Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier: qDfBn+xz6IgjiDzyWOGz66t+yl5UNV0znrM0+ab5sXY=
Subject key identifier: 4E:35:67:09:04:09:9C:1A:76:34:58:D8:E1:F6:3D:B7:ED:88:3A:3F
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 019D2B4DEC8090E7749A7EA88C6DF1D95762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number: 080C
Signing time: Thu 26 Mar 2026 18:00:20 +0000
Manifest this update: Thu 26 Mar 2026 18:00:20 +0000
Manifest next update: Fri 27 Mar 2026 18:00:20 +0000
Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: 0sm8lqCIptGfrsDuu70CAoay/bZiaTo21NzNCPdMrLc=)
2: nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa (hash: ybsBDRN+Wgxdd71NM5Q38e+H0vIZjbotj33kAgs43CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:ec:80:90:e7:74:9a:7e:a8:8c:6d:f1:d9:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Mar 26 18:00:20 2026 GMT
Not After : Mar 27 18:00:20 2026 GMT
Subject: CN=4e35670904099c1a763458d8e1f63db7ed883a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:28:77:a6:c3:c9:07:69:a7:c6:25:ba:7e:
ba:ee:6a:75:ed:80:c4:b1:14:d2:3f:bf:97:a1:f0:
ec:0a:d8:38:54:ee:e3:1a:fc:95:c5:da:4b:d8:eb:
3d:4b:8a:b7:67:b1:16:1f:18:98:a2:bb:79:4f:4e:
17:01:ac:7a:b7:a7:ac:54:52:a6:d1:c9:ef:7b:40:
5d:e9:ba:f9:6f:e5:1c:0f:60:ae:09:e2:8c:c7:a1:
a1:74:2b:a8:0a:18:12:63:ba:f1:bf:4c:13:1a:3c:
f9:d7:9b:29:ff:d2:c5:6f:25:38:39:56:09:5d:5b:
d4:3f:8f:aa:cf:53:f8:6c:1c:fd:b2:66:3b:a9:60:
b5:b5:61:29:a2:76:6b:ae:06:94:76:33:0c:1f:c3:
c9:0f:12:25:c6:ea:ba:68:88:5a:3a:87:e6:ac:0c:
86:70:2a:02:91:3d:e8:06:56:00:55:3a:c7:7b:86:
e5:ac:1d:63:bc:ce:c6:96:7d:c3:db:86:64:fe:d7:
a0:57:28:9b:5c:bb:bd:07:7d:c1:2a:65:3b:17:51:
6d:a9:8b:aa:79:61:f4:32:7a:ff:41:36:c7:35:de:
80:41:4d:d1:b8:9e:f0:99:35:7d:48:ba:57:fd:45:
19:db:72:e8:a1:d3:09:ab:fa:07:51:9e:cb:b6:21:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:67:09:04:09:9C:1A:76:34:58:D8:E1:F6:3D:B7:ED:88:3A:3F
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:cc:0a:12:a1:29:12:c9:f4:86:7b:1d:cf:4f:99:23:6b:
f7:24:85:bc:0c:ca:4b:38:bb:63:5c:18:17:ed:c4:d1:19:89:
1b:29:53:58:7b:d8:b8:44:fd:0c:1b:66:cd:9b:6f:42:1a:80:
6a:80:c1:66:a8:a0:7a:c8:0c:7f:3d:f3:3e:43:65:08:d0:2c:
e5:8a:fa:60:b1:d4:6c:e7:92:c2:7b:3e:34:e6:20:49:1e:db:
45:7a:8f:98:b0:a0:6b:b6:0e:e3:91:5f:ba:92:ad:99:99:9b:
5d:30:61:25:b1:67:a4:80:19:81:7e:93:52:9b:c9:4a:8c:a1:
74:3d:03:91:6b:e4:de:53:3d:b4:f5:19:eb:00:e5:dc:34:e4:
e0:60:64:9a:54:b5:d1:e9:6a:5e:dd:72:5f:f4:a5:91:e1:17:
20:78:59:69:4a:da:ea:44:88:da:de:c2:49:8d:1d:ac:1a:c6:
48:56:7c:8b:16:d9:02:72:c1:fb:e2:c7:90:c3:96:eb:7f:7c:
b5:98:9b:f5:c4:67:61:c7:6a:a7:06:74:31:3e:1b:06:32:0c:
8c:2f:30:79:ef:3b:b8:dd:fc:ee:14:22:b9:b7:58:d6:5d:2c:
8d:a1:85:76:d6:ea:1c:1c:49:eb:a5:94:5f:38:18:15:d9:d2:
92:70:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:04 2026 by rpki-client