c:70:92:
a8:5c:21:2a:f5:fa:41:7a:2d:e3:81:87:ec:ca:3e:9f:3c:f5:
89:00:40:b0:12:f5:0b:c7:75:c2:bd:37:ec:90:ec:62:ec:51:
59:c0:e0:0d:9e:04:c3:47:31:f0:57:88:27:ad:07:ad:b8:2b:
d6:57:15:30:68:f0:3a:94:cd:2b:4b:5d:07:66:27:d6:c1:06:
e4:c0:60:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNF3B+pNSQ+mDkCfV5B0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWZlZGZlZjY3OTE4NDkwNjM0YmU0ZTJiNzVjMTFiNzBj
MmVhMmUwHhcNMjYwMzAxMjEwMTAxWhcNMjYwMzAyMjEwMTAxWjAzMTEwLwYDVQQD
EygyNGNmNDJhYmExM2FjNWE3NTkwNjBiMjQxZWVlMjUxYTc2ZjAzN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VdngzdLACHs88ZDlpve6kBx5K6G
T2B4L0KBXWPK8Z5fLCExChyatekDUEtQQtH7ZqdJKORtvDmHSPMl8pE3mOOPuJ/j
YIO7eajwwO+rRgsjVR/UiYIkYAYr6GRm6dDkwIyIN5B1ufLE9+W5ZSz9W2XaE8iX
B063eYt22ftfb7NyR7WIlFsYOPd8TjSiuEJrAfq+dIl7I4Gt76t8lVsI7jDewfkj
8yFJEpQNwLe0AQiHjuTG6cnPBem7l4BLhgv9qfoSzUkH029odhhKQxuR+hVyQb6w
CUU1pgGjPEIxF/UG9l32jo59c4iX/aPU1mkvmgoeJPr5Dkyw1GkpsKI7sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTPQquhOsWnWQYLJB7uJRp28De5MB8GA1UdIwQY
MBaAFFiv7f72eRhJBjS+Tit1wRtwwuouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMDEzNGMtNDQ3Zi00YzI5LWFlMWIt
YjJjZDM2YzVhMTVlLzEvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9lMDEzNGMtNDQ3Zi00YzI5LWFlMWItYjJjZDM2YzVhMTVl
LzEvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQx+EJuM8
tMt+Sr4O4nHNsfsPbHUe1RqIf28EFJNNZjR3Y+HkYT4BOUhatnB4y7zh9Y82lG8g
bWZBq7uzy73z1e2DtaIuzIKNiw2AqPWmDvbE5bcXHj1HVnWRoXBGwtG23Y2QtX0f
Lb3uj0Y7wvcnzkhagJ2XeX9JYqVBqZ3LVoDLaH8VfolboWzp98v25D30OXRZnv6C
pfrQKLEmpYiTgX1vLtJdZM3sIPp/f/BI7l15nHCSqFwhKvX6QXot44GH7Mo+nzz1
iQBAsBL1C8d1wr037JDsYuxRWcDgDZ4Ew0cx8FeIJ60Hrbgr1lcVMGjwOpTNK0td
B2Yn1sEG5MBg0Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:08:05 2026 by rpki-client