Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: 7Ww6IJAF9aueE6nWU7jOxhS3GWlDq6u0V2fdBCWknIA=
Subject key identifier: F9:7C:66:F9:C4:E5:C9:B4:1F:43:A1:7F:DA:C7:4C:A8:63:91:02:D2
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 019CAB340DAEB76A1FE010189064C2E23D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0ECD
Signing time: Sun 01 Mar 2026 21:00:41 +0000
Manifest this update: Sun 01 Mar 2026 21:00:41 +0000
Manifest next update: Mon 02 Mar 2026 21:00:41 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: uc/JMTi0TMdzx1ZhlInPlMiCwgs0cDIcEOOHFZ1NQnw=)
2: f5k5qCfc97nrWBFtHlPeoZAbHU0.roa (hash: 5U/u1GLlwPYY0FROjlFUf8bRvu5+K/AhZTkC/PSthCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0d:ae:b7:6a:1f:e0:10:18:90:64:c2:e2:3d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Mar 1 21:00:41 2026 GMT
Not After : Mar 2 21:00:41 2026 GMT
Subject: CN=f97c66f9c4e5c9b41f43a17fdac74ca8639102d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:52:21:78:5e:19:31:9f:6e:ec:fc:4e:62:
36:26:89:d3:b8:a7:be:a4:09:62:a1:15:4b:d4:0e:
c3:7c:9b:af:92:5d:77:bc:a9:42:a6:58:98:b0:9f:
a1:e5:3c:2f:ac:c5:06:b6:b7:ec:91:8f:07:63:44:
01:61:1c:6f:fa:07:c5:b4:cb:57:4e:fc:89:52:64:
69:01:79:c8:bf:44:92:5c:15:bb:9e:4e:08:e8:c6:
cb:3b:5e:c8:c1:65:f5:47:5b:3b:25:ee:5c:4f:04:
e2:51:f4:31:c3:f2:c9:96:1e:1b:d5:62:4e:59:63:
6d:4b:ea:a6:b9:fc:71:38:b5:19:9c:c4:d0:4c:b4:
2b:04:21:47:67:2b:6d:0a:33:06:46:c1:b6:4a:c7:
e4:6f:0c:ec:43:d3:d0:23:2c:0d:da:ce:87:f3:ac:
ee:42:93:09:33:8d:94:39:92:34:74:f7:35:17:9b:
e3:ad:21:cf:e8:a2:16:12:9b:13:00:45:92:a3:68:
e3:d0:c9:23:cc:ba:43:8b:89:1f:f3:da:63:83:6c:
dc:80:1e:25:82:40:1b:d7:18:52:38:12:38:a2:11:
df:00:2f:cc:24:42:5d:78:84:e2:64:7e:e9:a6:ab:
bc:33:8f:aa:fc:5b:b4:16:01:61:99:73:01:ba:3c:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:66:F9:C4:E5:C9:B4:1F:43:A1:7F:DA:C7:4C:A8:63:91:02:D2
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ac:dd:85:ec:dd:6f:d8:7c:c7:da:bd:f5:b1:41:ca:fd:ea:
58:80:ed:d7:52:a4:50:35:6f:56:ee:49:5f:16:2d:92:24:fe:
c7:f1:5f:01:e2:b5:25:17:51:c3:7f:69:8a:e2:62:ec:8e:2f:
bc:08:74:b5:9e:b5:e2:54:71:80:6c:51:89:97:33:dc:64:e4:
37:f3:55:00:58:01:35:70:b0:35:8e:86:57:ec:a0:70:8a:3a:
03:59:a1:7b:1f:a1:ac:82:d3:07:86:ee:5e:ed:bc:33:38:09:
32:b4:05:68:42:20:78:d5:9e:63:99:6b:46:a0:14:29:ba:78:
73:ba:9d:2c:b0:0f:e1:23:29:a6:82:e9:26:b1:36:ca:23:74:
ed:0a:0f:4d:94:cd:4b:4a:06:82:2a:93:ed:b2:59:24:2b:a6:
93:9e:52:88:e6:cc:2c:32:c7:27:05:a7:b7:72:fd:f5:86:61:
eb:d3:97:8f:f1:b9:2f:88:1e:96:99:0a:c6:4a:c4:69:be:d6:
a5:70:10:1e:3b:2c:17:e3:c8:fe:d7:13:d8:88:0e:60:1b:20:
79:34:cf:00:f6:0a:be:0e:7f:f5:f1:38:2b:7f:ee:d7:c7:82:
30:72:29:08:40:09:73:32:47:0c:08:30:8e:33:cc:01:49:39:
f6:b1:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:17 2026 by rpki-client