Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: mgFVO/UkNMGY29xE/qqwNPNy9qIZrAZCgzDitE1u410=
Subject key identifier: 5A:A2:A6:01:35:E1:8B:E2:87:DD:52:44:21:2C:AD:B9:7E:6D:90:67
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 01A1250B5A7468FE9849B7900C0984E3B3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0BA5
Signing time: Sat 10 Oct 2026 09:01:03 +0000
Manifest this update: Sat 10 Oct 2026 09:01:03 +0000
Manifest next update: Sun 11 Oct 2026 09:01:03 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: /wOwwSx72alTPLAeWfMsQkYFEmUENntNqLb0mBxR/W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:5a:74:68:fe:98:49:b7:90:0c:09:84:e3:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Oct 10 09:01:03 2026 GMT
Not After : Oct 11 09:01:03 2026 GMT
Subject: CN=5aa2a60135e18be287dd5244212cadb97e6d9067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:95:aa:e2:d5:b2:d2:f0:0b:d6:44:97:f2:
9a:e5:af:47:56:4f:b3:c9:c3:89:5b:e9:91:74:46:
ef:49:10:de:e7:e7:df:ac:13:93:4c:63:8e:23:38:
51:f1:c2:8c:78:4c:ea:3f:13:4b:96:5d:c7:62:42:
c5:8c:f9:70:e1:67:19:c6:74:0f:02:17:3d:16:23:
fe:3f:1c:0f:80:9f:ba:20:c7:21:8e:da:62:29:ce:
15:98:7c:ad:bd:b8:5c:cb:a2:c4:50:46:8f:03:21:
15:cd:77:c9:40:b3:3b:70:f7:e3:74:74:7c:be:6f:
e5:e6:5f:2b:d4:66:bd:d7:a4:f5:3c:75:8e:6f:e9:
bb:4b:64:98:1d:48:aa:a0:ad:93:97:ea:cc:83:b5:
2a:e8:aa:8e:ea:dc:0a:96:f9:49:b2:f4:dd:77:ec:
11:68:b7:5d:15:a9:ab:86:c8:a4:80:62:a2:e4:17:
da:e4:45:fe:3a:4f:1c:ad:2e:f3:fc:b0:a2:72:1d:
d6:29:a9:57:b0:69:dd:ea:41:20:c6:7f:c8:54:52:
24:99:73:0d:74:6e:42:47:fe:aa:45:1a:43:97:2a:
8d:bd:11:7b:92:8e:39:1b:26:94:e9:a2:d2:44:51:
69:88:f1:da:8f:41:b8:a3:bf:f0:e3:9f:5d:2b:83:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A2:A6:01:35:E1:8B:E2:87:DD:52:44:21:2C:AD:B9:7E:6D:90:67
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2e:d4:55:a5:1d:ac:08:2f:ff:8b:f5:7a:d8:67:ae:c6:6c:
26:e2:3b:bd:f9:b6:97:ea:8a:3c:77:23:e5:13:3f:db:ad:4a:
80:90:c4:6c:59:6b:e8:13:fe:8e:06:bf:d9:aa:8b:94:73:52:
13:67:b8:e9:73:67:0c:81:26:bd:98:c1:a3:6e:82:d1:0b:da:
0c:45:32:f8:c4:0e:f2:ce:0c:f7:5f:2a:9c:db:db:87:41:c6:
75:66:b2:d1:f1:03:38:51:81:49:9f:34:69:64:3b:09:b7:91:
8a:11:72:43:8a:d4:fa:78:7f:4d:3e:01:04:64:c5:6c:3d:8e:
fa:ec:28:b7:03:ef:ac:b1:bf:25:36:07:1f:a6:03:d1:9c:41:
f7:25:5d:0a:4c:62:e0:04:1d:53:65:ae:49:88:75:b5:69:eb:
f2:ca:28:ec:aa:80:94:d0:82:3a:b6:0d:b4:59:17:11:5c:ef:
9f:ac:47:45:be:bd:db:69:d6:9b:8d:e5:d4:a3:30:bb:f0:53:
5c:da:67:e9:51:ac:65:ba:9f:c8:e4:03:81:87:cd:5f:04:d9:
ea:60:7f:db:79:fd:6d:0d:78:74:bf:b7:8f:64:a4:d0:24:fa:
99:7d:bc:c7:3a:97:4f:d4:6d:0c:b4:79:d3:6b:91:c6:eb:14:
db:b1:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:11:18 2026 by rpki-client