Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier: S6PVQIaHyhZyJR8TneTACbDeqm9SUL4mErpZuYsKTCo=
Subject key identifier: DD:0F:0E:9F:76:10:37:BC:D6:F7:F0:33:67:2D:2A:56:63:A4:72:C6
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial: 019CAA8FEA82C5B45A0C78D08FBA686139CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number: 039F
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: 3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa (hash: 3n/tlWwRztOB/Yu2+sFP0seUelZYfaMtfMJ5VRgA2p0=)
2: 3lscwPyVq0HwpYOhe1qOH376GbY.roa (hash: ABURxSq0W7iaabEt0YGRwE5xtvDmIVi3eCKYaDM6tzo=)
3: AnOV32OnLS7vzP0Ic_vNsSbH3VU.roa (hash: 2+tbTXLyonVPPU5Qc4ONeo44MFYnrVJPmBUJMwxiq4M=)
4: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: GcxoOSNrzVJv4tC74MiAFF9xDALlx+tcti1ZWvJRXCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ea:82:c5:b4:5a:0c:78:d0:8f:ba:68:61:39:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=dd0f0e9f761037bcd6f7f033672d2a5663a472c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:45:16:d0:da:20:9f:c2:6e:ce:a2:e3:e3:
7e:ef:6a:17:ab:40:0c:aa:e0:bb:c8:d4:23:79:4d:
cf:37:e7:17:41:3a:c9:ed:67:f1:6a:d8:2e:e4:e1:
e6:d0:8a:c7:bf:9f:d2:ab:8e:4c:28:6a:ae:1b:f5:
6b:a5:4c:6e:b0:00:ae:1b:75:42:83:d7:15:98:25:
ab:96:c9:7a:42:ee:70:a8:5e:9a:e9:c0:96:63:43:
67:a7:3d:f5:70:cd:da:3a:ad:b3:1a:de:53:af:f8:
b5:92:11:b2:dd:cf:86:db:4e:fa:3a:58:8e:2d:23:
1f:a1:0e:b6:20:6e:da:ee:c9:a7:12:65:5f:ea:63:
a8:44:aa:33:23:cd:59:b7:49:71:76:cc:4e:f5:84:
f2:1c:72:d1:3d:9b:49:cd:a4:53:94:19:f8:0c:dd:
04:54:95:9c:cc:df:20:77:52:b1:fe:c8:b5:99:46:
3c:6d:55:54:9a:db:d2:66:1a:a1:2f:88:92:4d:72:
63:1c:48:88:91:9d:8a:3e:78:13:51:49:82:09:21:
c1:c7:14:d2:e0:be:31:35:34:ba:80:99:3a:f2:68:
07:79:3b:12:f6:e8:c9:82:20:0e:4d:4b:fe:a3:24:
9b:69:cc:f0:79:11:bf:b6:10:d2:6e:62:80:2a:cb:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0F:0E:9F:76:10:37:BC:D6:F7:F0:33:67:2D:2A:56:63:A4:72:C6
X509v3 Authority Key Identifier:
keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:de:16:16:09:42:41:42:37:39:14:c6:d4:f3:20:d8:df:8b:
ba:10:86:ac:fc:a7:5a:bf:21:5b:15:2f:99:ec:6f:9e:2d:67:
c3:f9:ca:33:46:e2:ec:7d:68:d1:49:0d:1c:12:1c:53:6e:44:
54:d3:8d:77:7b:27:2a:7d:a8:a7:0d:06:f8:80:de:8a:7d:2e:
b0:97:9d:11:90:38:dd:6b:92:8c:37:e1:15:f9:de:f3:bd:1e:
6c:f7:ea:a7:0f:19:df:89:c9:28:3c:4f:71:ba:6a:1b:81:93:
a3:cc:ab:ce:3f:f2:91:98:d7:25:24:7b:6e:b2:be:0a:98:b9:
c3:41:41:7e:bd:c5:37:6f:f1:8c:57:05:1e:ec:f7:0b:0d:07:
55:6f:86:e5:2d:d3:39:1c:64:78:70:f4:a3:27:a8:66:d2:27:
11:cf:f3:fa:24:20:c8:9a:e2:7e:a1:66:93:a3:8d:8f:a2:9c:
b5:34:47:5c:ab:85:94:03:87:79:39:44:b6:e8:dc:a1:fd:a5:
e7:8c:57:5a:1e:a6:7c:9e:08:7d:27:d3:f2:aa:e8:d8:3b:0d:
1e:74:05:eb:22:96:5b:e9:77:5c:bd:32:1a:e3:b7:c5:69:0a:
96:20:2c:89:40:38:1f:d4:bd:c3:b6:eb:e5:2c:c1:47:d9:57:
b2:d2:56:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj+qCxbRaDHjQj7poYTnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2Q1NjNhMmFlNjUyOWM5ZjQzZmU0YjVjNjdkYjcwZTc3
OWEwOWIwHhcNMjYwMzAxMTgwMTI0WhcNMjYwMzAyMTgwMTI0WjAzMTEwLwYDVQQD
EyhkZDBmMGU5Zjc2MTAzN2JjZDZmN2YwMzM2NzJkMmE1NjYzYTQ3MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RlFFtDaIJ/Cbs6i4+N+72oXq0AM
quC7yNQjeU3PN+cXQTrJ7Wfxatgu5OHm0IrHv5/Sq45MKGquG/VrpUxusACuG3VC
g9cVmCWrlsl6Qu5wqF6a6cCWY0Nnpz31cM3aOq2zGt5Tr/i1khGy3c+G2076OliO
LSMfoQ62IG7a7smnEmVf6mOoRKozI81Zt0lxdsxO9YTyHHLRPZtJzaRTlBn4DN0E
VJWczN8gd1Kx/si1mUY8bVVUmtvSZhqhL4iSTXJjHEiIkZ2KPngTUUmCCSHBxxTS
4L4xNTS6gJk68mgHeTsS9ujJgiAOTUv+oySbaczweRG/thDSbmKAKstA4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0PDp92EDe81vfwM2ctKlZjpHLGMB8GA1UdIwQY
MBaAFFjNVjoq5lKcn0P+S1xn23DneaCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAt
NDdhNWY0ODFlNmY1LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAtNDdhNWY0ODFlNmY1
LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQN4WFglC
QUI3ORTG1PMg2N+LuhCGrPynWr8hWxUvmexvni1nw/nKM0bi7H1o0UkNHBIcU25E
VNONd3snKn2opw0G+IDein0usJedEZA43WuSjDfhFfne870ebPfqpw8Z34nJKDxP
cbpqG4GTo8yrzj/ykZjXJSR7brK+Cpi5w0FBfr3FN2/xjFcFHuz3Cw0HVW+G5S3T
ORxkeHD0oyeoZtInEc/z+iQgyJrifqFmk6ONj6KctTRHXKuFlAOHeTlEtujcof2l
54xXWh6mfJ4IfSfT8qro2DsNHnQF6yKWW+l3XL0yGuO3xWkKliAsiUA4H9S9w7br
5SzBR9lXstJWxg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:25:34 2026 by rpki-client