Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: aR3j74Kpr9Lls6hp6bBYpd1HhAHpiEep+ARIJCarjEM=
Subject key identifier: 8B:FC:AC:4A:74:45:C1:76:C3:DF:65:66:BC:71:D0:08:00:19:E4:98
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 019D284DBC1002176E002FE1BE7A25864536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 0FE2
Signing time: Thu 26 Mar 2026 04:01:16 +0000
Manifest this update: Thu 26 Mar 2026 04:01:16 +0000
Manifest next update: Fri 27 Mar 2026 04:01:16 +0000
Files and hashes: 1: SgMIjUcR2c12DzERn5Ts_2Ui6dU.roa (hash: GYGPZLvxKXca2OxhVOyvlt9mnOVKXNEirW2JBi+fWL4=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: BrKm43nhmFvLevIeNNhkm2CxkFC2aE+D56PNF4tU4/g=)
3: XIThFyPTW5lXLvwW5lsLjLVEtsw.roa (hash: zsPoZ1kKOA5gCoYw0cog9xPEs778Ebzg1Uy38hXQLVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:bc:10:02:17:6e:00:2f:e1:be:7a:25:86:45:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Mar 26 04:01:16 2026 GMT
Not After : Mar 27 04:01:16 2026 GMT
Subject: CN=8bfcac4a7445c176c3df6566bc71d0080019e498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:12:b5:8e:9b:43:fa:f6:8d:01:55:b9:ec:
21:9d:5e:d3:25:75:04:02:b4:af:47:04:cb:f5:c9:
b1:a3:21:0e:40:77:d9:bd:46:09:43:06:51:fe:06:
ab:15:64:10:b7:a4:5a:35:fb:e7:c5:3b:49:c7:f7:
4f:c7:2d:85:96:da:4d:2e:89:c4:fe:47:c4:3a:e7:
9a:bf:b7:06:19:60:26:ad:d6:e7:3e:14:7e:a8:38:
7f:a8:5b:50:c4:c2:8a:c7:67:fe:cf:36:ad:07:21:
a4:7e:d4:d1:9a:03:e2:bf:10:d1:6b:b2:95:bc:ba:
17:2c:97:13:66:57:e7:f7:d0:3e:07:07:20:2f:3e:
f1:9c:93:ca:68:d2:32:a3:a5:0b:ed:46:fc:bf:35:
38:76:ec:cf:a0:67:cc:e8:fe:98:ad:2f:23:e5:79:
20:4d:31:43:06:06:47:be:65:b8:44:20:30:21:07:
20:f7:a6:7a:ec:98:fa:b3:a0:c2:71:8a:c7:f4:8e:
09:3a:08:2a:35:27:89:6f:14:46:81:58:c0:be:a8:
fa:ae:f0:99:2b:14:e2:40:8e:6d:48:01:5e:b0:5a:
3d:3a:86:98:03:e1:47:d2:2a:88:36:bb:17:32:61:
4a:94:b9:78:e8:c8:21:fb:a8:c1:92:09:60:d1:92:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:AC:4A:74:45:C1:76:C3:DF:65:66:BC:71:D0:08:00:19:E4:98
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:75:0c:16:ca:c8:3a:de:4a:e7:54:b5:fa:fe:c3:44:98:6d:
4d:93:20:08:fe:b6:07:87:e8:1f:5e:19:9d:29:36:3c:64:5e:
09:54:39:c5:f9:f5:e5:3e:1d:24:73:cd:9d:54:d3:4f:77:3e:
cf:cd:82:57:70:0b:79:a5:bc:2c:96:2e:71:e3:de:5f:c0:1f:
19:be:1e:99:13:53:63:26:64:9e:db:38:a8:5d:1a:1d:8f:e0:
52:71:db:26:3a:5e:27:e8:f5:05:7e:99:22:e0:08:eb:de:44:
ea:0c:0c:a7:50:28:54:fd:f0:9c:a7:b4:94:50:b4:af:d5:c5:
98:cb:66:c9:33:e2:1a:e8:7f:37:ad:48:32:16:44:f1:35:9a:
36:10:f6:f2:9e:06:15:45:48:73:92:15:40:34:be:91:44:fd:
8e:fc:84:a7:49:07:bf:e5:4c:27:ec:4d:88:f4:93:37:03:37:
46:ed:df:27:ce:3d:2c:b1:f5:30:9f:9c:2d:95:7f:34:c1:b9:
fd:83:c7:29:ba:73:9a:5d:dc:71:28:2d:09:43:58:8d:f4:84:
40:a4:d6:00:a1:e4:d6:65:7d:1d:a8:4e:71:d5:a4:83:fa:0a:
5c:fa:9f:c3:13:a7:69:64:77:13:58:3a:da:a5:4d:33:e2:b3:
66:dc:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:30 2026 by rpki-client