Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: 8dQ7xTMelMZAXBWVbUqKFNjSfXoETaCj2QFN288PFEM=
Subject key identifier: 68:BD:58:3A:39:7B:AC:D5:B9:C6:C3:E0:01:29:2F:24:9E:C9:A7:62
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 019FAAF5971D4952BF31FDD407A11B6FA095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 0737
Signing time: Tue 28 Jul 2026 23:00:49 +0000
Manifest this update: Tue 28 Jul 2026 23:00:49 +0000
Manifest next update: Wed 29 Jul 2026 23:00:49 +0000
Files and hashes: 1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: dTBv7ZH4sW37yDtr205/5gmDQ4a/Ra+DieKLlq9y/bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:97:1d:49:52:bf:31:fd:d4:07:a1:1b:6f:a0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Jul 28 23:00:49 2026 GMT
Not After : Jul 29 23:00:49 2026 GMT
Subject: CN=68bd583a397bacd5b9c6c3e001292f249ec9a762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:4c:15:0e:d5:37:25:54:2a:97:cb:be:d3:
9a:db:64:8a:7d:4c:36:0f:d3:59:41:23:fb:79:94:
f7:80:77:0f:0a:91:0a:e0:79:2a:9b:bf:99:d2:81:
8e:9b:97:3e:df:f2:83:79:5e:9e:79:d2:45:64:f7:
d9:63:d5:6e:20:12:94:6b:6e:b1:d0:ba:a4:4d:84:
e5:d0:86:48:4f:21:08:e1:82:e5:17:df:04:c5:56:
28:bd:c2:20:b3:18:e2:b2:01:dd:b2:b3:7e:4b:5e:
0e:74:76:3c:0f:2e:f1:27:b0:56:20:be:dd:23:62:
f7:c3:c6:77:8c:89:9a:d2:3a:60:b2:bc:f6:6c:34:
42:6c:ea:a3:ca:81:e5:5b:e9:74:2c:1e:0c:2a:e6:
ed:ba:62:85:68:25:05:b5:33:ba:ba:2b:6f:6f:68:
c8:1d:b1:60:d4:92:55:29:ad:e9:e1:51:a4:87:42:
44:e5:1d:a9:43:60:fa:c7:bb:a1:f9:59:22:22:12:
51:86:37:1d:14:6a:61:77:05:3b:83:28:63:31:13:
45:fc:7d:1e:06:83:96:c7:da:f3:06:49:18:45:71:
24:05:b3:d0:07:db:c6:66:e6:a2:ba:f0:8d:c7:70:
2f:f1:7f:a8:9b:1a:a8:12:06:23:36:a4:25:5e:0f:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BD:58:3A:39:7B:AC:D5:B9:C6:C3:E0:01:29:2F:24:9E:C9:A7:62
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2f:ba:69:41:2e:bb:9b:b2:dc:be:cf:b3:8e:d5:7c:9d:2c:
3e:0a:4b:75:80:b4:cf:69:2a:2a:35:64:7f:a0:c9:20:47:3d:
e0:82:b9:e1:d9:e6:78:6e:8a:e9:b7:28:da:44:d2:f3:ea:14:
81:27:57:6d:3b:4a:54:28:36:7a:a4:a4:a6:3e:d3:0e:12:55:
81:08:d2:41:45:6c:7f:03:f6:b4:30:83:c7:11:11:1e:9c:8b:
36:fd:08:dd:99:45:e2:74:19:b2:ec:a4:24:a9:e2:90:14:12:
71:a5:65:55:8f:f7:f9:8e:b7:1c:43:d2:1d:81:d1:ff:d9:30:
d9:82:34:20:fd:30:ce:b0:3e:f6:66:41:c5:cd:7c:3d:70:6c:
df:1f:5c:26:b5:f2:f0:85:80:cf:7e:31:63:7a:d8:a5:76:54:
bd:aa:06:89:5e:0b:d4:c5:9a:ee:e2:f2:25:63:12:27:96:db:
b9:91:a9:17:f1:5d:c6:af:75:e8:73:d0:c5:13:47:ea:ab:89:
43:c7:6e:da:79:4b:2c:e2:66:5e:29:ab:3b:80:ec:82:b3:96:
f9:48:3e:7c:ed:b7:16:d3:a1:d5:39:7d:65:f4:ac:a2:ee:c5:
0b:7e:ea:9d:0b:6c:97:bb:19:cb:88:e8:e8:9f:bf:57:f8:92:
bb:34:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:53:15 2026 by rpki-client