Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: Uk9YB3RD2opa4kRrHk30PJU5/E8j6Ur+MhrnYyICu3E=
Subject key identifier: 16:14:AD:84:26:A8:64:91:08:3A:88:00:C1:58:89:C1:6F:52:80:62
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 019D2A3B7B214686C98A45794898FBCB0813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0EA3
Signing time: Thu 26 Mar 2026 13:00:34 +0000
Manifest this update: Thu 26 Mar 2026 13:00:34 +0000
Manifest next update: Fri 27 Mar 2026 13:00:34 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: waozndCu7KvnWjG6u3y/wpiFr4uE2lf8DqTuZU+uWcg=)
2: cbzvxlYd2Sf5BPkKpVOxRrjDUx0.roa (hash: VqP2QOQPebJ1F3l2x635f2ND94zv4XuMIM8H7AehW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:7b:21:46:86:c9:8a:45:79:48:98:fb:cb:08:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Mar 26 13:00:34 2026 GMT
Not After : Mar 27 13:00:34 2026 GMT
Subject: CN=1614ad8426a86491083a8800c15889c16f528062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:c7:da:24:eb:9b:cf:44:03:9d:84:e3:78:
33:cd:b5:ff:e4:85:6c:06:d6:cd:55:d5:42:37:21:
62:5d:52:e3:65:c7:6b:d2:bf:94:69:5d:43:56:59:
7a:3e:7e:3c:a8:9a:7f:83:81:ff:3c:ad:92:49:3b:
42:41:75:ae:bf:d9:e0:ac:0e:d6:01:fb:0f:db:77:
40:63:10:c4:67:1b:b5:44:91:ba:d5:49:8c:f8:90:
14:06:31:eb:aa:7b:41:3f:85:5c:c6:17:19:2e:df:
0e:20:0d:d1:43:bd:63:c0:f7:da:aa:86:60:80:8b:
fb:62:6a:7c:d0:fa:ff:f1:f6:2f:8c:bb:2e:b7:07:
86:28:32:5c:24:d9:93:83:a1:59:71:54:23:d1:36:
1e:b2:5d:6b:f9:87:8a:7e:0f:b5:4f:f4:99:1f:65:
25:59:d1:18:87:30:38:62:aa:97:bf:05:77:df:ab:
6c:fb:45:7b:6a:fc:7a:20:08:e3:8b:dd:73:82:0a:
df:e1:69:b5:e4:f2:a8:57:67:a3:1d:48:44:6d:98:
13:05:f9:24:e2:0d:e3:31:96:fe:a7:e0:85:27:b0:
b8:b7:9e:27:c2:99:e9:1d:b1:e9:b3:27:c6:e7:9a:
4b:eb:7a:d6:d2:2e:20:d5:b5:c2:eb:78:c1:e7:a1:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:AD:84:26:A8:64:91:08:3A:88:00:C1:58:89:C1:6F:52:80:62
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:39:96:7d:c3:4d:2b:84:cf:8d:71:d9:ce:13:5f:d1:ad:80:
91:b2:b7:3c:90:38:b8:ad:75:d5:04:4f:4a:84:9f:1f:1d:56:
a6:c7:7c:a8:3d:74:bf:33:16:2b:2b:c8:a7:76:cf:c8:be:79:
8e:d3:9b:6f:ec:f8:24:f4:b1:c0:5d:8d:a4:04:17:9d:a8:9a:
22:f1:f2:a2:74:4d:28:e5:cb:51:b3:0b:33:f3:f7:af:87:96:
72:bf:03:a7:1f:37:b9:c9:2b:df:24:2f:5a:94:2c:66:68:a6:
18:b0:2b:30:e7:8e:c5:34:4d:04:b9:73:97:5a:74:62:13:a2:
1d:5b:f2:81:08:65:57:84:ea:e3:06:89:80:9e:be:49:1c:e5:
90:f3:67:51:e5:87:f8:f8:39:18:f6:51:1d:c4:89:cd:fe:b1:
ee:e5:07:20:f8:38:5e:24:42:8b:54:d3:0a:f1:08:32:a9:b8:
b3:d0:b4:3f:d2:06:32:21:ae:19:47:23:e1:0d:d4:67:81:c8:
29:d8:4d:d8:88:c9:bd:55:19:e1:d9:f1:d7:fd:27:79:fb:c3:
be:fe:67:aa:20:c5:1a:67:d3:1e:07:10:80:ef:30:0b:02:be:
92:c2:c3:26:d6:d0:e3:66:d1:cd:84:2c:ba:7c:eb:a9:0c:9e:
d1:56:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:40 2026 by rpki-client