
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: oUb1sTNBhYBZjBdO84i8ahbMeFEEqEw5OnT5ZWEmvcQ=
Subject key identifier: 0D:85:13:F9:5C:37:B6:00:A9:D3:1B:A9:B7:25:1A:CF:DE:30:5B:3A
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 019CD4D52522983EBB6725AB55C0A689DB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: 04D3
Signing time: Mon 09 Mar 2026 23:01:04 +0000
Manifest this update: Mon 09 Mar 2026 23:01:04 +0000
Manifest next update: Tue 10 Mar 2026 23:01:04 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: ktH+N0DNhdtmdIMVLtyIzDsrsDMeIUxGlYVhS0xTiqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d4:d5:25:22:98:3e:bb:67:25:ab:55:c0:a6:89:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Mar 9 23:01:04 2026 GMT
Not After : Mar 10 23:01:04 2026 GMT
Subject: CN=0d8513f95c37b600a9d31ba9b7251acfde305b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:2c:68:7d:76:5a:db:dd:6c:4f:36:36:32:
e8:ad:2f:c9:31:5e:34:b5:52:04:13:65:3a:76:e2:
a6:86:d7:47:59:cb:cc:cb:99:9f:f0:4a:08:a0:fe:
ea:9f:15:13:30:d9:ba:79:20:56:2b:0d:26:d9:f3:
ef:88:a3:a9:31:8d:23:ec:21:15:54:53:77:40:9c:
39:3d:2f:33:89:0c:e3:da:61:85:54:6e:9f:6f:bf:
1a:32:9e:25:ac:1c:08:b0:ee:a1:ff:31:fc:90:03:
ef:5c:22:b1:8c:8f:d2:99:20:59:e9:ca:a7:16:e3:
96:a0:4e:a1:f2:7d:26:8f:60:af:ab:28:ba:48:ce:
2f:3f:1b:16:69:8d:a9:98:80:1b:a2:77:67:97:41:
52:36:c4:17:c2:ec:e1:d2:08:4b:77:de:06:72:e4:
1b:4c:6d:f0:53:8f:63:4f:a2:d0:40:b3:b7:fc:98:
2e:51:4c:71:4f:8d:7d:fa:33:2a:66:18:f2:ca:36:
47:f7:a6:5d:ab:d1:78:cf:29:39:d5:07:45:c5:f2:
b5:2d:04:7f:8d:da:f9:77:ba:38:af:ff:91:fe:c3:
90:02:3b:c0:bf:a7:e3:38:e6:e6:5e:01:96:ba:0c:
b1:1e:b6:85:35:c3:50:d4:36:3f:ce:3e:37:d1:2b:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:13:F9:5C:37:B6:00:A9:D3:1B:A9:B7:25:1A:CF:DE:30:5B:3A
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:45:da:9f:1c:56:b2:0b:e2:74:0c:aa:35:4d:8a:c8:60:2c:
ba:c8:3f:72:a9:79:d7:4b:0a:4e:ad:0d:66:01:67:d8:06:af:
96:80:24:98:9e:f1:58:71:5e:1d:66:f7:45:05:89:a9:ad:91:
9e:f3:f8:c3:ff:af:eb:5a:4a:42:ce:7b:80:d4:23:5f:61:49:
13:1b:ec:f3:c0:23:22:96:a0:b3:e4:0d:1d:30:e2:84:f5:66:
a1:91:6f:0c:43:70:33:d6:e1:c5:a6:2e:e8:2f:06:82:8f:aa:
41:bf:df:1a:a4:bb:be:ba:e8:f8:8b:5b:7a:d9:e9:42:66:23:
40:80:1d:1c:aa:d6:ab:cf:9b:c2:21:f1:b7:4c:84:c2:10:7f:
b2:0c:91:f6:59:7a:4b:a3:96:f9:8d:b1:75:8c:2c:3b:25:60:
34:be:35:8f:2e:c4:53:cb:1a:15:e1:55:97:af:87:4e:3d:f8:
6f:e5:97:02:c2:20:18:cf:80:c3:1d:bc:74:e7:ec:1b:96:85:
ac:70:38:00:29:f2:a6:1e:b9:4b:29:56:b5:d3:ef:2b:3d:b8:
70:54:3f:69:3e:4c:ce:68:8a:ce:75:09:ce:37:6c:b7:e6:61:
9d:9b:e3:93:5f:18:8c:00:93:96:4d:98:e8:8a:f3:76:f4:63:
d4:09:89:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzU1SUimD67ZyWrVcCmiduYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MjA0M2MwMWQ3YWRlYWRkOTZmNTZiZGJiZWYyNzQ4ZTAw
ODAyMzQwHhcNMjYwMzA5MjMwMTA0WhcNMjYwMzEwMjMwMTA0WjAzMTEwLwYDVQQD
EygwZDg1MTNmOTVjMzdiNjAwYTlkMzFiYTliNzI1MWFjZmRlMzA1YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta4saH12WtvdbE82NjLorS/JMV40
tVIEE2U6duKmhtdHWcvMy5mf8EoIoP7qnxUTMNm6eSBWKw0m2fPviKOpMY0j7CEV
VFN3QJw5PS8ziQzj2mGFVG6fb78aMp4lrBwIsO6h/zH8kAPvXCKxjI/SmSBZ6cqn
FuOWoE6h8n0mj2Cvqyi6SM4vPxsWaY2pmIAbondnl0FSNsQXwuzh0ghLd94GcuQb
TG3wU49jT6LQQLO3/JguUUxxT419+jMqZhjyyjZH96Zdq9F4zyk51QdFxfK1LQR/
jdr5d7o4r/+R/sOQAjvAv6fjOObmXgGWugyxHraFNcNQ1DY/zj430SvDeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2FE/lcN7YAqdMbqbclGs/eMFs6MB8GA1UdIwQY
MBaAFFggQ8Adet6t2W9WvbvvJ0jgCAI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYt
NjA3MzY4NTljMGM0LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYtNjA3MzY4NTljMGM0
LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUXanxxW
sgvidAyqNU2KyGAsusg/cql510sKTq0NZgFn2AavloAkmJ7xWHFeHWb3RQWJqa2R
nvP4w/+v61pKQs57gNQjX2FJExvs88AjIpags+QNHTDihPVmoZFvDENwM9bhxaYu
6C8Ggo+qQb/fGqS7vrro+ItbetnpQmYjQIAdHKrWq8+bwiHxt0yEwhB/sgyR9ll6
S6OW+Y2xdYwsOyVgNL41jy7EU8saFeFVl6+HTj34b+WXAsIgGM+Awx28dOfsG5aF
rHA4ACnyph65SylWtdPvKz24cFQ/aT5MzmiKznUJzjdst+ZhnZvjk18YjACTlk2Y
6IrzdvRj1AmJaA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:34 2026 by rpki-client