Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: Mofb6we38VL13nU+3XYLM/K5cBrBnVfbQ0CmEoxdK3o=
Subject key identifier: FE:04:DD:11:D9:9D:8F:05:56:6B:8E:A5:30:32:D9:28:AE:44:82:BA
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019E1ED9BCA3D6B4B8DA8DD37F3FC1ED0F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 0470
Signing time: Wed 13 May 2026 01:00:46 +0000
Manifest this update: Wed 13 May 2026 01:00:46 +0000
Manifest next update: Thu 14 May 2026 01:00:46 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: moslFrKCEovNH6Qvf3LddUFrbSQvgz3TQIdvwB7ngZo=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:bc:a3:d6:b4:b8:da:8d:d3:7f:3f:c1:ed:0f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: May 13 01:00:46 2026 GMT
Not After : May 14 01:00:46 2026 GMT
Subject: CN=fe04dd11d99d8f05566b8ea53032d928ae4482ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:14:4f:36:69:be:50:50:77:e7:35:4b:aa:
44:55:8e:82:b7:e4:09:73:12:b1:8c:8a:c3:f1:5e:
d2:dc:c4:bc:b3:9b:c7:84:57:b1:ac:c3:34:3a:db:
1a:85:2f:2e:62:83:c3:4a:bb:45:d5:b5:ba:31:b4:
db:aa:5a:03:ed:4d:d0:38:7d:9a:93:c5:9b:e2:4b:
e7:37:a0:e1:c7:c1:ab:8f:c3:6b:bf:4a:dc:b2:7e:
60:7d:5d:45:ef:f4:3d:77:86:dd:40:ed:3c:54:0a:
12:45:4a:1f:bc:90:05:a7:d3:ea:b9:c4:ab:fd:a7:
12:2a:ee:61:d8:9b:6d:6c:4d:1a:8f:d5:29:b2:75:
03:a3:2b:66:c7:f5:90:fd:d0:8b:97:b0:78:37:d3:
01:15:04:1a:02:b4:c7:f0:3f:f6:f9:e1:ce:65:84:
44:d0:8e:35:78:d7:86:1a:cd:7d:93:7a:f9:9c:43:
cf:22:f0:86:46:33:59:2f:69:97:c0:e4:e3:de:96:
7e:6c:f2:a6:75:64:86:6f:5a:d6:34:89:1e:0f:be:
b7:0e:eb:9c:8a:84:77:d0:7e:a5:2d:15:82:24:84:
e2:e8:da:93:ef:0d:9a:48:ee:3b:e8:cc:33:b2:4b:
16:2d:e2:af:79:5e:79:77:63:5b:d0:f9:dd:86:2f:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:04:DD:11:D9:9D:8F:05:56:6B:8E:A5:30:32:D9:28:AE:44:82:BA
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b8:9d:02:8d:20:1c:50:a8:fd:c9:d5:21:8f:9a:b4:e5:c2:
ec:ed:92:c1:7a:c9:9b:f6:f8:c3:ce:fc:a4:32:1c:5a:f3:02:
a9:a7:8c:35:6c:5a:e5:6b:11:05:71:60:57:3c:d2:33:46:42:
1f:c1:e4:1b:00:37:5b:f4:6e:a5:07:a2:95:d9:ee:d9:4e:38:
1d:89:6a:6c:13:14:3b:6d:d1:da:ed:80:00:64:e1:9f:e4:f9:
7b:10:05:d9:df:71:7c:f5:82:b5:26:a5:35:3f:a3:16:52:82:
66:54:1a:80:11:c1:27:8a:e0:38:29:72:c2:17:71:a6:7b:38:
ed:5c:67:01:ed:a5:a0:f6:98:25:5f:e0:17:12:b3:89:a0:58:
b8:37:ab:08:58:40:ba:18:8f:4b:12:18:a7:fd:7b:eb:f4:ed:
d5:d5:5d:db:f9:e3:15:9f:27:19:3c:57:99:23:76:2f:0c:20:
e5:4e:07:0a:df:fe:8b:a6:33:76:19:62:b7:dc:4c:dc:e6:72:
1b:31:d5:78:62:6a:a1:c0:3c:45:50:1e:a6:00:94:7e:f4:37:
e7:bf:c5:58:3f:b2:be:2f:09:56:d1:4a:2e:50:02:e5:5a:92:
c0:9f:d7:01:4e:23:db:ea:c8:47:e6:87:30:c1:9a:e4:6e:9c:
23:94:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:55 2026 by rpki-client