Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: RyHqykVUslLxymF+q5TOc9pLyNT9fcS+keCey+RgCcU=
Subject key identifier: 70:7F:94:0B:97:F0:4A:65:AC:06:21:05:0A:AB:EA:E2:F1:05:7F:02
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 019D27DF7E4133F629E63951246194AD5FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 05EA
Signing time: Thu 26 Mar 2026 02:00:51 +0000
Manifest this update: Thu 26 Mar 2026 02:00:51 +0000
Manifest next update: Fri 27 Mar 2026 02:00:51 +0000
Files and hashes: 1: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (hash: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: y4t7D5Wcb2CNTOvH3/4yh2yV3QHHkeI6fhjx0pTTHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7e:41:33:f6:29:e6:39:51:24:61:94:ad:5f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Mar 26 02:00:51 2026 GMT
Not After : Mar 27 02:00:51 2026 GMT
Subject: CN=707f940b97f04a65ac0621050aabeae2f1057f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:49:4d:30:74:20:87:92:43:21:f2:d7:44:
fe:fc:89:21:de:17:e8:fe:49:19:e2:02:f1:5d:a1:
ef:19:ac:70:ec:d3:ff:fc:dd:78:b2:de:d1:f2:d5:
74:df:33:31:09:af:6e:72:1c:9f:0c:b4:f9:c0:53:
56:93:b6:47:bb:03:3e:c1:01:18:74:b8:00:ad:23:
78:6b:5c:38:ae:fe:d6:0d:20:7b:56:0b:24:e4:9f:
09:7b:33:79:78:f8:40:56:2c:18:e4:34:69:51:a5:
7f:ed:0f:b2:bc:e2:d2:6d:76:22:2c:5e:42:23:8e:
f4:1b:e9:86:a3:ab:37:1d:5a:68:11:7b:c8:17:b2:
97:bd:9e:74:8a:e8:36:74:6d:d8:fa:17:e3:10:c0:
db:76:52:ed:b6:d5:ba:54:64:5e:33:10:40:43:2f:
c4:4b:de:ab:cf:7d:58:e1:ab:5d:96:f5:20:7c:10:
7d:1e:09:00:b5:f3:95:ed:8f:4c:ce:c2:ae:42:0b:
0c:47:19:d2:83:ad:4c:36:0c:82:61:0d:96:77:39:
81:b0:5f:6e:13:db:65:50:7d:d4:1e:9c:be:b7:60:
b4:67:f6:a7:74:03:65:d0:45:0e:49:c9:80:34:49:
a8:c5:5d:33:d3:b3:48:33:99:5c:e2:a8:1d:a6:26:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:94:0B:97:F0:4A:65:AC:06:21:05:0A:AB:EA:E2:F1:05:7F:02
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8c:52:77:39:a1:49:2c:ec:7e:fa:d5:51:e6:65:64:00:82:
22:25:a9:96:58:e0:8e:68:89:e7:67:9a:b8:eb:88:3b:04:ac:
c2:3b:78:60:d2:88:10:b1:3a:6d:c3:49:90:80:c6:fa:31:6c:
4f:87:01:f4:cd:09:6b:3c:cf:68:c3:5a:81:46:f3:c5:a0:51:
31:cf:2f:76:57:5c:bc:ba:85:07:06:8d:e0:eb:de:04:1d:16:
1f:7c:bb:48:07:b9:a2:c1:81:f3:91:4a:29:19:10:d3:ae:38:
95:99:19:75:9a:f1:87:41:9a:ec:cc:31:86:34:c2:fe:a2:aa:
88:41:9d:06:74:93:84:a8:d8:6f:20:47:34:48:dc:ff:38:15:
a6:df:79:01:d4:75:db:05:55:f0:7f:02:f3:3a:f0:6b:56:1c:
e1:75:a1:e6:95:53:ba:2a:3b:76:e5:ff:eb:79:2f:53:bc:f5:
1a:26:d9:ae:86:77:a8:fd:de:e4:d2:a4:08:5e:35:f1:7f:d9:
bc:51:a6:03:8a:a2:77:d8:b8:48:38:44:b4:31:03:5a:88:a9:
82:23:d7:04:75:0a:42:e3:9a:81:5c:95:aa:57:89:f9:e0:d9:
e5:1a:53:a3:d1:ec:e4:60:a3:a4:22:8d:4d:c3:0a:8d:39:30:
14:05:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:35 2026 by rpki-client