Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier: ad3VXnqsvgSJV6x0nbR/Sah/+w8vg6dlhGHAy/NGEXY=
Subject key identifier: 06:85:FF:9E:63:0B:5F:63:A1:E7:9C:47:74:30:CE:DE:D8:08:D5:5F
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial: 019D27E021B2434957E7A6452F80D7D1C32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number: 1249
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: xtCoeRo/Mm1YU08DCDWKiyEqEwMqa5sA7QFbB9A2tb0=)
2: uSTOG5hPdGAJ8tKDlqGT_j-Wz90.roa (hash: K1kjwbswlvDhq+X0b+wPq3xckmUou+CcfH9LmHS/rpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:21:b2:43:49:57:e7:a6:45:2f:80:d7:d1:c3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=0685ff9e630b5f63a1e79c477430ceded808d55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:07:a8:18:7a:34:ca:ab:af:3b:b3:ea:62:
32:1b:22:e4:a2:25:19:c3:dd:91:ad:d2:7a:bd:2f:
4e:45:88:ac:db:e6:f4:9e:8c:98:1b:75:7c:fd:77:
06:82:01:06:e0:c4:d3:63:bc:17:bd:50:6c:f6:4b:
b4:33:d6:85:2c:d2:fe:96:3b:7b:71:3a:91:26:d5:
e9:8b:5a:79:83:02:6c:ae:e3:55:34:3d:04:f4:db:
35:62:80:0b:41:8d:f0:e3:68:b0:e6:a2:cc:75:53:
b3:f3:b9:68:f1:38:1c:87:e5:9c:92:a9:fc:a5:11:
58:76:87:69:b8:b9:8d:a5:0d:24:3e:b6:ae:0e:f7:
a9:3b:2a:7a:2b:56:8a:d8:89:d9:57:96:cd:b0:dc:
be:69:ae:1c:a0:b3:80:b0:e6:32:2f:93:97:82:33:
95:8c:a0:1d:89:97:eb:8d:0e:a2:db:25:69:d8:a3:
58:20:1c:ec:16:d0:7d:9f:40:9b:ad:99:f5:84:8a:
8f:2c:a6:76:d9:3f:ce:db:21:ad:4f:d7:ed:07:78:
74:b2:1c:c7:ff:f1:dc:fc:93:d9:71:ba:8f:f2:40:
12:38:5a:19:36:4f:c5:e7:aa:fa:89:74:1a:77:a9:
75:22:e0:91:22:a8:b0:72:a1:fc:89:c6:fa:bb:96:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:FF:9E:63:0B:5F:63:A1:E7:9C:47:74:30:CE:DE:D8:08:D5:5F
X509v3 Authority Key Identifier:
keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:be:ed:9a:d6:1f:09:20:cc:85:06:85:5e:eb:dc:e5:97:fb:
9b:d7:7f:0f:ac:a9:e9:3e:83:38:41:fd:63:1b:cd:43:44:4a:
c2:14:12:cc:b7:8b:f6:03:34:31:97:f9:01:93:3f:14:2a:00:
f3:bf:9f:36:ed:c5:24:ed:71:f0:f5:0e:09:2a:4e:86:1e:2b:
67:b0:b9:5e:cf:6e:54:02:1b:22:32:ba:9b:40:9e:61:69:39:
3c:27:8d:19:9a:cd:dc:cd:ff:47:7d:69:88:b6:72:ca:b0:d5:
6d:e1:97:f0:8f:b5:bc:ed:c4:f7:94:f1:ba:f9:57:bd:e4:3f:
81:ee:31:17:46:de:fa:6b:f7:52:4e:fb:ce:8b:3f:ff:f0:99:
70:3c:fc:1b:6b:c4:9e:f5:56:9f:7a:31:30:b9:23:43:1b:e9:
1c:12:ac:34:30:0b:54:cf:b8:84:ad:16:79:fc:eb:e3:bc:4c:
85:3e:ae:e2:4e:f6:2e:c1:f3:56:d3:07:35:20:a6:a5:0c:fb:
43:be:15:1e:da:f2:24:a9:1a:27:1c:85:80:fa:9d:86:90:0e:
66:73:b0:4a:62:eb:dd:d9:a0:3b:4f:d5:2a:bd:7e:97:68:86:
55:52:91:f0:e8:9e:6f:bc:3c:ec:fb:38:4c:72:8d:00:f6:ff:
8d:0a:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:53 2026 by rpki-client