Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
File: WFRbn70B0owOptCPW0cts0-tLqM.mft (raw, json)
Hash identifier: AIBhGaSTLfnK+PmDb8TA/Eyi3I6DyxQPH00jip/fDjw=
Subject key identifier: 01:DA:B9:B0:B1:0B:43:5E:E4:35:25:4F:0D:19:87:EA:BB:8A:B6:02
Authority key identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
Certificate issuer: /CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Certificate serial: 019D33086F0BB354FB8EB7BAA3913EEAD7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
Manifest number: 1852
Signing time: Sat 28 Mar 2026 06:01:23 +0000
Manifest this update: Sat 28 Mar 2026 06:01:23 +0000
Manifest next update: Sun 29 Mar 2026 06:01:23 +0000
Files and hashes: 1: WFRbn70B0owOptCPW0cts0-tLqM.crl (hash: +DOIIGQIAwZgEbMvnF0Dq3VHoytur17aM8E0+FH1c3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:6f:0b:b3:54:fb:8e:b7:ba:a3:91:3e:ea:d7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Validity
Not Before: Mar 28 06:01:23 2026 GMT
Not After : Mar 29 06:01:23 2026 GMT
Subject: CN=01dab9b0b10b435ee435254f0d1987eabb8ab602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:8e:94:75:47:8b:4d:3c:ed:ca:c8:7e:b8:
d7:b7:a6:5b:2b:da:e7:33:fe:dc:f0:d2:a3:93:ce:
5b:63:98:ae:4a:46:e6:d3:c7:02:66:d2:ec:ba:7b:
ac:7b:03:de:a7:eb:05:bf:47:ca:5d:14:16:23:16:
d8:cb:ff:33:37:28:6e:63:e7:7f:03:0e:5f:1a:a7:
75:0a:71:35:a5:d5:27:fc:eb:b4:ae:2b:60:36:44:
c1:e1:8c:42:cf:af:ad:94:af:63:e6:7a:85:5b:99:
78:13:e6:e5:a3:ec:90:09:60:21:ae:c9:ca:cd:3e:
a2:32:7e:2d:8f:85:3c:85:bb:c2:94:dc:b8:ce:1f:
2e:f8:e2:6c:8a:70:9c:4b:64:9b:66:87:14:9c:8e:
3a:9e:7f:06:49:a7:84:42:28:57:49:29:8e:01:12:
39:86:1c:87:64:f6:2a:be:8e:4d:5f:dc:72:50:57:
30:46:4d:22:df:52:2c:bd:29:01:da:1f:23:dd:96:
31:8f:5a:62:ac:0c:85:76:4a:d9:62:b9:ea:7d:ff:
89:10:9f:46:2a:2d:02:9a:00:ad:5d:aa:fd:33:0e:
67:c6:e6:5e:6e:a7:51:fb:86:1a:02:10:7d:cd:dd:
de:6b:f8:30:5e:a3:fc:6c:77:03:7f:b3:f6:08:d1:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:B9:B0:B1:0B:43:5E:E4:35:25:4F:0D:19:87:EA:BB:8A:B6:02
X509v3 Authority Key Identifier:
keyid:58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0f:f1:a8:ae:81:13:af:49:2f:a3:28:8f:e5:11:83:bf:65:
13:20:25:8c:05:9f:aa:b9:01:3a:cb:b6:a8:8c:c9:12:0b:19:
81:75:31:94:bc:2d:7c:cb:0e:af:14:68:d9:33:c0:82:59:74:
65:15:9b:44:f6:ba:30:55:e1:a3:79:9a:03:4c:7f:52:c7:dd:
8b:9a:e2:f9:c6:eb:72:93:c3:28:35:42:71:e1:63:22:65:7d:
4a:57:60:0e:e7:c5:73:95:20:64:3d:9f:00:38:24:72:7a:e2:
d8:16:df:2b:bb:c3:2d:9d:00:44:0f:9e:cb:ed:38:32:58:05:
85:55:00:4b:80:ed:c9:67:62:f8:4b:08:c5:8b:36:cf:6b:e4:
55:67:36:75:e5:a5:93:5d:7e:3e:0a:71:d8:8a:69:e3:8d:b5:
f5:0c:6c:b3:62:1e:c7:57:8a:32:a0:28:a7:33:10:35:38:e7:
21:15:3f:16:25:8f:5a:2b:3e:4d:32:d7:95:2b:36:2f:bf:b3:
c5:81:73:bf:f3:57:ce:ea:bc:77:8c:b0:20:1b:e2:92:a6:0f:
b9:fa:05:89:1a:4e:ad:5b:9b:a2:78:b6:02:28:68:d2:8f:22:
3b:3c:5d:d6:7a:db:13:32:8b:fd:e5:32:83:29:fe:92:1d:a5:
7c:04:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:15 2026 by rpki-client