Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json)
Hash identifier: j97gycAhZG/hDxsGg9XJoImpSNaiJT+VWASL34/8k9w=
Subject key identifier: AA:E5:63:B5:39:FE:E6:64:47:C0:34:AD:C4:82:DC:88:D2:61:2C:23
Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Certificate serial: 019CAA2132A1ED118A61B27AECFB33F8E26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
Manifest number: 0129
Signing time: Sun 01 Mar 2026 16:00:28 +0000
Manifest this update: Sun 01 Mar 2026 16:00:28 +0000
Manifest next update: Mon 02 Mar 2026 16:00:28 +0000
Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=)
2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: gChFskLvdJ+6cT4/uDpxZJhSpPhFkZVvOGlGjZI0I1M=)
3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:32:a1:ed:11:8a:61:b2:7a:ec:fb:33:f8:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c
Validity
Not Before: Mar 1 16:00:28 2026 GMT
Not After : Mar 2 16:00:28 2026 GMT
Subject: CN=aae563b539fee66447c034adc482dc88d2612c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:e4:f8:52:13:d9:6b:2c:e7:7c:bc:fe:fb:
76:ea:04:f1:6f:32:45:2d:26:5e:59:1e:7c:70:94:
45:e5:3d:f5:42:07:73:4d:c9:07:a3:3a:19:4a:6a:
89:52:e0:7a:c2:2c:b7:40:c7:4c:42:1b:5c:49:72:
96:c1:0e:34:00:60:9c:79:d5:ab:be:03:65:90:ab:
81:75:15:d6:db:d9:da:48:da:84:0b:5f:6b:f4:a3:
e2:21:a5:28:c6:03:6f:70:4b:76:09:63:20:8d:ea:
0c:10:55:d5:dd:20:42:22:b9:90:8a:4c:85:61:ab:
79:a2:60:ea:00:0e:f4:15:1c:4f:74:a0:64:d1:74:
79:78:2b:22:d4:5e:b4:de:d5:46:82:54:a2:20:95:
de:27:81:1f:89:36:1f:94:53:2a:51:04:a0:5f:a5:
f9:34:ad:36:b7:cd:17:5f:66:29:17:30:d1:1e:43:
b8:08:9c:af:e8:02:47:1f:55:3d:3e:ed:b3:ff:55:
47:c7:f7:d4:3a:a5:64:3e:26:86:a3:fe:25:8e:38:
f5:a9:fe:4a:53:93:89:36:c0:67:91:86:48:f0:7a:
9e:19:ca:75:16:e1:03:bd:c4:c9:0b:de:e1:3e:cb:
3c:a8:4e:5e:19:6d:7a:54:33:6e:06:df:c7:44:16:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E5:63:B5:39:FE:E6:64:47:C0:34:AD:C4:82:DC:88:D2:61:2C:23
X509v3 Authority Key Identifier:
keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:74:04:cf:07:9b:7f:82:40:f9:58:e3:81:df:c2:02:a3:aa:
dd:67:f4:58:e6:da:f9:83:6e:50:27:2f:e7:77:2f:f9:95:cd:
93:50:4a:6a:e1:3a:61:e8:83:83:0d:c9:aa:f6:53:04:b3:35:
bc:21:fa:77:2c:62:1d:a3:0a:1f:82:54:64:21:ee:44:c8:cf:
9e:af:7d:72:35:fe:60:5e:98:ec:c3:f7:b5:55:d4:e9:cf:c1:
0e:32:3d:c4:ac:95:aa:3b:b6:c6:94:68:55:b7:50:cb:05:8f:
d4:96:08:88:2f:00:41:4b:40:23:7b:cf:fc:5f:90:c5:51:82:
54:12:cb:b2:1d:0a:1b:e5:a7:91:00:69:17:e3:31:9e:54:a5:
92:70:89:9a:ea:d4:85:23:5e:97:0f:54:10:b3:d6:4b:e3:04:
1c:06:7c:b4:91:fd:f3:d0:dd:ee:97:ae:50:5d:0b:64:ca:ae:
17:16:a7:26:d7:17:36:e1:8f:5a:96:a9:ed:85:ba:cf:4b:fc:
95:07:a8:de:7d:8c:e8:69:db:88:e7:44:24:37:3e:3a:41:02:
0b:0f:61:cb:7c:2c:75:44:7b:a9:10:51:75:31:4e:4f:47:61:
96:65:03:00:b1:a8:2d:a8:a4:44:b4:42:64:1a:da:52:d3:a3:
d9:0d:f1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:17 2026 by rpki-client