Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: NH+1z34CKHmJr3/g7L1GZhnd2sBAEhz5wjvtNShO/kQ=
Subject key identifier: D8:01:3E:E0:C1:25:1F:16:25:EA:9B:83:EF:8A:8A:43:A7:3F:93:4D
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 019CACB4BADDAEB961C77F2A6D327C6F93F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0E62
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: vqzkb1w70hqqrx6khUvv6k+yOsND8qcHjJIGDqn2hSE=)
2: cbzvxlYd2Sf5BPkKpVOxRrjDUx0.roa (hash: VqP2QOQPebJ1F3l2x635f2ND94zv4XuMIM8H7AehW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ba:dd:ae:b9:61:c7:7f:2a:6d:32:7c:6f:93:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=d8013ee0c1251f1625ea9b83ef8a8a43a73f934d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:bd:66:1a:88:de:1a:12:bc:f9:2d:ad:20:
9e:c4:f3:6b:c5:97:99:70:74:14:0a:ba:4f:3c:94:
93:f6:1b:ca:dd:e1:c7:08:aa:6a:77:d1:cc:b1:30:
6a:4a:51:08:d0:84:d4:39:f0:b6:af:71:17:e8:9f:
53:5a:d4:9b:86:5d:34:2e:a1:d9:22:f2:6c:4c:d7:
c2:f9:a5:29:c6:4d:8a:3f:39:95:5b:5c:85:93:8a:
23:c3:bb:46:b6:7d:d7:6d:b5:79:63:28:90:3e:ad:
54:74:c4:bb:f1:b0:37:7b:0e:51:71:0d:cd:39:e2:
7e:17:50:18:25:1b:83:99:c5:f2:ce:6c:02:74:e6:
c7:24:f2:f3:b2:c4:d4:b9:33:eb:11:6c:ed:69:fa:
93:35:4c:ec:7b:b6:af:39:64:6d:b7:6f:60:09:a3:
5c:eb:27:d2:77:49:1a:de:88:32:9a:d0:82:fb:86:
c0:c9:72:ae:22:5e:0b:74:1a:1d:1d:b6:b8:de:d5:
c1:bd:71:98:01:e9:77:f0:28:a4:b6:ab:af:95:1b:
a4:00:92:fc:11:b8:cf:0f:c8:10:e7:18:d6:0f:d2:
8b:01:cf:7c:e3:d2:9a:fc:ba:2b:de:42:67:62:a1:
a7:79:67:90:02:75:47:ad:79:4c:2b:c5:b3:11:30:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:3E:E0:C1:25:1F:16:25:EA:9B:83:EF:8A:8A:43:A7:3F:93:4D
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c3:d4:4e:2d:d1:15:7b:3f:ea:1d:0d:b7:69:bb:33:68:01:
15:38:30:cd:ab:bb:0d:5a:f7:65:7f:3e:35:82:43:94:65:5f:
28:a6:92:10:f1:49:21:f7:07:ef:63:be:f6:c5:3e:fc:e3:c2:
8b:ce:9f:9c:3a:8b:fd:a7:26:89:7e:51:a7:4c:16:af:a5:1b:
cc:cf:83:6f:cd:bf:b7:2e:9c:ed:ef:3b:86:d6:96:a7:47:d6:
4d:4f:76:97:a3:83:d4:e9:4c:3f:ef:cd:91:2b:83:9a:a5:33:
56:55:df:fa:87:2c:e4:fd:65:02:e3:19:cd:89:ca:c3:8b:ec:
ec:59:8b:6f:70:e6:8a:8f:e0:2a:e5:09:6c:f2:f1:fd:c7:c3:
6c:40:44:41:e8:20:65:7d:92:62:b1:cb:be:a0:58:a8:71:21:
12:62:d4:a4:3d:5c:03:0d:31:e1:2a:2d:36:40:78:ce:90:7c:
a9:c4:07:5e:12:5d:58:a6:dc:fa:e3:da:27:63:bd:de:24:39:
e5:d0:b9:bf:ae:56:80:3d:62:ee:a9:54:86:4d:32:64:aa:91:
10:1e:86:c9:3e:33:fc:e8:c1:26:0d:ac:92:dd:1f:29:05:9c:
68:7b:57:d6:31:ed:9e:f3:92:b7:9f:24:03:ce:37:32:4c:2b:
ff:db:8a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystLrdrrlhx38qbTJ8b5P2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTg2YTZjNzFmYjczNGM3MDViNWU2NmU3NGFjMWM1NmJi
OTYwNWUwHhcNMjYwMzAyMDQwMDUxWhcNMjYwMzAzMDQwMDUxWjAzMTEwLwYDVQQD
EyhkODAxM2VlMGMxMjUxZjE2MjVlYTliODNlZjhhOGE0M2E3M2Y5MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtri9ZhqI3hoSvPktrSCexPNrxZeZ
cHQUCrpPPJST9hvK3eHHCKpqd9HMsTBqSlEI0ITUOfC2r3EX6J9TWtSbhl00LqHZ
IvJsTNfC+aUpxk2KPzmVW1yFk4ojw7tGtn3XbbV5YyiQPq1UdMS78bA3ew5RcQ3N
OeJ+F1AYJRuDmcXyzmwCdObHJPLzssTUuTPrEWztafqTNUzse7avOWRtt29gCaNc
6yfSd0ka3ogymtCC+4bAyXKuIl4LdBodHba43tXBvXGYAel38CiktquvlRukAJL8
EbjPD8gQ5xjWD9KLAc9849Ka/Lor3kJnYqGneWeQAnVHrXlMK8WzETCvUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgBPuDBJR8WJeqbg++KikOnP5NNMB8GA1UdIwQY
MBaAFFioamxx+3NMcFteZudKwcVruWBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAt
YTliMTNjMjgwMGFmLzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAtYTliMTNjMjgwMGFm
LzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2MPUTi3R
FXs/6h0Nt2m7M2gBFTgwzau7DVr3ZX8+NYJDlGVfKKaSEPFJIfcH72O+9sU+/OPC
i86fnDqL/acmiX5Rp0wWr6UbzM+Db82/ty6c7e87htaWp0fWTU92l6OD1OlMP+/N
kSuDmqUzVlXf+ocs5P1lAuMZzYnKw4vs7FmLb3Dmio/gKuUJbPLx/cfDbEBEQegg
ZX2SYrHLvqBYqHEhEmLUpD1cAw0x4SotNkB4zpB8qcQHXhJdWKbc+uPaJ2O93iQ5
5dC5v65WgD1i7qlUhk0yZKqREB6GyT4z/OjBJg2skt0fKQWcaHtX1jHtnvOSt58k
A843Mkwr/9uKeQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:01 2026 by rpki-client