Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: nzxqa2JOzhs6nDCnx+WmFk/Actd9tkoIZG4+6fHxCsg=
Subject key identifier: 09:F8:E3:0A:03:D2:70:8F:E9:BD:53:61:22:C2:80:C0:D9:64:09:88
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 019D2704DA83E3DE41A6566D61CC30A76C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: Sq8500KhQRP1l10Z1msF9d2ysQw.roa (hash: ReVbiMOhRmv6RCWB0b28trkVO+ZZwLBYu/yBa/+30Dw=)
2: V6JPaEYI_A430h4XiTPHTg3pH9Q.roa (hash: cJrgnz2SqNu03F38EzPAz9CCWIpMgD1Jz/dKPwQAOAg=)
3: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: IEfDHC0woqIDq6bAEY0i7oZpmjk/gBwCzpJ2RdnIUGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:da:83:e3:de:41:a6:56:6d:61:cc:30:a7:6c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=09f8e30a03d2708fe9bd536122c280c0d9640988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:93:b0:14:0f:1e:3f:c6:26:c7:35:5e:47:
e6:eb:58:e2:5f:ea:5f:06:c3:58:f4:f2:f9:53:9d:
63:25:39:0a:25:8b:a6:83:83:9a:31:fa:cd:46:24:
d8:78:11:a1:d1:4e:64:ff:18:26:bc:26:83:29:41:
87:9b:b4:53:0b:ff:ac:bd:7a:64:f4:5b:26:65:e4:
bd:7b:3a:00:f0:09:6b:f7:c6:72:a9:c3:fb:2f:57:
8d:ec:b4:03:a5:9d:45:d5:f4:a2:fe:36:38:d5:65:
59:ac:7f:0e:01:b9:f8:17:73:6f:94:67:bf:18:fa:
9b:7f:f0:ac:45:4b:cd:df:10:23:7c:5b:51:5c:2a:
82:05:cd:43:c1:68:21:fe:de:6d:d2:da:29:b9:fa:
c0:83:ca:fb:97:35:6d:51:73:f5:62:89:23:f7:16:
7f:22:26:f1:c8:f3:88:66:8d:be:56:f9:23:f7:6d:
e2:6a:76:68:da:a1:3a:64:66:2c:b5:9e:5a:b2:e0:
69:27:8f:4a:c6:93:c3:e7:2e:58:94:83:bb:82:23:
78:9d:83:f9:2d:b3:b4:1a:ba:9b:ef:83:66:fb:f8:
5d:2a:d8:ce:8e:b0:37:bd:fe:d6:ac:ea:d7:75:78:
ad:99:25:11:0f:ab:23:90:0d:26:c2:51:fd:78:ab:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:E3:0A:03:D2:70:8F:E9:BD:53:61:22:C2:80:C0:D9:64:09:88
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:72:4a:51:99:0f:f5:67:3a:47:ae:d0:70:3e:17:ec:ed:8b:
11:26:02:69:ab:41:1a:39:c0:bc:06:79:da:fa:a7:2e:7b:ae:
e1:1c:6d:80:da:5b:a0:63:ba:3a:d4:3c:22:61:0d:5a:75:5c:
d3:9e:36:ff:84:62:78:ee:b9:7c:72:9c:f1:57:48:e2:db:d6:
89:e3:40:34:9b:0d:f5:bb:27:be:13:25:8b:d7:04:26:4d:87:
ae:d9:17:f5:6c:75:e9:bf:d4:d4:f2:87:ed:b0:a3:c0:b4:2b:
c7:02:48:2c:af:be:c9:b0:79:91:86:16:61:8d:30:fe:f9:c9:
b6:d9:d0:7d:60:89:87:85:70:cf:5a:b7:f3:fa:4f:6b:5b:1e:
04:19:52:09:63:ca:24:e5:b2:ca:34:3e:39:83:a0:4b:ef:b8:
ea:6a:94:e0:a6:11:88:b4:06:05:4d:a9:64:c4:02:86:1c:e9:
40:b6:4d:52:c6:65:27:cd:57:45:f6:49:cc:e2:d4:5f:36:7b:
88:62:06:dd:f7:8e:c4:6f:0f:fb:6b:28:24:f2:4a:03:2f:3a:
86:e4:0e:67:4a:9e:05:58:25:78:f0:d5:22:fb:a6:2c:8e:b8:
6b:0b:b2:90:53:46:4f:eb:d6:be:41:d3:70:b6:0d:6b:9f:a3:
ea:e0:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:32 2026 by rpki-client