
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File: WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier: ZW72bvjHyiDKo6wJObiB0Qi2la1whXwBiGa88oRu2Lo=
Subject key identifier: 7A:C8:2E:A0:34:42:65:DF:96:80:4A:94:7D:6B:89:EA:EA:B5:C9:5F
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer: /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial: 019D28BBBC80B7D01C111CD5687F9EA26F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:25 +0000
Manifest this update: Thu 26 Mar 2026 06:01:25 +0000
Manifest next update: Fri 27 Mar 2026 06:01:25 +0000
Files and hashes: 1: OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa (hash: iXyMvC2zcRw1kQk9NMVDBWBfZ7cLWCvnkd2tBslhHyk=)
2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: A9b80/QzfLF0Gd6XnV2A/9jiCK4EiyNJ2ZPFZs/leV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:bc:80:b7:d0:1c:11:1c:d5:68:7f:9e:a2:6f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Validity
Not Before: Mar 26 06:01:25 2026 GMT
Not After : Mar 27 06:01:25 2026 GMT
Subject: CN=7ac82ea0344265df96804a947d6b89eaeab5c95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:26:4d:78:25:08:8c:c7:a2:3f:dd:60:45:
24:c3:e5:45:d4:0c:26:de:c0:5b:c7:45:8b:70:51:
85:fd:34:d1:f9:7d:20:8c:a9:97:c9:eb:6b:3a:b5:
73:f2:59:de:64:39:99:58:13:87:8e:97:75:ef:8a:
c9:48:24:49:09:52:31:f9:63:4c:5b:76:27:e8:58:
c5:fb:dd:06:c1:32:ee:29:e4:fa:a7:32:d5:3c:1f:
b8:ff:b3:13:2f:b8:af:b0:78:cb:7d:c0:a5:a8:a9:
19:2c:86:9c:f8:71:bf:f8:82:97:09:da:c1:98:b8:
de:66:45:93:f2:48:5b:c4:ce:84:9f:d0:db:50:e6:
a6:43:ab:dd:38:ca:1b:b6:3f:2c:89:50:19:0b:69:
ff:9f:73:30:a9:46:09:4c:3b:08:58:e1:fe:f4:16:
30:82:da:20:3f:e3:6d:50:f3:a5:63:3d:1e:6b:c3:
69:9a:7d:95:d2:9f:6f:5c:4c:33:65:52:12:78:08:
22:22:b8:8c:3c:91:4a:94:48:ed:ae:a4:7a:13:e3:
64:95:5d:39:17:9b:7c:82:16:54:65:38:87:26:8d:
2a:b4:73:21:eb:c2:9f:49:a0:ea:e8:58:20:79:8d:
03:77:e5:a4:87:5b:40:27:cc:6d:bc:07:4d:a7:44:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C8:2E:A0:34:42:65:DF:96:80:4A:94:7D:6B:89:EA:EA:B5:C9:5F
X509v3 Authority Key Identifier:
keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:92:00:83:dc:c5:25:44:e0:53:01:fe:69:fe:bb:8a:cb:f2:
be:b0:e5:5e:8c:13:fd:b6:35:54:bb:27:a5:a9:f6:d6:2a:7a:
ea:d9:97:a4:3c:df:d9:09:97:a8:56:5f:81:ab:4d:2b:85:6f:
28:d8:9c:3e:93:e2:7a:91:21:e9:8e:d9:61:71:10:5f:1b:b0:
ca:8b:41:33:58:bf:db:ce:ce:ea:ac:a0:e1:b4:6e:2d:4a:4d:
e7:40:8c:a8:e9:d4:4d:8b:04:1e:c8:71:c5:e9:25:1d:17:6d:
3f:68:bc:53:8e:35:58:c7:ce:38:ad:0a:2b:3d:1a:a0:cb:50:
19:ae:9a:31:7c:4f:76:a8:3b:7a:7c:e7:3b:69:8e:07:5b:fd:
ea:21:7f:df:8e:28:dc:46:6a:db:71:fb:0f:58:61:f0:1c:4d:
0a:c6:b4:ad:14:68:64:ba:e0:a8:4f:bd:89:23:81:32:90:74:
ec:85:e4:59:32:92:3b:c3:fa:b2:db:b6:ef:de:2f:8b:b6:2e:
db:ad:01:00:36:e4:d1:d4:ea:69:fb:f3:8e:31:b3:82:1d:ed:
8f:44:d7:8e:70:54:b4:38:52:8c:6d:a3:6d:00:d5:0e:9a:02:
20:cd:68:ab:74:e1:41:62:e5:db:b0:c4:87:67:69:a7:f5:c8:
38:65:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:25 2026 by rpki-client