Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
File: WA7nOx5qibTvUVvGfcmBcpak2Ks.mft (raw, json)
Hash identifier: nC8CL9KSt/3UJDx344/RQxfwumi6kGNcFJsqRgqts3Q=
Subject key identifier: 9D:9F:E1:EB:02:2C:DB:6C:EE:44:D6:6F:85:A7:11:5C:15:81:2C:4C
Authority key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
Certificate issuer: /CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Certificate serial: 019D2A3C4EF5FB970E8833EEF568A134B0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
Manifest number: B6
Signing time: Thu 26 Mar 2026 13:01:28 +0000
Manifest this update: Thu 26 Mar 2026 13:01:28 +0000
Manifest next update: Fri 27 Mar 2026 13:01:28 +0000
Files and hashes: 1: 1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa (hash: avI9enOgnl+yynJNmVDI/bPieULR/2YL8z47OvnAoGM=)
2: UA7MZYc-czHZyAm_jTZP6uIdkoc.roa (hash: y/+93xNILFZI2eCu1XR1bZH6lI5t/EYB1r4ioe1Vzp8=)
3: WA7nOx5qibTvUVvGfcmBcpak2Ks.crl (hash: vxP+h/FC4VrW4GvLMS4+kgLX4wk3lozNnwZbVixWhas=)
4: mJY88gnCtE0_lJEMctYDc3XreZc.roa (hash: dILiJ64ptgJlU6ZR8SsCAYYl2fBgysDyRuWNcNNxdXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:4e:f5:fb:97:0e:88:33:ee:f5:68:a1:34:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Validity
Not Before: Mar 26 13:01:28 2026 GMT
Not After : Mar 27 13:01:28 2026 GMT
Subject: CN=9d9fe1eb022cdb6cee44d66f85a7115c15812c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:22:3d:15:cd:f7:18:97:05:18:82:fc:b1:
52:e6:fe:73:e9:f3:f5:0d:5f:bb:2d:4c:d2:7c:e3:
cf:8a:3b:73:de:7d:2d:77:1f:5c:c3:2d:26:66:39:
db:74:bb:75:f8:0d:06:3e:89:9f:12:92:d8:92:8c:
1f:f5:f8:f3:d4:6e:50:c3:42:d6:6b:7e:af:b7:53:
21:09:03:ed:76:c5:d2:cb:48:77:2d:d2:4c:70:41:
9f:51:ca:fe:85:4b:73:0c:48:67:92:47:9d:75:9e:
94:9f:9f:3e:92:6e:3d:b8:6d:8f:8a:8f:ac:42:39:
f1:80:6f:40:1f:f0:63:a3:cd:f7:be:06:3f:d6:b9:
60:71:49:bf:9d:79:c7:23:a0:29:b6:31:79:2a:c4:
61:2c:80:5a:c1:62:2b:53:65:1f:ec:50:47:66:c9:
7b:0c:f6:14:49:d1:11:e2:71:2b:d4:37:56:3d:5c:
da:12:0d:34:17:06:7f:87:7e:ce:12:c5:dc:6d:34:
74:c7:0f:df:8e:3a:b8:48:98:1a:6f:01:90:55:82:
6e:7c:fc:61:55:78:a3:73:e3:6d:0c:dd:72:ac:17:
e7:d5:8c:18:bf:f6:3f:ee:d5:bc:bc:95:11:ed:12:
c2:3f:36:84:67:5d:cc:85:db:a3:58:81:fc:3a:b0:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9F:E1:EB:02:2C:DB:6C:EE:44:D6:6F:85:A7:11:5C:15:81:2C:4C
X509v3 Authority Key Identifier:
keyid:58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cb:6b:f9:4a:29:bb:08:4a:1c:2a:20:1d:dc:ce:60:d5:64:
74:ae:34:6c:d4:de:b7:43:1c:ad:7f:46:cc:7b:d4:7f:4d:c8:
88:52:1b:05:53:6b:05:5e:da:71:91:ff:7e:9e:c2:f5:96:89:
7b:ac:67:63:fe:56:f1:1e:b4:8d:fa:fc:17:68:5e:05:17:88:
30:c9:14:d5:6b:8c:cd:42:b2:aa:8c:67:d3:28:08:22:27:1c:
aa:89:36:3b:34:c3:a9:61:26:3b:a5:e4:73:cd:5e:3d:ac:eb:
fc:e0:f3:cb:5e:b3:16:74:03:0c:8b:10:64:78:7d:24:18:cc:
79:18:18:e8:9c:01:b4:77:22:3d:3a:d0:95:af:68:fa:f4:3b:
13:b9:4b:56:ce:76:4f:45:62:4b:99:38:a5:11:75:4f:4e:1b:
3e:ea:53:0d:d0:81:db:6a:b2:33:8e:6a:b9:78:5b:aa:8f:2d:
20:40:24:c8:75:01:a5:ad:c9:8b:4f:7c:44:88:c5:13:a9:33:
bf:c6:f9:b9:81:ef:82:ba:9d:85:c8:5e:dd:40:0c:ba:3f:8a:
56:77:8d:ba:74:94:37:c2:5e:02:71:15:e0:23:2b:54:fc:fd:
bb:40:e4:8e:48:3e:91:ab:7a:9c:42:d5:7d:be:95:9d:b7:03:
cf:de:01:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:14 2026 by rpki-client