Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: YOdDWz7hguGDYWRYqHJowe+VWSP8GI/KTcotohdCgJg=
Subject key identifier: E3:56:C4:A9:40:CE:E6:27:BB:A8:47:27:62:CB:3F:A8:CC:56:CF:9E
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 019D26CD36884BC2417999530F0BC062BC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: 03C1
Signing time: Wed 25 Mar 2026 21:01:16 +0000
Manifest this update: Wed 25 Mar 2026 21:01:16 +0000
Manifest next update: Thu 26 Mar 2026 21:01:16 +0000
Files and hashes: 1: DrL-3puYiO1XcvOHU3z8CMJINeA.roa (hash: cuMSInirqa12rGsZAI3BCtXNacI0/0nGWC9/J3U/TsU=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: n38AD3r7314PsbEbG3AXUikRzr0KKYvrIDZxv1yFBBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:36:88:4b:c2:41:79:99:53:0f:0b:c0:62:bc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Mar 25 21:01:16 2026 GMT
Not After : Mar 26 21:01:16 2026 GMT
Subject: CN=e356c4a940cee627bba8472762cb3fa8cc56cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:e9:c6:b3:0c:ec:a5:40:00:43:bf:bf:1b:
0b:49:88:7b:87:ee:1a:41:5c:70:06:b0:6f:76:7d:
e4:a1:e7:db:09:21:11:4d:2d:3d:1f:ee:e1:b5:e2:
51:d4:36:ac:32:04:fc:2d:89:b5:6d:af:ed:fb:15:
d6:32:9f:ab:61:da:a0:72:a1:18:e2:36:77:fd:1b:
87:b7:59:d0:8c:1c:56:6b:b2:b2:8c:9f:d6:03:49:
de:e2:af:70:68:b2:4a:ca:ce:8b:ff:87:d9:06:af:
09:67:00:95:44:45:79:86:c8:b0:15:d6:78:5e:c0:
e0:ad:69:12:40:49:59:1f:bd:0d:e1:c0:cb:50:ee:
6c:bf:e3:b0:43:d1:2f:68:71:63:02:85:d8:fa:e0:
1c:bd:f0:16:20:b8:02:ba:fa:19:50:7c:3c:a5:11:
94:a7:b0:a2:79:ad:2b:48:85:f4:11:42:f5:93:c5:
d3:53:15:81:ce:97:9a:ad:96:18:86:f1:cf:fd:71:
71:01:71:9e:2c:cf:f9:c5:56:17:68:77:9f:a0:46:
01:92:3c:df:e9:6d:26:fe:01:4b:33:53:45:66:ec:
51:72:00:39:4e:eb:ec:cd:10:ab:bd:44:c6:4f:18:
2f:61:ee:df:ea:62:d1:49:51:57:a3:eb:b8:38:d1:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:C4:A9:40:CE:E6:27:BB:A8:47:27:62:CB:3F:A8:CC:56:CF:9E
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8c:f1:29:90:f1:4e:5a:f8:78:55:fa:f7:95:b5:02:34:65:
8f:9a:98:ad:05:20:87:f7:42:3c:21:91:18:ca:b1:9b:d1:9c:
9e:7e:31:6d:ae:d4:36:14:bd:af:20:d0:04:dc:bb:c8:52:73:
54:f5:13:ee:e6:79:9c:d0:24:f0:f1:4f:3d:65:c4:9f:54:75:
21:01:30:5b:18:2f:6e:39:e7:21:0b:7b:ad:39:bd:f3:17:a5:
f4:6d:0b:6a:e7:ed:dc:eb:6a:d9:fb:2b:92:2d:10:19:b7:3e:
80:b8:35:29:ce:48:6e:81:9e:03:05:e1:2b:e6:b7:f4:8f:7b:
74:49:a4:ff:c4:5b:c6:39:49:c8:67:64:58:99:da:92:e8:24:
c1:33:b8:d9:e4:cc:96:b1:47:92:1c:c2:76:b3:41:da:c8:59:
a4:55:fb:2a:61:4c:dd:af:b2:79:c8:de:85:56:50:4a:3b:ab:
2e:f0:0b:d1:f0:94:99:d7:8c:58:fe:d4:f9:1b:32:45:74:21:
5f:af:d3:08:c3:54:b3:85:ac:01:a9:00:1a:22:31:8b:63:b2:
61:6d:42:75:b7:81:0e:c9:5b:6e:ee:c7:eb:db:2e:9e:fa:9e:
cb:e2:ae:c0:dc:8f:af:ea:41:76:64:1c:ac:64:43:f2:00:74:
5d:09:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:42 2026 by rpki-client