Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: 1xYdVd1K2EcFIT680ffM6X1kkqpDwSZvWHoIrXTRS0s=
Subject key identifier: 5F:05:EC:75:ED:CD:7A:09:F8:EC:E3:56:D5:97:B1:28:FF:62:69:14
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019D27E008FE7E190D3B76D8EC62A1EAF8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 1205
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: tKZ4AehWK6MhR5/R2sysS8A704eEwXVxY3agitdPuF8=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:08:fe:7e:19:0d:3b:76:d8:ec:62:a1:ea:f8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=5f05ec75edcd7a09f8ece356d597b128ff626914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:eb:af:48:e5:3d:3f:11:49:ea:c9:67:11:
0c:23:41:5f:7f:46:4c:85:a9:58:07:d7:88:0c:09:
19:7c:be:5e:8a:58:cb:2a:68:a1:56:1f:8a:36:80:
3a:3c:ac:47:24:59:99:5c:4e:32:d2:d2:1e:dc:f5:
a4:a9:99:1a:7f:f8:e2:27:41:1f:ac:90:a4:01:13:
b6:34:b8:a1:10:66:4b:3a:88:85:1c:cc:bb:88:08:
69:53:94:81:49:86:79:af:f3:0a:7f:10:19:08:96:
99:94:7d:3e:13:73:fa:00:1d:6f:0a:f5:a7:67:7e:
32:7e:96:f0:30:b5:b6:bb:ab:c2:2a:ed:5e:9c:1e:
5e:74:3e:23:2b:ff:ce:ab:0b:0b:56:94:e9:dd:92:
dc:7a:c6:63:f0:de:41:44:03:b6:40:79:b7:38:b0:
86:38:a1:f4:63:25:4e:1c:f3:40:27:64:54:89:a8:
c3:5c:d8:20:33:5e:5a:92:66:53:02:63:ea:0d:48:
73:7d:3b:32:1e:e5:a2:3e:bd:04:73:4b:d9:e3:c8:
e2:70:23:d9:e8:23:22:56:95:8c:50:5f:81:36:fa:
1a:c2:5f:6a:c4:4d:2f:33:5a:63:dd:4e:ab:e4:42:
8c:4e:b4:f6:d9:37:02:5f:14:ba:e1:c9:b5:42:a8:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:EC:75:ED:CD:7A:09:F8:EC:E3:56:D5:97:B1:28:FF:62:69:14
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a2:a7:c7:7a:f9:e0:37:a9:cc:e2:86:77:34:1c:ba:c1:d2:
69:a8:f6:ee:72:08:ff:3a:6d:8a:48:bd:34:c5:2b:f4:bd:49:
e1:68:7f:56:45:5b:5b:f7:6a:a4:00:40:35:5e:eb:67:26:06:
7c:fa:a8:f8:54:75:86:dd:2c:9f:48:34:ff:fc:58:7c:29:60:
3a:44:f1:17:e1:09:79:b0:2b:c4:b2:08:31:a0:ab:e5:30:ff:
6b:37:2e:d9:36:73:71:50:21:63:3a:4a:56:0f:fc:37:23:60:
31:75:43:e5:2c:32:5b:b1:ce:bb:84:9e:98:3f:aa:36:d1:84:
df:7f:8f:77:c5:68:64:c4:4f:08:30:05:ae:e4:d5:1e:90:a1:
d0:72:5c:1f:f1:87:e8:6b:48:56:5f:be:e2:7e:49:49:f8:06:
5a:cf:87:87:ca:8d:9d:2b:4f:aa:43:09:bd:9c:e9:d7:f0:7d:
77:d5:48:7a:5d:f3:6f:8c:dd:79:2f:15:9e:6b:c2:4a:8e:e3:
80:2d:91:4a:3c:c4:46:db:ca:a2:3b:8e:df:bd:95:d5:4f:43:
ac:e1:02:1e:85:dc:64:f1:05:b5:b8:ec:59:38:ef:e3:95:e2:
f8:00:f8:cf:0e:af:03:0e:df:1b:f6:4d:3d:de:35:85:f7:2b:
b2:c9:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:53 2026 by rpki-client