Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: TwxW7U0jo4E6rVYjdMT/3Q+4zKt4XA25UWQ1ljUUryo=
Subject key identifier: 1C:CC:82:0A:BB:E3:8B:D2:6C:FE:5B:9C:08:D3:DA:48:D3:05:D1:70
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 019D28BBCF08A9067C1BE3EF16C5541F9D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0F0E
Signing time: Thu 26 Mar 2026 06:01:29 +0000
Manifest this update: Thu 26 Mar 2026 06:01:29 +0000
Manifest next update: Fri 27 Mar 2026 06:01:29 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: y95a6q28dnPeLrN6gGxBZjPKulAHndms+vEVo9pu9p8=)
2: f5k5qCfc97nrWBFtHlPeoZAbHU0.roa (hash: 5U/u1GLlwPYY0FROjlFUf8bRvu5+K/AhZTkC/PSthCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:cf:08:a9:06:7c:1b:e3:ef:16:c5:54:1f:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Mar 26 06:01:29 2026 GMT
Not After : Mar 27 06:01:29 2026 GMT
Subject: CN=1ccc820abbe38bd26cfe5b9c08d3da48d305d170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:92:4d:e7:f2:c7:57:a7:29:8f:82:4d:48:
8b:8b:bc:47:15:f0:0e:6e:fe:a1:80:e5:3f:4e:11:
fc:66:83:f7:2e:e1:6c:15:0c:ee:40:0d:26:bf:8e:
40:41:c8:0f:47:f3:58:b7:8a:c6:da:bb:93:5f:01:
8b:a7:dd:63:4e:4d:1b:ba:c1:f2:69:35:f9:70:57:
03:ab:5d:c7:c2:f7:26:b2:df:05:25:45:24:73:eb:
b8:3b:64:0e:47:bb:6a:6f:7c:6c:dd:5d:e5:e8:ff:
6c:d6:78:4e:9f:de:f4:31:8a:ad:d9:04:90:7a:e2:
ed:6f:12:d1:2f:b3:de:2c:b6:94:df:82:cf:65:4c:
06:5e:a2:79:86:5e:9a:c8:47:06:80:f9:41:52:d2:
92:99:5b:f8:ca:8d:eb:92:ab:90:07:df:c9:56:ea:
09:bb:cd:50:d3:2f:06:93:cc:0a:bf:8d:24:03:79:
20:1c:83:c7:c1:75:8b:80:13:f0:e5:a6:3c:70:48:
99:f9:93:c3:4a:fd:de:04:c7:4c:6f:f5:53:87:6b:
7f:99:8c:46:6d:80:ca:06:c0:aa:39:3b:68:78:39:
82:5b:1e:3a:95:d2:36:8d:20:63:1b:c8:8d:58:0a:
fd:89:3b:df:ea:2e:33:ef:9a:db:80:a6:63:ef:df:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CC:82:0A:BB:E3:8B:D2:6C:FE:5B:9C:08:D3:DA:48:D3:05:D1:70
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b2:a3:dd:1b:eb:2b:ac:2d:fe:18:f0:c8:c8:32:9e:d0:6e:
07:eb:07:09:7f:ba:db:cc:68:e2:26:f6:5d:91:88:9b:29:56:
65:30:02:f8:a4:f2:e9:a1:e5:f3:01:e7:7a:64:cb:84:9b:47:
11:ba:c8:d8:52:5a:bc:5c:21:73:57:a7:d8:91:bd:99:55:70:
33:45:99:dc:f7:38:f2:b5:b2:dd:c9:09:cf:a9:91:6d:25:3c:
91:88:2a:c3:67:8a:43:83:40:e1:25:9d:a5:7c:79:f7:20:ee:
fe:34:64:71:6f:47:2a:2e:14:0f:9d:2a:34:3c:78:a7:e9:ae:
7e:af:2e:55:a3:33:32:9b:58:2a:24:82:83:f8:df:50:55:13:
0f:44:b2:24:57:98:e0:13:91:c4:49:f0:fa:43:cf:16:ba:db:
33:09:cf:c3:c4:55:38:d5:28:54:bd:ae:11:be:1c:de:71:b8:
89:1b:0a:00:d0:8f:7b:57:41:67:50:4f:25:55:02:08:89:c6:
04:5b:d6:11:5f:9f:f8:6b:b2:06:b9:16:8f:8f:90:b5:c3:af:
02:28:8c:0c:84:52:95:4c:5f:97:4a:bb:bc:76:9a:4f:1d:d2:
a9:33:84:ac:71:5f:70:a2:fb:dc:90:70:08:2b:f3:93:d2:05:
07:86:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:21 2026 by rpki-client