Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier: 0cyYSjq3XFrZ3+GYxPLRHuHA81FFtKm3EZytSdlknt8=
Subject key identifier: 26:47:8C:FB:2A:81:36:66:56:89:ED:59:B3:BC:48:7B:17:A0:C5:17
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial: 019CAAC63155CE6646CE3BE874CB8B798C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number: 156B
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: MQ1rIvHKeTYhLT9zYntvVr0Ep7w.roa (hash: /nZ/kzhs/5Nc05vPwFMbSjWv3DV2VWk20JauYWJRGIY=)
2: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: BYjLvSaONcphBi3FMXb+WaVVG02HenCjvnAQb1Yc0VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:31:55:ce:66:46:ce:3b:e8:74:cb:8b:79:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=26478cfb2a8136665689ed59b3bc487b17a0c517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:9e:4e:5f:e3:17:ab:1b:f3:26:18:c4:b7:
53:7c:70:a7:17:5c:3e:bf:53:cf:ad:8d:9a:5c:d7:
f2:b8:11:bd:04:f1:ca:8b:f0:10:9b:04:7a:c1:f8:
3d:a2:ea:df:d2:b2:9a:8a:d9:73:e0:9b:51:41:ab:
77:5c:cb:bc:5d:22:5b:d3:91:e6:65:fb:c5:22:bd:
62:3c:32:be:e6:45:e3:78:2e:58:1b:6d:31:25:fa:
21:c4:63:26:50:97:8a:66:d2:bf:ff:52:b0:51:d8:
6a:6c:95:5f:6f:92:8e:61:6f:a4:87:9e:a5:8d:02:
8a:b8:f2:d2:2a:e1:b7:2f:8c:28:ee:d1:5e:3f:47:
24:af:fc:49:ba:a2:dc:a0:0d:1a:8a:6d:95:18:cf:
c4:95:6b:58:89:0b:ee:96:ca:d3:45:57:c6:a5:9e:
d7:52:88:a2:6f:c3:c4:39:95:b1:4c:7e:aa:d4:1c:
b4:c8:9d:fb:13:68:78:97:d1:ff:db:17:9d:87:42:
ab:f7:9b:bf:99:de:03:cb:3e:74:53:59:70:9e:81:
ec:d6:cb:f4:17:d2:95:5e:e1:ad:83:a8:a1:58:26:
ab:cd:e1:06:f6:89:28:e1:48:b6:50:03:3d:63:70:
1f:a7:0f:ca:f4:5e:0b:1a:81:8a:dc:a2:bc:02:85:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:8C:FB:2A:81:36:66:56:89:ED:59:B3:BC:48:7B:17:A0:C5:17
X509v3 Authority Key Identifier:
keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1b:7c:e2:f4:4e:2d:69:a4:e4:ce:b4:f1:8c:72:a3:8a:da:
04:31:cc:77:68:38:35:59:c7:64:5b:8f:22:49:89:0d:02:bb:
2f:82:83:d5:1c:bd:7c:5c:13:a9:3a:a9:6f:c4:5a:17:1d:cb:
94:76:fb:08:47:ed:fe:90:c2:55:69:62:10:3f:21:ca:13:d7:
73:62:c0:75:4a:3a:d0:57:93:98:99:78:f8:3a:7e:69:32:47:
7d:0d:70:49:da:d9:5d:ac:15:ac:5a:ab:1d:47:c6:51:4c:c8:
11:e8:c8:4e:0b:49:a1:b0:6b:15:8a:17:1f:5d:68:b4:45:84:
29:7c:80:86:65:a9:76:0d:20:61:a2:3a:d1:b0:67:8e:c9:33:
fc:7b:3c:f5:09:e6:5f:0a:f1:7e:92:d8:2c:6f:45:54:31:53:
6b:65:4a:d1:2f:71:5b:1f:7b:ab:24:d9:7f:0a:eb:70:eb:29:
1f:1a:01:77:2e:81:5b:88:14:17:ad:e5:32:1c:19:ac:a2:21:
74:b3:65:2b:1c:71:d3:44:2e:50:03:e2:05:23:d0:8b:1d:5d:
79:f1:be:df:5b:81:9a:e2:35:71:d3:19:01:4b:64:60:c6:d0:
66:23:1d:1a:4f:9d:97:a6:8c:33:3c:2e:62:4e:e3:d0:eb:d5:
06:de:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:43 2026 by rpki-client