Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
File: WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json)
Hash identifier: jg9cE4ouzmjHs3iQCUAl/t28SSBcBmW6aW/tLyZJInM=
Subject key identifier: 16:7A:F8:A1:01:E1:02:98:DC:B3:96:34:5C:D6:40:B9:AD:F4:88:B0
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial: 019D28BB2663A91FDB994C991B0FF96ACFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:46 +0000
Manifest this update: Thu 26 Mar 2026 06:00:46 +0000
Manifest next update: Fri 27 Mar 2026 06:00:46 +0000
Files and hashes: 1: 1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa (hash: fRzTkPN8a27bua2wzuTpxH2x1y519ujmqn10IN10rFw=)
2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: oBHAdBhOgwQJbGzHCOjCbqFoBSUD5e00TiFnvGZlz3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:26:63:a9:1f:db:99:4c:99:1b:0f:f9:6a:cf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Validity
Not Before: Mar 26 06:00:46 2026 GMT
Not After : Mar 27 06:00:46 2026 GMT
Subject: CN=167af8a101e10298dcb396345cd640b9adf488b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:91:cd:d3:12:c5:e2:58:d3:11:3e:9d:cd:
8e:bf:bc:79:38:ec:32:d8:a5:e4:51:c3:80:15:14:
a0:24:f5:3d:f9:7c:51:b1:75:5a:ae:d2:95:fa:df:
b7:50:a5:5f:76:0b:48:c2:12:2d:9b:67:d3:b8:bd:
55:64:22:d7:1d:98:3f:9e:6f:e5:00:f3:0b:2f:f8:
61:48:16:a9:1a:c3:31:7c:21:06:66:7c:6b:26:f6:
60:84:35:3a:60:23:6c:47:5a:98:72:26:48:6b:f3:
94:b4:5f:9f:61:45:95:07:01:0d:81:0a:dd:d9:24:
5a:9d:1a:6d:db:28:90:6a:6e:ec:05:5b:f7:e7:3f:
6f:93:d0:a9:72:60:f2:ca:b6:db:4f:ef:5a:43:87:
1a:4d:4f:cd:3e:c6:e7:f0:62:fb:44:e0:cf:6a:b3:
a7:7e:9d:4f:a7:d0:09:f3:7b:11:80:36:68:ab:87:
3f:63:81:36:a1:a4:63:fb:a1:a6:0d:1d:1d:c4:31:
fc:92:6f:20:50:c5:e0:37:43:ec:ca:38:1d:5f:d8:
55:65:e2:64:77:6b:8c:75:dc:67:93:3a:c9:e4:0e:
0d:f7:1c:cc:04:f0:6d:8d:45:02:a2:5f:6f:07:44:
ba:fd:17:ab:54:67:3c:f4:ef:3e:e1:bb:35:22:8f:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7A:F8:A1:01:E1:02:98:DC:B3:96:34:5C:D6:40:B9:AD:F4:88:B0
X509v3 Authority Key Identifier:
keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e3:13:70:85:1d:ee:36:43:c0:f8:fd:66:9e:11:95:76:fa:
dd:6f:74:1c:0d:5e:28:e4:35:30:cd:8a:1e:9d:dc:a8:bf:22:
4e:6f:ec:ea:c2:a5:a3:41:dc:a2:4e:3e:c7:52:b1:cf:7f:1d:
de:48:3d:ff:f9:5e:e7:a2:b0:93:4c:7c:11:cc:80:5a:aa:cc:
a0:55:e5:0c:ca:6d:26:95:6b:e0:b0:b2:df:17:4e:8f:8d:a3:
1a:b0:a4:40:35:dd:28:60:e7:16:ac:23:b4:b9:fb:de:83:f1:
1b:00:e5:80:d7:9b:c4:0e:1d:32:3a:86:b6:ba:b4:53:51:d6:
95:67:32:ea:af:d5:2e:9e:74:ef:02:e2:de:6e:bc:a9:92:ad:
39:06:81:c7:25:5c:dd:a3:f6:94:b1:3f:ce:98:16:b6:b5:52:
d5:c8:ad:73:ef:45:67:4d:53:1d:5d:84:bc:0c:e4:86:f3:ca:
67:f6:a5:55:86:94:fd:6f:7b:a3:30:7f:15:1a:58:c2:b8:21:
92:9a:ea:b3:50:e2:fd:00:c8:62:84:92:1e:0a:83:60:90:1f:
07:a6:ca:5d:14:fb:09:03:b8:52:5c:1b:78:5b:95:39:9f:bb:
3d:30:ee:40:3d:7c:18:56:2f:08:b9:00:87:21:85:ee:13:d3:
16:ac:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:57 2026 by rpki-client