Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
File: WA7nOx5qibTvUVvGfcmBcpak2Ks.mft (raw, json)
Hash identifier: utB9WAQt5CnzOCnbklFZ5NZTykrx7Jgdueic+JlGKv4=
Subject key identifier: CB:09:BC:90:18:CE:C0:DB:C2:45:C6:2E:39:A1:51:88:92:9E:78:8C
Authority key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
Certificate issuer: /CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Certificate serial: 019D284DE4749E08606F61980E1330DE11D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
Manifest number: B5
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: 1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa (hash: avI9enOgnl+yynJNmVDI/bPieULR/2YL8z47OvnAoGM=)
2: UA7MZYc-czHZyAm_jTZP6uIdkoc.roa (hash: y/+93xNILFZI2eCu1XR1bZH6lI5t/EYB1r4ioe1Vzp8=)
3: WA7nOx5qibTvUVvGfcmBcpak2Ks.crl (hash: 8jbjo/hiYuqFh7dBlnKn2gJtxBTuIiNU61/E6hrarls=)
4: mJY88gnCtE0_lJEMctYDc3XreZc.roa (hash: dILiJ64ptgJlU6ZR8SsCAYYl2fBgysDyRuWNcNNxdXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e4:74:9e:08:60:6f:61:98:0e:13:30:de:11:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=cb09bc9018cec0dbc245c62e39a15188929e788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:ab:c3:9c:93:ee:4d:26:97:40:27:6c:0c:
aa:a0:f4:57:bb:f6:9c:18:35:aa:7d:d6:69:1e:eb:
77:d5:f0:38:b2:3d:76:1f:42:68:30:65:37:93:0e:
5f:90:71:03:e7:45:dc:eb:cc:59:ef:95:28:db:cf:
9c:9e:50:3e:8c:91:f1:e4:c7:ff:dc:8b:f5:27:f1:
0a:08:96:7d:61:1b:23:b8:54:71:cd:90:bf:32:1d:
e2:f0:c9:42:2d:aa:b6:de:3a:bb:61:40:58:09:b0:
3f:12:c2:3b:d0:dd:c6:5f:bc:5d:da:60:24:b6:51:
1f:18:29:fe:6c:35:fc:8d:9f:ee:dc:43:4e:f0:f7:
97:f4:50:93:b1:1d:9b:44:16:b2:e4:ad:36:0a:cb:
f4:83:42:33:ed:67:6c:d1:4a:0e:73:ae:9b:d0:bb:
e1:aa:17:94:07:25:bb:bb:37:dc:7c:9f:11:27:72:
c9:28:73:a7:b0:30:32:49:93:2e:5a:30:5a:1c:ab:
95:0e:73:02:43:bb:8a:74:2d:6a:df:67:8b:60:61:
ec:c4:68:34:b1:3a:5a:fb:74:b1:8a:8d:ad:00:3a:
5b:99:32:b1:ac:bc:d8:c1:49:29:8f:c3:2e:ab:82:
a2:3f:5b:be:f5:84:21:42:92:04:c9:7c:b7:27:db:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:BC:90:18:CE:C0:DB:C2:45:C6:2E:39:A1:51:88:92:9E:78:8C
X509v3 Authority Key Identifier:
keyid:58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:22:57:53:8d:1f:70:ad:95:47:0e:23:cc:fe:c0:bd:ec:49:
d0:d0:fc:da:bd:c7:42:59:bc:f1:ff:af:9a:82:3f:10:e4:62:
