Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: zbvn0CUiktxMpsGDhHFs9iBlbCWV/yXUPE6HnK2JmcM=
Subject key identifier: AF:18:BD:03:A2:7A:78:D4:1C:A9:BE:A7:D5:04:4F:96:44:4D:49:FF
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 019CA945FA8CFA7BBD5A58CF72C739C35162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0D94
Signing time: Sun 01 Mar 2026 12:01:01 +0000
Manifest this update: Sun 01 Mar 2026 12:01:01 +0000
Manifest next update: Mon 02 Mar 2026 12:01:01 +0000
Files and hashes: 1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=)
2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: Izq/mKUbjANu9onrPhYDZdt938+ZJROwHi+jWsfFS7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:fa:8c:fa:7b:bd:5a:58:cf:72:c7:39:c3:51:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Mar 1 12:01:01 2026 GMT
Not After : Mar 2 12:01:01 2026 GMT
Subject: CN=af18bd03a27a78d41ca9bea7d5044f96444d49ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:54:ec:86:ff:6f:4f:19:31:0c:e8:c5:04:
f7:f6:43:99:ab:ed:6a:f3:f1:3d:7e:23:54:03:70:
97:ae:c6:a9:67:c9:6b:e4:95:97:ca:ef:ef:2e:7d:
9a:1a:02:69:05:37:ee:44:0b:90:2e:4a:d8:24:17:
f2:be:d0:44:c0:11:40:56:17:c9:bd:ee:e4:f1:91:
25:41:d3:1c:82:e0:6d:ca:e4:de:2e:70:f2:1f:22:
0c:ea:f7:75:0f:2e:52:ca:06:1e:1b:06:2e:61:2a:
0a:70:79:bd:c1:e8:38:b7:cf:7e:f1:57:4b:f6:85:
eb:45:82:b9:14:6e:07:41:f3:c9:9a:23:7f:4f:80:
26:39:0f:f3:85:ae:96:d1:50:cd:da:40:8a:73:2d:
41:1a:f0:ba:87:bf:42:9d:9b:a6:d6:ba:58:c8:06:
45:62:6c:2e:28:b9:ce:96:f2:9b:e9:2e:36:cc:ed:
b4:5d:7c:ce:7d:89:92:80:ef:15:9a:f4:58:48:5a:
80:34:a2:2e:25:40:54:0b:43:5b:67:31:ad:43:7f:
f0:2c:43:27:85:93:bc:63:6d:5c:76:1f:7e:2b:2c:
1f:73:a1:1e:b6:dc:42:da:ab:b9:d2:76:03:6a:24:
8c:5e:f1:21:53:7d:cd:3e:2b:66:03:1f:bc:67:95:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:BD:03:A2:7A:78:D4:1C:A9:BE:A7:D5:04:4F:96:44:4D:49:FF
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f8:81:46:e4:a9:e8:28:8b:69:25:50:e6:b5:73:c7:11:16:
5e:72:33:65:9d:67:dd:90:10:48:15:6a:11:72:42:25:e1:23:
bb:5a:ac:82:4b:81:03:b4:b5:cb:00:11:18:d1:d4:c0:b0:87:
da:91:24:f8:a6:81:58:03:a2:49:bc:97:5b:be:53:c8:f6:29:
5a:15:3e:dd:fc:1b:9e:60:cd:96:53:c6:3a:40:82:ac:c1:9d:
b0:f8:33:c1:44:a9:14:c5:07:08:cf:bf:ea:67:d6:ed:3f:27:
6a:68:09:15:a5:b9:b3:26:22:79:4c:34:1d:48:cb:6e:d6:86:
a7:f5:f6:1b:c4:5b:a1:5a:16:35:85:51:a3:e8:a7:d9:d8:e0:
60:dd:14:0e:36:96:e4:09:f4:73:e8:37:6d:a9:ff:81:a0:eb:
75:0d:51:b6:77:f4:63:3a:e1:96:d4:57:ee:af:e6:72:d6:67:
ca:51:a5:6b:ea:0c:f0:23:66:84:86:18:59:76:fb:99:07:47:
81:32:46:9e:63:98:d4:95:59:13:a8:14:54:3a:f1:64:c6:44:
5b:a0:75:8a:fb:15:64:89:d3:e5:96:09:02:58:ec:c6:79:51:
78:f5:94:c8:76:e5:bb:8a:48:e6:73:5c:ff:5b:b2:cf:04:cc:
4f:de:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:53 2026 by rpki-client