Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: P8symBJ+9Yzu0bFc1SxnlWBK/L4dbeVtPSeomyR9wZE=
Subject key identifier: F2:32:91:97:E1:31:86:71:CF:A9:3B:83:5C:2F:16:93:A5:5C:F3:C5
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019D2D3CEBEABCE3F480EACFF3C516B624B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0997
Signing time: Fri 27 Mar 2026 03:01:00 +0000
Manifest this update: Fri 27 Mar 2026 03:01:00 +0000
Manifest next update: Sat 28 Mar 2026 03:01:00 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: NTJQy0IPa522Vlpuz2FB/A1jWNnq7dpGrFrohIxeItw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3c:eb:ea:bc:e3:f4:80:ea:cf:f3:c5:16:b6:24:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Mar 27 03:01:00 2026 GMT
Not After : Mar 28 03:01:00 2026 GMT
Subject: CN=f2329197e1318671cfa93b835c2f1693a55cf3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:9b:04:2b:3d:2f:e9:a1:04:ff:1c:46:7e:
53:03:a2:5a:91:64:81:5c:1e:70:26:9e:f4:9f:f7:
74:35:13:78:f8:c2:9b:10:af:2a:02:36:ff:43:c6:
b6:97:df:95:3a:d5:ee:43:38:7b:5b:25:52:12:06:
56:17:23:4b:f0:94:1e:5d:aa:b7:8c:7f:07:bd:1e:
d6:69:58:5d:a9:95:7f:5d:2a:96:27:50:97:3e:4c:
1f:09:52:b7:c3:a8:cd:03:21:47:c3:cb:ab:32:52:
02:9e:d0:bf:b2:1b:20:60:2b:e1:a4:67:e5:a2:cf:
e9:bb:02:64:02:9d:a2:65:e5:0e:be:4b:ec:3f:77:
5a:59:a7:a2:eb:c5:12:a2:18:d2:e4:a4:b1:13:eb:
c5:7d:6d:77:42:8a:c7:9f:c3:d8:ce:ab:6c:1e:28:
c2:4f:b5:58:ea:8b:33:91:00:9a:ae:a6:be:d5:eb:
e1:09:d9:c3:20:c7:fb:ce:00:b4:f9:1e:24:2a:6a:
48:bb:35:ed:6a:e1:4f:9b:bf:56:10:31:5d:90:6a:
a4:86:e3:78:0f:a9:ef:77:61:f6:c1:6c:9c:66:e9:
25:28:ef:e5:33:f5:89:06:04:e4:af:96:74:b3:9b:
65:64:87:41:cd:fd:2c:0c:16:b8:42:2b:6b:c5:70:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:32:91:97:E1:31:86:71:CF:A9:3B:83:5C:2F:16:93:A5:5C:F3:C5
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cf:de:82:31:e2:05:00:67:e6:47:7d:4a:f7:e5:bc:6f:27:
10:55:6e:bd:03:05:31:3c:55:90:9b:54:8e:3d:23:57:52:68:
95:55:dd:e2:eb:63:7a:e1:c5:76:a4:b7:8d:95:a0:18:74:8f:
d0:3b:c5:b6:4b:30:1b:c5:8e:7b:2f:5e:a1:33:1f:af:ce:9b:
d1:20:6c:7a:91:7c:b5:e7:3f:45:a3:c4:29:33:1c:1d:5a:96:
60:8d:d7:5c:19:a0:fc:aa:57:bb:e8:0a:2d:e8:03:96:56:6a:
c7:84:7d:05:22:f2:ae:a3:09:ed:db:d5:2f:2b:af:d7:c4:0b:
be:91:28:e4:96:64:e5:cb:d9:c3:ef:62:61:cf:37:49:03:29:
c0:ea:73:ce:09:a1:d7:b6:e1:ec:a8:70:65:75:94:00:a1:44:
cc:bb:2c:62:3c:36:03:9a:a5:fb:27:a8:0c:86:4f:5f:95:fd:
ef:68:66:15:e4:c8:6e:67:77:aa:2e:a9:8d:71:2a:0f:a0:df:
e0:c2:3f:b6:53:2c:2e:47:5d:50:2c:23:4b:f4:1d:90:ae:88:
f4:4e:2d:9c:56:52:41:12:85:73:9e:f5:1f:c2:12:62:45:8e:
06:e5:df:29:73:65:2e:d5:49:e7:b9:08:d5:e8:67:92:4e:19:
67:7d:39:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:11:26 2026 by rpki-client