Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: qzfgwZ9H0V18BqcgnmYlte+khM7TB9fV0CjYo67M1z0=
Subject key identifier: E4:28:A1:71:6E:56:76:02:DC:68:8D:A4:30:76:E7:20:69:68:1F:31
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 019D26CD41E1A7A13220C117BFC86FFADDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0FED
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: 59YcII7vwSrelszgVXfE1Zyv6ic.roa (hash: q6jTMI6TImBNKUCWPMApFyq9F6Fxj9YmbzWV3XM+69w=)
2: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: /fZrZSVnpMtGpDtIUhX0e3bZpjVWD2Anajz2iBwQNXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:41:e1:a7:a1:32:20:c1:17:bf:c8:6f:fa:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=e428a1716e567602dc688da43076e72069681f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:f7:b7:c7:65:0d:0e:73:52:7d:49:dd:cf:
bc:fe:eb:0c:68:ff:ff:71:19:90:cb:be:76:93:9e:
3b:a1:ce:2f:35:a3:16:eb:99:b9:e6:dd:10:61:d1:
e3:8f:7e:34:fd:f3:f1:95:2d:7f:da:2a:0e:29:a7:
f1:13:7e:d0:d2:2c:3e:ef:2e:d9:77:c8:62:5b:db:
94:3a:6a:14:59:6a:ba:1b:65:27:8a:9f:46:76:6f:
45:8e:29:7f:79:b0:cd:d5:c3:28:aa:14:ad:51:09:
70:7c:dc:cf:ab:0d:7d:ef:6b:10:84:3e:2e:06:2d:
2a:a0:0c:d2:21:13:76:80:30:27:ba:a6:4a:e9:79:
94:da:45:5d:cb:9a:12:38:8d:8e:2c:7b:82:80:b2:
da:1d:e4:a0:09:a0:e4:b0:d2:8b:c6:02:72:dd:b5:
7a:08:61:be:fc:7d:1c:f5:dc:ce:b9:df:07:e0:cc:
a2:09:42:08:e2:f5:d4:e7:bb:30:81:a6:b1:1e:6e:
a1:6d:d1:2b:89:bd:1d:94:a5:f1:3f:d6:e1:b6:b4:
3a:2b:06:57:c4:aa:16:49:58:30:e4:0e:7c:c6:1f:
89:5c:c0:dd:c1:49:55:f4:af:59:4d:49:19:24:eb:
08:1c:8f:6d:46:48:a2:24:81:65:18:34:88:ce:f6:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:28:A1:71:6E:56:76:02:DC:68:8D:A4:30:76:E7:20:69:68:1F:31
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:46:c6:02:aa:46:db:0a:3f:20:b0:b9:e1:7e:6a:74:56:
4d:08:47:c2:41:20:af:0c:94:3c:94:a3:cb:6e:a0:93:67:a1:
b0:f1:9b:f8:bd:18:8f:0e:05:83:d3:8c:85:02:d8:e2:87:e9:
dd:b6:f6:0d:2b:ab:81:14:19:0e:71:3a:71:e7:96:5f:57:ef:
7c:4e:ad:b5:3f:f4:37:8e:b3:20:99:08:66:65:91:95:04:36:
36:4a:cb:02:bd:9f:d8:41:45:a5:12:c8:d7:1b:b3:f5:06:e4:
60:79:c5:98:a1:9e:ea:39:29:92:35:cf:c5:d1:27:92:38:14:
76:14:bb:00:5a:de:68:50:28:7e:e6:95:a6:81:30:1c:bb:25:
34:ca:83:a8:76:e5:42:78:03:89:58:2e:ae:c3:e9:da:e5:06:
c9:0c:3b:23:8e:0a:1e:71:9e:78:d3:21:1d:87:4a:4f:1c:4c:
30:55:ff:b1:9f:ad:c7:1b:6e:d5:fe:1f:76:9f:dd:26:3e:5e:
e5:62:29:bd:dd:d1:d4:a0:cc:6e:7a:98:5b:07:89:73:7f:79:
8b:9b:eb:ac:23:09:2a:35:d4:3d:48:79:4b:f5:19:a1:1e:0e:
de:b8:30:14:22:9d:cb:ac:5b:e2:af:27:b3:2e:99:86:96:41:
65:a5:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:02 2026 by rpki-client