Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: 23VGiZvkDXxh0wSWOc1Z2GkMGEe+sgzPm5kdkq6rMSY=
Subject key identifier: EA:8A:2C:CF:04:C0:85:3A:BE:E6:1D:80:70:56:AE:5D:D0:58:E0:EC
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 01A10A6FD497409D13C573EC8C62CC1E7945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 1408
Signing time: Mon 05 Oct 2026 05:01:03 +0000
Manifest this update: Mon 05 Oct 2026 05:01:03 +0000
Manifest next update: Tue 06 Oct 2026 05:01:03 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: AVXKT9JCpgzYtKWYOtc0ocL6XHiWQJO6Lvz60aBc1tA=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:6f:d4:97:40:9d:13:c5:73:ec:8c:62:cc:1e:79:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Oct 5 05:01:03 2026 GMT
Not After : Oct 6 05:01:03 2026 GMT
Subject: CN=ea8a2ccf04c0853abee61d807056ae5dd058e0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:f0:4a:53:e2:19:e2:76:d7:6b:9f:df:bb:
71:0e:44:12:ea:7e:df:b4:69:95:32:68:02:81:78:
d0:18:cd:00:d7:41:64:73:b2:cb:03:59:5f:1e:46:
f0:25:92:21:ad:b1:d0:bc:f7:d3:b1:c6:77:45:e1:
80:31:9a:9d:2d:28:e1:82:5a:2a:e8:41:5b:b2:cf:
1b:8c:3d:42:13:2b:47:86:74:3b:c6:be:18:1e:11:
82:1b:24:1e:79:35:2e:57:cb:88:a8:84:7c:d8:78:
dd:f0:52:66:38:54:ee:2d:f4:e0:c7:82:fc:03:83:
c5:86:9e:a9:55:02:27:20:a9:c9:4e:fd:81:64:e7:
1b:a5:be:ef:dc:2f:f1:f0:b9:52:44:88:7e:6b:4f:
1b:d1:06:18:0d:35:ea:91:e2:d2:86:cf:c6:ca:15:
af:ba:30:ad:17:b3:bb:54:da:6d:c6:c5:bc:4e:b3:
2b:83:8b:25:e6:6a:b6:18:a0:a5:82:4f:44:84:dc:
70:ae:d1:6c:b6:3a:67:da:4f:7a:a0:7f:3a:56:03:
f6:59:4e:10:49:79:e5:aa:8d:97:5e:51:4f:d6:7f:
8b:e4:69:59:91:a6:2a:10:9b:6b:bf:d4:e5:bc:bc:
6c:15:7f:2e:64:62:72:cb:90:78:5d:3f:60:06:3e:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:2C:CF:04:C0:85:3A:BE:E6:1D:80:70:56:AE:5D:D0:58:E0:EC
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:76:41:a2:b4:cc:14:18:29:b3:fa:4d:b1:3b:a0:23:9d:
33:66:2f:b1:45:0b:87:c3:f8:d5:9f:64:3a:6d:13:d0:88:eb:
dc:87:f2:24:55:83:79:60:8f:a1:71:ed:09:0c:96:10:cd:ca:
27:8c:1a:e0:27:48:d7:e4:54:6d:69:fa:47:af:ab:a5:44:ab:
29:eb:68:38:d3:02:74:51:c1:ba:dd:a4:22:2b:d1:2f:53:eb:
fc:57:bd:2e:6d:09:b4:b6:96:ee:f9:3e:ff:c3:b6:73:c4:56:
a6:fc:9b:22:81:d6:1f:48:29:0b:1c:54:69:86:98:b6:4a:25:
16:1e:e9:3b:9b:08:2c:06:78:f0:ee:a6:65:92:73:12:b3:7f:
22:96:2f:16:7e:1d:9b:88:e4:a0:ca:4f:a9:63:d8:b3:36:f5:
d3:07:3c:e1:7c:64:eb:8f:c1:7b:89:0d:43:1f:e2:a0:05:a7:
91:2c:39:9d:ca:e2:03:a3:d9:b3:4d:b1:2d:e5:0c:88:57:52:
13:42:ef:63:7b:af:d2:7b:aa:64:f8:83:f1:ac:08:7b:b1:5d:
ad:e0:04:53:39:f1:c3:df:76:ae:82:49:26:48:9f:12:3d:5f:
4c:a5:d9:ea:cf:ab:e0:83:b3:9d:a8:12:c2:bf:e2:73:ed:52:
4f:c9:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:51:28 2026 by rpki-client