Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: WSiVtufVbcOSa4kz0c3Iv79TwQEA7uyBl+gFWWmFaJc=
Subject key identifier: 35:F8:DA:6E:85:05:C5:55:0E:6B:66:AF:55:AA:EA:F1:63:75:CE:F9
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 019D26CD3BCDCD9891A28070D7E41E4F3009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0FA6
Signing time: Wed 25 Mar 2026 21:01:17 +0000
Manifest this update: Wed 25 Mar 2026 21:01:17 +0000
Manifest next update: Thu 26 Mar 2026 21:01:17 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: XePJl6i4odxys5h3oZxv8ns+5OOBFenf2Ln7tNr+PWA=)
2: kKGOOO0MLurws3Hg6-7H06ewOqc.roa (hash: iZSRdw8h+NRooSZQkwNGSio9aAv9f+sSYJfJCW6ZDqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3b:cd:cd:98:91:a2:80:70:d7:e4:1e:4f:30:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Mar 25 21:01:17 2026 GMT
Not After : Mar 26 21:01:17 2026 GMT
Subject: CN=35f8da6e8505c5550e6b66af55aaeaf16375cef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:09:86:e4:70:4e:d1:7f:6c:64:5b:43:cd:
53:b2:51:89:e3:2f:47:c9:ca:4a:0b:6b:3a:f9:f0:
27:00:bc:78:26:06:07:c8:ca:71:9a:d6:4b:27:95:
08:c7:c8:c8:77:4e:35:16:68:2b:f7:6d:a0:e0:c2:
25:2a:ba:bd:5a:48:bb:3f:53:5d:63:6c:a8:d0:f3:
72:11:8c:81:87:cd:c0:5f:eb:d2:b9:b7:2f:e6:8e:
e4:5b:7d:47:93:27:2d:fd:56:f2:56:1e:02:62:b5:
b9:79:51:00:99:32:8d:f2:87:6f:b2:79:07:8e:a1:
c2:42:35:cd:63:10:e7:d0:ed:d0:8a:9e:fc:4b:93:
fd:42:80:ab:51:2f:b3:1e:e2:84:49:a3:35:05:f9:
16:c2:20:9c:84:68:b7:80:c1:b4:c1:7f:70:d4:61:
b7:b7:6a:8b:3c:a5:cd:c8:a7:6c:cd:47:c2:e0:1c:
85:d1:ab:71:35:f2:90:aa:5a:4c:63:c8:da:7b:6f:
20:79:b4:1f:fc:c7:d0:7f:bc:5a:c8:47:25:c5:9c:
0e:93:d3:4f:49:f6:b4:1c:de:62:4f:c4:2f:b4:64:
e0:8e:8d:9b:9f:24:7c:0f:b5:83:c8:d3:61:ab:c5:
8a:2f:ab:f0:d3:8f:38:93:2e:59:4a:f4:f7:28:bb:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F8:DA:6E:85:05:C5:55:0E:6B:66:AF:55:AA:EA:F1:63:75:CE:F9
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:0d:af:a6:10:83:00:67:5c:f2:44:06:71:d9:b5:cb:d5:98:
12:d3:83:66:9a:4d:4e:73:b7:e9:3e:9c:2f:87:a8:1a:8d:71:
27:87:f7:88:ef:5c:df:12:a3:1c:f1:7e:16:c9:92:ab:67:32:
ec:b1:23:74:0a:43:10:46:46:3d:5a:9c:98:27:7e:d4:8f:84:
7e:03:a2:6e:29:9e:46:21:ce:0f:4f:98:b6:fa:37:43:79:b5:
47:b1:cf:24:4f:6a:a6:f5:5e:f0:c6:bd:4b:28:1f:df:91:94:
8f:a8:a4:91:52:0a:8c:53:b0:17:f3:40:55:19:d1:a0:e7:f7:
02:fa:f5:7c:ff:28:4b:58:a2:56:22:f3:db:04:aa:85:42:a6:
c6:22:d8:4c:eb:ad:92:62:fa:06:d5:ca:a0:c5:31:a4:b3:14:
c0:a2:ca:e0:ac:b6:c7:3f:5e:92:87:16:47:6f:ff:95:78:58:
4d:e6:17:3b:33:8c:4b:34:18:4c:de:be:7b:8d:06:1c:1f:a8:
4d:2d:69:b0:55:3f:83:4a:11:4e:49:00:8a:80:e2:8b:b3:25:
d9:60:c5:29:e9:c0:8d:eb:80:ad:5c:d8:fe:df:a6:f7:dc:b0:
2d:04:75:dd:c3:02:29:44:7a:1a:14:62:30:8f:67:f2:19:67:
99:83:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:04 2026 by rpki-client