Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: lJA2EITQbwhayWQwxrMiyu6/fHQkHnzEWGtE+Z+fIwo=
Subject key identifier: F0:33:31:0F:49:F7:0A:11:B3:65:38:A4:EE:54:E8:2C:6E:7E:2F:5D
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 019D2704AD0DDA94055DA84D76059570B438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 18D7
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: BUkLbJymwTyiP7I3JBXsx3s4NL4.roa (hash: S+u04ktm3wvbogL9zzmkeSkoPC/t6RrVsW1QDJ8a+R8=)
2: VKi_eELpmYrDDbDrF0VVkkCBTvA.roa (hash: x+LzLGitMTJHgFBC68KihyTc7sPTjjdr4ISMkWQ+OXA=)
3: ZTe4Yc6AXqtHVEH68yVC_sq1IvU.roa (hash: 7Noxt8qVLB+fyFIGQYg4LilEwKTB1zOCXiJLI8oHZSo=)
4: gdh12HnOMOEqYVtaca7KAq1urKE.roa (hash: xH1nYkWxaZr276GAcCdV3VvkfxZ8MURBbGI3J9HTllU=)
5: k2NOkCSTdVhsNv-yRXDz4IjyaP8.roa (hash: mFXBGS6DaTNeb9V9IYIi7IizihWo5PDlGr82oMDsEnk=)
6: kjiD6TFqmxMVqOnqt0_0GLgSRcU.roa (hash: AZdOF+iEUNNu4fK6OeoAbtGKKK0ZCVUm4ff6O264PE4=)
7: vuYx__ePQYmBnErIjuxPmyS72UE.roa (hash: RG1Iph+v2YrWVe+WGtDI4g5ptYW+7Uz8lQw8iy5rb4g=)
8: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: s6m1u/kD3grnNHDe5QPDmd3qhS1jPVul3uaX5ZU+dyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ad:0d:da:94:05:5d:a8:4d:76:05:95:70:b4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=f033310f49f70a11b36538a4ee54e82c6e7e2f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:06:6f:a9:36:d3:50:00:a4:12:ee:ed:48:
91:18:b7:40:98:d6:63:73:a3:1e:18:91:49:55:70:
07:8e:ec:8b:d9:82:98:51:51:0c:97:24:07:ab:90:
45:79:9d:8b:6a:75:9a:1f:c8:28:ac:0d:76:5b:78:
2f:58:0d:aa:16:fa:e3:dc:91:2f:82:38:58:ba:a3:
6b:73:e2:99:bc:e9:5f:46:5a:a9:16:ab:d8:8f:e5:
54:43:7e:a3:f0:ac:1d:25:a4:06:6c:cf:68:37:c6:
a2:16:94:5e:84:c6:97:17:e0:0c:4d:af:ff:33:1e:
ba:76:35:da:33:40:40:1b:c7:ae:2e:2a:41:8b:3a:
73:25:b2:25:af:60:22:11:68:e9:3f:18:67:32:4a:
60:cb:a0:f9:c6:cb:27:9a:67:71:14:31:95:b4:da:
73:01:f9:e2:89:23:d4:75:24:f9:d4:11:00:ed:37:
87:14:ee:56:53:fe:36:f1:76:f6:e1:1d:09:80:f0:
64:a1:92:6f:9c:9c:32:b2:6b:db:dd:54:8e:0c:e6:
cf:af:0e:00:81:7f:f7:8c:38:e5:8a:94:a8:70:c0:
ea:1b:91:43:f5:ad:e8:8e:fa:65:5b:8f:7b:46:8e:
5a:ab:b6:2a:db:a2:de:1d:67:36:fd:15:6f:73:b0:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:33:31:0F:49:F7:0A:11:B3:65:38:A4:EE:54:E8:2C:6E:7E:2F:5D
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cd:6b:3c:41:27:b8:1d:6b:53:60:e7:55:73:bd:4c:79:33:
8d:67:d4:5c:2f:2f:c6:75:16:ef:e3:04:f9:05:69:2b:b0:7e:
a8:04:ec:82:29:9a:7a:c8:18:3c:97:3b:6f:9e:e8:8e:98:a0:
7a:af:eb:65:3e:bb:3c:31:a9:12:f8:bb:8e:88:dd:f7:65:a5:
6b:f5:a5:6a:71:04:3d:ed:75:f4:13:53:85:e0:c6:85:9e:26:
6b:96:cc:de:9b:13:e4:58:96:2e:bb:a6:0b:b4:e6:e8:d1:a8:
18:87:50:6c:7a:64:03:f2:73:5c:14:9a:7e:9d:78:a0:25:28:
ca:85:86:d1:fe:b9:ae:ab:17:71:a8:f1:e8:8c:c9:ae:50:f7:
d5:1d:87:a4:88:5b:36:d3:e7:71:56:7e:87:6e:5c:8b:c7:0a:
a1:51:03:af:d9:82:6e:e5:f2:e5:e3:53:4c:6c:1e:c9:4d:25:
be:2a:48:2e:f0:1e:5e:a1:f8:52:ea:85:42:16:84:ed:8f:b3:
8b:1c:24:88:af:95:2d:33:9c:18:22:e9:3a:dc:8c:39:e0:30:
8a:51:9e:7a:a9:6a:1a:72:38:21:cd:6d:80:91:85:31:2e:10:
65:a3:b9:4a:45:42:9b:c5:08:08:8b:17:3c:53:a1:71:40:a9:
56:a9:08:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:24 2026 by rpki-client