Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier: D+ZsmJR/FveIKgBSC5P8oLJBTY8MEXoWSC3x75qK7k8=
Subject key identifier: 14:CC:88:3B:90:F3:E3:B6:A9:19:CD:DB:CF:D8:EC:E1:12:71:90:C7
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial: 019CAC46E21419F7A76B56C50F6E2DC52A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number: 0CA9
Signing time: Mon 02 Mar 2026 02:00:52 +0000
Manifest this update: Mon 02 Mar 2026 02:00:52 +0000
Manifest next update: Tue 03 Mar 2026 02:00:52 +0000
Files and hashes: 1: ISoN8Hz1Tt-g6dokZBe32zhY29I.roa (hash: jqVnvsymB8ypbwPu5QGw3Kqpgjs5LT+P+1zvgA/xIZg=)
2: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: Tm520C04gL8O9i3IS86p+c968QR4VV6BwTwCghePGbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e2:14:19:f7:a7:6b:56:c5:0f:6e:2d:c5:2a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
Validity
Not Before: Mar 2 02:00:52 2026 GMT
Not After : Mar 3 02:00:52 2026 GMT
Subject: CN=14cc883b90f3e3b6a919cddbcfd8ece1127190c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:4a:51:cc:0a:54:d6:82:fd:27:41:c7:8c:
b1:c4:90:1b:e2:c4:e9:3e:06:4b:38:06:42:31:e5:
5f:52:bc:ad:47:13:7e:f8:dc:4c:87:0a:f1:94:e5:
ba:09:12:21:a1:26:e0:6e:93:37:9a:c8:fc:57:9f:
68:9a:0b:ec:d7:51:0d:ab:ac:3e:24:e0:74:ac:0f:
cc:81:84:1a:53:e0:07:5f:45:49:54:94:63:b2:ba:
89:15:41:40:b6:bc:14:bc:bd:3a:ae:c6:ca:26:22:
07:9a:6d:17:22:61:88:21:40:1d:85:1d:a6:71:7f:
80:56:a2:14:a2:4e:a8:ae:76:23:86:cd:fd:af:ea:
67:73:bb:c9:24:7f:9d:da:4a:b9:06:f9:b9:a2:22:
d4:db:ef:e8:ff:c4:6a:1b:70:45:56:38:47:fa:82:
46:1a:fd:13:7d:cc:fe:0e:e4:04:bd:e9:79:e7:84:
b0:9d:f9:fd:49:8c:9d:3c:39:6e:a4:e6:0a:2c:e7:
03:22:ed:27:29:0c:98:20:ca:82:39:d4:40:73:9c:
58:05:fd:ad:f3:36:2f:36:1b:ba:5a:dd:53:f8:f0:
39:e6:d1:4c:5d:2c:f4:ae:dc:46:1b:fe:85:3f:88:
78:81:57:17:64:b3:8b:ad:4e:53:7a:7a:f2:b2:b9:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CC:88:3B:90:F3:E3:B6:A9:19:CD:DB:CF:D8:EC:E1:12:71:90:C7
X509v3 Authority Key Identifier:
keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:db:cf:3d:94:04:60:cc:49:40:ab:5a:70:c3:f8:3a:8d:cf:
0f:b7:66:fc:96:96:65:10:ef:e4:16:7b:56:4b:12:39:05:37:
53:39:16:55:22:00:81:08:77:1c:66:b3:7a:de:8a:2c:27:c3:
5d:52:8f:b1:c2:ef:51:00:fe:df:2c:73:7c:e7:2c:80:39:f0:
ef:05:3f:0b:0c:66:f0:04:f4:80:df:75:1a:ea:1f:d9:71:e0:
6c:0c:c8:0b:05:5b:85:54:30:e2:66:2d:00:a3:c2:fd:38:8f:
1a:2a:ce:9b:24:d0:9d:99:af:c4:43:95:df:ae:47:83:11:94:
de:90:27:fc:e8:c8:8f:c5:a8:f7:ee:8d:31:54:6d:d1:a7:18:
65:1a:bb:46:b4:75:d9:9c:96:53:06:a9:3f:69:8f:32:13:c8:
69:cf:cf:65:6f:a1:08:11:85:eb:28:59:ce:8c:92:cd:66:c2:
46:be:40:bc:4a:1d:ea:1a:7b:dd:08:7a:d6:1f:7c:88:91:47:
73:83:91:d0:6a:66:07:95:4c:31:aa:f7:dc:8b:c5:ca:4c:41:
1a:27:04:a7:0d:cb:d8:82:9b:36:8d:32:36:9e:75:95:5a:68:
b1:e1:c9:ba:99:f0:98:ef:02:26:44:ec:bd:f0:62:2d:76:b0:
bf:b9:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:04 2026 by rpki-client