Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: 81JU1sK3eDVpweHh1cBHk2NzJzxVgqN6d+byKrEYAMM=
Subject key identifier: F9:17:FF:E9:A8:62:5A:F5:52:54:C9:97:B3:1D:CD:47:97:1F:C8:D9
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019E2091DA46CA19E71D3A451AC74C46C661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0A15
Signing time: Wed 13 May 2026 09:01:29 +0000
Manifest this update: Wed 13 May 2026 09:01:29 +0000
Manifest next update: Thu 14 May 2026 09:01:29 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: vzm0+0wjzIMn6/zCNptXJMcmC2igPpFGoSe2fh7OM24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:da:46:ca:19:e7:1d:3a:45:1a:c7:4c:46:c6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: May 13 09:01:29 2026 GMT
Not After : May 14 09:01:29 2026 GMT
Subject: CN=f917ffe9a8625af55254c997b31dcd47971fc8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:59:f3:0e:87:de:59:07:71:05:32:91:19:
f0:5c:e0:54:8c:a8:f6:de:74:8a:ee:1f:4b:a9:63:
78:a2:48:e2:3f:4c:7f:62:0b:f0:ba:f8:c4:86:e3:
e2:6a:ff:b7:58:a7:b4:0d:da:27:24:4e:fd:32:90:
3a:ba:57:8f:7b:e8:ed:bd:1e:d8:6c:c4:cd:29:fa:
c9:52:8a:d2:f7:5c:ae:42:55:27:ea:b3:84:b5:09:
de:6b:60:25:da:96:5a:4a:1c:36:ba:91:d8:61:59:
2c:2d:3f:0a:a6:c6:05:22:e3:95:56:36:7d:ae:bc:
89:84:76:85:63:d8:87:94:70:9b:8b:29:88:cb:7e:
d7:cd:b0:83:07:93:70:79:5a:40:ae:0a:70:1c:ae:
61:29:bf:ba:b6:d5:c1:71:b8:5f:c1:ac:7c:58:df:
65:9c:f6:23:e1:6d:da:d4:c0:7f:ad:56:be:18:b9:
3c:22:3a:ee:be:d0:82:f4:3a:a2:fd:06:2a:0b:22:
0d:54:16:55:e2:84:7d:3a:17:18:3b:95:15:f8:65:
04:b3:78:db:9a:a2:58:e0:15:ce:c8:c0:06:68:67:
91:d8:de:60:c0:0e:d1:22:1d:5f:78:be:20:f2:f1:
30:48:90:90:5a:8a:c7:7b:d1:6d:3a:f1:08:94:2e:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:FF:E9:A8:62:5A:F5:52:54:C9:97:B3:1D:CD:47:97:1F:C8:D9
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6f:69:97:4c:79:dc:5c:7f:e2:23:8b:74:ba:45:ad:b1:74:
23:27:fa:a3:d8:93:7a:18:06:0e:88:c8:8f:ec:fa:f5:d6:ed:
ea:87:37:b3:c5:f1:bf:8e:a4:46:2e:4a:a6:c6:5c:f6:ff:f4:
5b:2a:d5:c9:24:b0:11:63:dd:55:99:45:00:cf:2f:7c:4f:fa:
ea:f3:4f:ca:e9:e9:96:11:50:7c:9d:20:6c:bb:1f:39:cd:85:
ef:22:28:1f:78:eb:30:6a:3e:a7:a4:ef:44:2f:27:79:81:4a:
1f:35:64:0c:6d:78:36:43:41:60:6d:fe:db:86:9d:27:f1:0d:
55:20:2e:84:48:ec:90:04:6e:3d:26:c8:aa:27:9d:7f:51:8c:
23:fb:7e:52:1e:39:ed:0c:a8:73:30:af:90:95:00:01:c0:9f:
e8:c6:78:56:f0:a5:c3:a5:cb:76:ab:f7:f1:9b:78:ae:6b:2e:
ae:61:59:f2:7d:80:26:11:0e:9e:76:93:8a:21:7b:72:c3:fa:
de:69:c3:d8:e3:00:64:da:d9:92:27:24:8d:e8:42:bd:94:b6:
78:55:92:45:fc:f2:83:5d:0a:08:10:ae:b3:97:3c:a6:03:a5:
97:e6:75:e0:01:4d:4b:bb:1c:01:75:ec:0f:29:d6:f5:7f:15:
01:ff:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:47:54 2026 by rpki-client