Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier: dcEJrCuR7NPhT72CV9NXnnxm2+EPMUj48bwv6zga+98=
Subject key identifier: F4:F0:94:A2:0E:52:F7:30:C6:DF:70:CF:A2:DF:90:50:67:E6:CC:82
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 019CAB3423CAD15F818688CAED733180FFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number: 014A
Signing time: Sun 01 Mar 2026 21:00:46 +0000
Manifest this update: Sun 01 Mar 2026 21:00:46 +0000
Manifest next update: Mon 02 Mar 2026 21:00:46 +0000
Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: a5zvWomb8QEiAJYyRjZeVwxKkvT1FOO4175V6Uj2ah0=)
2: pSXCDiBSJhGXaOXef7Y4YTCUUZ4.roa (hash: Q877kwTSoXnFjxRbDVpx+FXDEeiawiNVCD8IEmWvnEU=)
3: wI-ypASrJ7m0N79u1RJq_k57AIc.roa (hash: U4IOvrmrguD6t/ZtF0LoNyn+uQVk4Bj7HsVFQCe+6FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:23:ca:d1:5f:81:86:88:ca:ed:73:31:80:ff:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Mar 1 21:00:46 2026 GMT
Not After : Mar 2 21:00:46 2026 GMT
Subject: CN=f4f094a20e52f730c6df70cfa2df905067e6cc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:40:1e:90:af:05:16:ac:3a:ef:79:23:fb:
c6:a8:d9:c1:28:80:f1:d6:7d:aa:bf:44:06:05:5d:
c7:09:5f:ac:0b:89:61:04:be:8e:99:53:12:cf:0f:
34:88:77:04:38:e3:d8:68:09:cc:ed:4e:29:ff:a0:
ee:41:c2:1e:74:7f:ed:6d:c6:a6:a3:9f:7a:f3:27:
44:ee:2b:00:51:a8:b3:1f:d3:15:d4:e7:e1:85:bc:
5b:2f:4e:43:6e:11:52:35:f5:ac:07:9d:76:38:90:
30:f1:4d:8d:cb:02:2d:cc:aa:cf:e0:7e:c4:d7:86:
c1:89:53:1d:f1:e6:5c:46:39:0e:c6:40:34:d4:2f:
cc:c0:6a:1c:21:97:30:72:40:68:b2:43:4e:5a:18:
0c:e2:35:47:ec:7d:25:1b:1a:c4:4d:f1:b3:ad:03:
cf:a5:8a:24:27:05:71:08:31:f9:69:51:34:0d:c4:
00:68:f4:76:bd:a1:5c:af:de:c7:ca:b4:85:38:a6:
e5:63:e0:23:3c:e4:71:36:ad:4b:91:87:c9:69:eb:
e9:e5:b8:b3:83:32:56:30:e3:e4:f3:12:4d:2c:7e:
ef:7d:7c:35:f8:bd:4c:98:c1:bb:a6:5d:4b:24:e3:
7d:d0:e8:21:5e:93:94:b4:38:6d:9a:36:b3:a7:86:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:94:A2:0E:52:F7:30:C6:DF:70:CF:A2:DF:90:50:67:E6:CC:82
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b2:1a:04:b0:72:85:9e:87:1c:fd:1a:b8:82:72:49:e6:0e:
bb:56:96:c0:c3:6f:79:b9:2f:a2:96:be:d7:a6:f7:37:1c:4d:
58:02:ab:7a:67:0b:f3:d5:11:d6:77:31:b7:3d:10:61:12:98:
42:b2:67:b8:4f:05:b4:c3:14:76:e6:3e:b4:30:cd:78:5a:d9:
77:cb:ae:4b:e6:fb:b0:54:65:de:a6:f0:8b:8d:5f:77:71:81:
4d:9c:57:22:51:f3:b8:cb:bb:87:f0:67:4c:0a:b8:21:39:25:
59:b2:0a:b1:4b:aa:14:72:4b:a3:66:18:21:f2:45:3e:67:3e:
d6:61:e5:ee:d0:a6:02:a1:8b:b6:44:da:f1:ed:2e:46:07:60:
dd:e7:31:e2:ec:0c:fd:78:de:e1:5a:81:87:18:c8:61:de:1b:
bd:7c:91:e5:3b:77:07:4b:af:03:5a:2c:ff:48:44:0a:23:6a:
d8:29:e7:8f:65:35:ba:88:f0:e9:19:a6:23:f5:9a:cc:3a:40:
30:f4:c8:83:90:55:79:d7:00:7d:3f:0a:d3:78:99:02:99:75:
63:43:d9:3d:27:11:a5:a2:61:bb:f0:2d:b5:45:fe:f3:2a:56:
2f:4d:48:03:ff:cb:77:b7:cb:58:fe:e4:fd:bb:5c:de:f5:b1:
6c:77:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:44 2026 by rpki-client