b9:52:59:0f:94:1e:61:f9:1a:c0:f6:a1:ca:83:b4:49:36:90:
13:9c:ef:ef:bd:9e:cc:a4:ae:fd:b3:1d:69:66:db:3d:0b:ae:
dc:c4:00:7f:7b:7c:5f:9c:ec:b1:43:e4:ca:3b:e4:5b:8d:0a:
69:64:88:ce:8c:c4:1f:9b:96:66:2b:b8:c9:a4:fe:c1:de:23:
63:98:9e:94:38:50:03:5d:ce:00:e2:27:8e:7f:fa:34:fc:c2:
cb:1f:b8:a1:45:da:83:fd:35:41:e7:f1:88:7c:d4:30:71:15:
59:71:20:6b:42:05:6b:59:ad:f4:14:f5:ce:95:cb:75:48:25:
9d:47:80:c2:ff:07:83:38:c3:9f:8e:62:54:98:76:d6:ab:f2:
44:b0:f4:74:03:c5:2c:96:09:bc:65:3b:41:ad:74:b3:b0:38:
2c:b5:9a:23:e5:07:42:05:0f:36:57:cd:5f:54:66:9f:dd:de:
db:24:a5:4c:af:67:7b:f4:79:d3:44:5e:89:e3:dd:24:06:32:
e1:94:69:8a:d9:7c:2b:f7:8a:60:aa:f0:23:81:fc:ae:03:43:
42:7c:2e:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTeR0nghgb2GYDhMw3hHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGVlNzNiMWU2YTg5YjRlZjUxNWJjNjdkYzk4MTcyOTZh
NGQ4YWIwHhcNMjYwMzI2MDQwMTI2WhcNMjYwMzI3MDQwMTI2WjAzMTEwLwYDVQQD
EyhjYjA5YmM5MDE4Y2VjMGRiYzI0NWM2MmUzOWExNTE4ODkyOWU3ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHirw5yT7k0ml0AnbAyqoPRXu/ac
GDWqfdZpHut31fA4sj12H0JoMGU3kw5fkHED50Xc68xZ75Uo28+cnlA+jJHx5Mf/
3Iv1J/EKCJZ9YRsjuFRxzZC/Mh3i8MlCLaq23jq7YUBYCbA/EsI70N3GX7xd2mAk
tlEfGCn+bDX8jZ/u3ENO8PeX9FCTsR2bRBay5K02Csv0g0Iz7Wds0UoOc66b0Lvh
qheUByW7uzfcfJ8RJ3LJKHOnsDAySZMuWjBaHKuVDnMCQ7uKdC1q32eLYGHsxGg0
sTpa+3Sxio2tADpbmTKxrLzYwUkpj8Muq4KiP1u+9YQhQpIEyXy3J9ux/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsJvJAYzsDbwkXGLjmhUYiSnniMMB8GA1UdIwQY
MBaAFFgO5zseaom071Fbxn3JgXKWpNirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0E3bk94NXFpYlR2VVZ2R2ZjbUJjcGFrMktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xNDRjMTgtOWU5ZS00ZTgxLTliYmIt
ZmE2YTE4NzViOTQ3LzEvV0E3bk94NXFpYlR2VVZ2R2ZjbUJjcGFrMktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xNDRjMTgtOWU5ZS00ZTgxLTliYmItZmE2YTE4NzViOTQ3
LzEvV0E3bk94NXFpYlR2VVZ2R2ZjbUJjcGFrMktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACJXU40f
cK2VRw4jzP7AvexJ0ND82r3HQlm88f+vmoI/EORiuVJZD5QeYfkawPahyoO0STaQ
E5zv772ezKSu/bMdaWbbPQuu3MQAf3t8X5zssUPkyjvkW40KaWSIzozEH5uWZiu4
yaT+wd4jY5ielDhQA13OAOInjn/6NPzCyx+4oUXag/01QefxiHzUMHEVWXEga0IF
a1mt9BT1zpXLdUglnUeAwv8HgzjDn45iVJh21qvyRLD0dAPFLJYJvGU7Qa10s7A4
LLWaI+UHQgUPNlfNX1Rmn93e2ySlTK9ne/R500ReiePdJAYy4ZRpitl8K/eKYKrw
I4H8rgNDQnwuQw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:31 2026 by rpki-client