Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: dh6V6aCDYJUfX9zxm/zmZZFySFdeAWeiCaHq/csTYTY=
Subject key identifier: 03:9A:18:D7:A0:91:87:2E:26:6E:02:C2:F8:26:D4:99:1E:6A:C5:A2
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 019CAE35BF13DD8D8E1451457C9455ABF8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 034D
Signing time: Mon 02 Mar 2026 11:01:23 +0000
Manifest this update: Mon 02 Mar 2026 11:01:23 +0000
Manifest next update: Tue 03 Mar 2026 11:01:23 +0000
Files and hashes: 1: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: E7uNLBCLLzDf3ep+Uy4GF1b8MkGmLA6JxaGS6pLVuq4=)
2: ziF5LUxXxsiZsU2Zn5F9Vs8QBIU.roa (hash: JWHNPV4Q0ijWQ7FA9BlDGI8xfPLJfKs3pJXg1QGEDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:bf:13:dd:8d:8e:14:51:45:7c:94:55:ab:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Mar 2 11:01:23 2026 GMT
Not After : Mar 3 11:01:23 2026 GMT
Subject: CN=039a18d7a091872e266e02c2f826d4991e6ac5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:53:43:0d:3c:b9:a2:18:35:99:54:8e:a5:
0e:b5:71:7b:c2:c2:11:a0:8f:53:1b:30:ac:2c:5f:
de:d5:f3:85:10:12:78:89:ed:43:38:6b:3f:57:7c:
0e:e8:d8:f1:97:a0:f0:99:09:c0:8b:81:62:b3:2e:
0c:09:27:0f:cc:76:5d:18:5d:7b:02:82:70:d8:93:
ab:64:2a:9b:ea:08:43:16:25:54:f0:3c:79:21:6d:
de:f8:c8:75:08:aa:c5:eb:39:a7:4e:7e:77:43:20:
ff:40:ca:ab:86:1b:2e:8e:eb:21:d8:4a:c8:40:97:
8e:de:2d:1b:70:8f:7a:cb:1d:c4:21:c4:f6:06:1f:
25:54:31:31:50:c7:99:4d:f4:6d:45:9a:db:61:2c:
0e:d3:e1:72:0c:57:64:ce:d3:8e:9a:b7:fa:26:70:
48:8a:87:9f:c5:7b:6d:da:e3:69:be:f3:44:2f:54:
65:e0:42:f9:be:87:aa:c1:95:79:a5:b8:d3:c8:a1:
b0:de:a8:22:c6:7b:a7:a0:e2:cf:e9:ee:0d:d9:39:
5f:3b:e9:62:43:2e:7f:c7:34:d1:7a:de:fe:57:03:
1d:52:f0:0b:fc:e1:60:5f:84:9f:df:27:32:3e:c9:
f2:fd:42:8f:a8:6f:6f:36:c5:87:99:0b:f0:d7:30:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:18:D7:A0:91:87:2E:26:6E:02:C2:F8:26:D4:99:1E:6A:C5:A2
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7f:ea:53:9c:44:37:64:23:be:89:1e:7b:c2:f1:94:6b:59:
0b:bd:f2:cd:89:14:5a:0c:93:66:24:e7:28:b5:be:a1:2f:42:
00:a1:f3:75:79:f4:43:70:44:09:48:d2:e5:33:50:10:1f:6a:
d9:c6:99:b5:39:5c:ed:3e:2e:e3:f8:34:95:44:76:2c:7b:f7:
fb:2b:25:77:24:68:0a:00:13:88:b6:ed:12:4a:ef:4a:fa:19:
fe:15:d3:de:e0:8d:96:db:c2:a6:e1:a8:65:6c:8c:d6:7b:dc:
0b:94:d7:05:8f:a1:5f:75:9f:90:26:c5:e8:fa:9a:0c:39:56:
69:93:e4:d4:64:f2:de:46:71:bf:d7:3b:64:f4:cc:6d:ad:3d:
2d:c6:e5:ee:87:a5:b7:44:c9:ca:61:94:e9:56:9f:c3:5a:e5:
92:c7:be:3d:f1:a0:e9:89:95:03:c2:89:dd:29:da:54:26:ac:
0b:05:3b:ac:c9:25:1a:5b:eb:4a:8c:1d:c5:79:40:24:99:d3:
ba:7e:8b:ff:fb:60:c0:b5:ee:22:56:62:39:2e:ef:3a:ba:e9:
8d:9d:44:bc:45:d4:91:be:be:47:35:d8:42:3d:ed:28:26:05:
e3:6e:01:fe:27:2c:61:15:e1:ae:11:05:71:d8:01:03:8f:64:
cd:9b:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:16 2026 by rpki-client