Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier: Q9ZwVSNMe9DXOCd6KB/HJ7H1+VUnoI/7SeHgPeUe/OQ=
Subject key identifier: 25:F6:56:A2:41:7F:5A:81:20:DB:CD:F0:50:9E:EA:9B:A5:F9:C4:D3
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial: 019D265F086C1032E0BF2CDF5DE99BE276CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number: 15AB
Signing time: Wed 25 Mar 2026 19:00:55 +0000
Manifest this update: Wed 25 Mar 2026 19:00:55 +0000
Manifest next update: Thu 26 Mar 2026 19:00:55 +0000
Files and hashes: 1: MQ1rIvHKeTYhLT9zYntvVr0Ep7w.roa (hash: /nZ/kzhs/5Nc05vPwFMbSjWv3DV2VWk20JauYWJRGIY=)
2: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: sRzrynSaOBKLs4jE2Sa4vMFVOPYLlqKI0G+J0qBkers=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:08:6c:10:32:e0:bf:2c:df:5d:e9:9b:e2:76:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Validity
Not Before: Mar 25 19:00:55 2026 GMT
Not After : Mar 26 19:00:55 2026 GMT
Subject: CN=25f656a2417f5a8120dbcdf0509eea9ba5f9c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:ed:38:4e:b4:f4:dc:ad:ed:02:8e:1c:f2:
42:0c:9d:82:6a:11:70:e9:14:e1:02:c6:c2:7c:4e:
41:ef:72:bd:5e:2c:07:f2:0f:92:66:2a:ec:07:62:
8e:e3:b1:3b:20:6d:01:e6:22:94:93:b0:87:a7:23:
1d:9a:5e:71:f8:78:67:b0:35:ab:b3:30:01:72:57:
82:e1:1d:32:81:29:b5:c4:e6:b7:8b:76:8b:42:5d:
0f:33:e4:17:72:df:ee:cc:a7:df:55:ef:8a:f5:c7:
fa:16:a5:16:22:3d:0e:74:83:51:79:ee:e8:fc:66:
2b:61:16:a8:28:0e:f2:7c:5b:d2:62:d3:92:ad:f6:
57:6e:65:e1:26:78:ae:f1:d9:9a:b6:ac:17:08:de:
21:20:a3:d2:2b:a5:16:09:03:06:e3:b5:fa:b0:12:
c9:48:47:1b:0b:3b:48:b1:ee:7d:e2:cf:0a:a8:8b:
9a:cf:1f:37:ee:19:f7:94:c1:bc:e6:09:66:d2:71:
cf:af:9e:5e:5e:b9:dc:d6:ad:12:94:17:09:36:0a:
fb:9f:7f:98:3e:4b:c5:23:d8:a7:0e:2a:58:c6:4d:
6a:96:21:2e:14:2e:66:c2:02:b0:c0:8d:69:df:40:
7e:78:ae:19:9a:da:31:82:1b:37:b3:99:a3:bc:18:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:56:A2:41:7F:5A:81:20:DB:CD:F0:50:9E:EA:9B:A5:F9:C4:D3
X509v3 Authority Key Identifier:
keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:72:51:88:f2:c8:0e:4f:af:47:b3:74:20:0b:d0:62:ef:23:
0e:45:7b:4f:b8:55:57:e0:0b:91:3e:c3:8e:e0:8d:22:30:d9:
49:dc:8e:6f:c4:54:0a:d1:1c:ad:39:5c:94:c5:15:fa:ca:d4:
ab:40:73:21:b0:0a:dc:99:e3:17:08:0e:49:71:56:33:b5:2d:
6c:36:58:a7:38:31:b7:38:ec:c2:94:8b:89:1b:c1:5d:94:6d:
41:e4:b1:17:5b:a0:56:43:89:7a:a6:d1:fd:cc:d3:4b:af:74:
65:ff:fe:f3:a3:db:b9:13:78:c6:a9:7f:b4:e8:5e:f4:0f:5d:
04:c1:1b:a8:d0:39:e5:2c:e4:f7:87:7f:e4:1c:26:ae:e3:be:
53:83:ae:16:90:9d:43:09:2c:3e:8f:68:3f:ae:2f:2b:2a:2d:
12:d9:0a:6e:94:38:9c:38:99:70:d4:78:f5:49:84:1d:23:9a:
50:2b:71:33:1f:5b:b1:b6:51:d8:0f:7d:7d:10:32:ef:d8:3d:
34:5f:1d:2c:7b:66:9e:1c:96:c8:24:6d:e0:e4:be:f8:5a:2a:
d4:ef:01:3c:61:21:af:c7:b7:19:c4:bb:9e:f9:b0:41:be:0d:
f5:a1:35:e7:08:3f:bf:36:8d:e7:0a:8f:a9:23:0b:c8:be:83:
e1:86:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:13 2026 by rpki-client