Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: rRtqhu0WGLbUV+VnfREMeUqrKX9zeH1cMRIguBuyzcM=
Subject key identifier: CB:93:36:63:77:26:4E:1D:6A:81:17:11:6D:1F:B7:0F:C0:08:39:49
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 019D273B3A283EFEC636917B83B3EBE1332B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 0799
Signing time: Wed 25 Mar 2026 23:01:26 +0000
Manifest this update: Wed 25 Mar 2026 23:01:26 +0000
Manifest next update: Thu 26 Mar 2026 23:01:26 +0000
Files and hashes: 1: J1GYT5rRj5L_N6tZy2ntpItqAlo.roa (hash: LsALbZjhGHRQ6Sb9UqH1fb/SrgtXCL5+zJg+18cqSLM=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: 0rwU8eetdlaP0ZZdoNHbzWhF6kN0EZ68JeLl4UPxWUk=)
3: _My6XhMU3zxgGRKHGXcd-n4cvSk.roa (hash: ocTV8bc0q/eClf0jIXDUKVxA8j0B5XwR5lvU8ldB0v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3a:28:3e:fe:c6:36:91:7b:83:b3:eb:e1:33:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Mar 25 23:01:26 2026 GMT
Not After : Mar 26 23:01:26 2026 GMT
Subject: CN=cb93366377264e1d6a8117116d1fb70fc0083949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:86:75:5f:d0:43:0b:67:35:c0:d2:3d:9c:
e5:9b:14:09:3a:af:42:8f:33:9e:9a:5d:0a:13:c8:
23:fc:41:ed:99:6a:10:7c:8c:92:c7:0b:9f:47:5a:
6f:82:5c:29:39:db:6d:81:40:3d:7e:87:e3:33:16:
88:29:b4:71:44:b1:a4:fb:c8:6e:1e:d1:68:73:aa:
c0:54:1a:4f:e5:db:55:44:d5:9f:80:c9:3b:1d:78:
aa:96:d7:30:e6:91:7d:c8:e8:2a:dc:19:75:86:61:
76:0c:63:75:0d:5d:7c:32:9b:75:e0:42:87:4e:e1:
37:54:8b:a0:9e:9b:7d:88:cb:7e:cd:5e:93:e3:1f:
92:b5:4a:a4:af:b1:0f:48:74:fd:6d:63:7c:9b:47:
b1:6a:12:d7:d3:24:8a:ba:9a:38:dd:1f:63:4d:56:
a1:63:17:c9:34:5c:d9:6b:ff:1b:bf:04:67:ea:ca:
37:f4:cf:7b:43:71:ab:03:ca:78:a6:14:7c:a1:8f:
5a:c4:61:7e:9d:75:9f:de:7f:b3:ca:9b:f8:2d:20:
e5:13:b7:9c:fd:8b:4b:94:4c:d1:4e:d0:44:f2:0c:
9f:77:75:89:ce:d6:d7:2c:ce:73:d5:3f:92:d3:af:
3a:e3:8c:af:36:39:34:b1:d3:a7:49:61:0c:59:ad:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:93:36:63:77:26:4E:1D:6A:81:17:11:6D:1F:B7:0F:C0:08:39:49
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8d:1a:c1:25:e3:f7:f5:9d:2d:8b:7b:c4:9f:f0:19:01:ce:
a8:25:f1:68:20:61:d3:ff:80:75:55:ce:69:98:91:eb:cd:44:
0e:4e:74:6b:4c:51:dd:d7:e3:0c:e8:9f:e1:9a:86:4f:c5:b7:
2b:e3:79:33:c7:fe:f2:ed:26:db:e7:3a:bb:4b:e1:bb:21:9b:
10:ce:46:fd:07:cb:e0:8f:07:14:39:60:d5:5c:8a:74:36:57:
3c:8d:4c:3b:a9:59:63:af:f6:0f:a8:59:9e:ae:1e:38:e5:e7:
32:c2:9d:d3:9d:1e:d9:07:1b:49:be:1d:e3:99:a9:ab:60:ba:
b8:5e:ba:0c:3b:12:67:cb:df:b4:75:2a:32:f9:88:58:1b:18:
4c:ce:4a:38:ab:54:b6:7e:41:3e:b6:ba:04:25:d5:b9:96:db:
13:29:c4:68:12:9b:f1:ce:66:06:a2:d8:55:5f:98:49:f8:d0:
d5:69:09:ab:0a:89:ae:38:28:55:b9:f4:cb:39:a1:f2:44:34:
41:13:e7:e4:45:e7:ed:08:b5:5a:65:c8:55:1f:73:ca:f7:56:
a5:75:6d:32:92:0e:91:57:59:a2:b3:02:09:ad:4c:6b:36:d8:
60:6f:c2:82:06:72:b1:63:9f:8c:6b:24:54:01:a0:cf:f7:94:
8f:da:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:32 2026 by rpki-client