Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: Y/M7WIVyPoK+vf3Bnn04rSdf9QVxnq90kujlHOYWXvw=
Subject key identifier: 5C:16:85:F1:EC:F1:AA:55:EA:8B:0B:0D:41:A3:94:70:8F:E1:62:3D
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019F95B701024B3E6D6BF166B9C0E8DD1C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 1347
Signing time: Fri 24 Jul 2026 20:00:26 +0000
Manifest this update: Fri 24 Jul 2026 20:00:26 +0000
Manifest next update: Sat 25 Jul 2026 20:00:26 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: YvhckFtMsbNcqwcNYn6qavPFWdCL6Mu+ZxSMiihTzt0=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:01:02:4b:3e:6d:6b:f1:66:b9:c0:e8:dd:1c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Jul 24 20:00:26 2026 GMT
Not After : Jul 25 20:00:26 2026 GMT
Subject: CN=5c1685f1ecf1aa55ea8b0b0d41a394708fe1623d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:0d:a4:58:c2:f5:19:59:91:7c:5a:10:da:
56:0f:6e:e8:cb:6f:36:f1:e0:45:bd:9d:c8:82:fc:
43:64:e8:86:9e:7f:4a:e3:a3:81:ec:fe:63:7c:ae:
04:5a:62:4f:7f:55:e4:6e:25:b9:f1:26:70:09:c7:
f0:57:a2:f2:42:86:ce:e9:6b:3f:4f:8f:60:d3:e2:
18:e8:79:15:b6:85:51:29:4b:71:f5:5d:32:64:a4:
13:2b:c1:38:4b:81:87:ad:a7:d5:c4:f0:da:42:30:
4d:0a:d1:fe:e3:b2:78:a2:83:db:05:01:96:9c:00:
f0:34:61:26:fe:61:8e:57:b7:67:8e:b1:51:d2:a6:
1c:d4:99:a4:cc:af:c8:fd:64:91:43:e3:2a:af:00:
24:1a:3a:81:7d:15:7d:0c:5b:83:10:45:3e:a0:d8:
37:7a:cc:0d:aa:b7:3e:ed:98:dc:51:a4:ed:f5:2b:
27:56:e6:78:e2:40:3d:6e:cf:5a:8a:bc:f8:f2:2d:
62:52:a1:7c:b9:6b:e5:77:63:86:bc:74:63:c1:60:
d4:54:81:c7:34:8d:33:3c:b1:f0:4e:94:8f:42:26:
e6:3a:f3:ec:39:e1:5b:f1:13:0e:2d:44:fa:9d:3e:
82:71:cc:65:fd:1e:25:4f:8a:ea:9f:85:bf:bc:38:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:85:F1:EC:F1:AA:55:EA:8B:0B:0D:41:A3:94:70:8F:E1:62:3D
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e7:cf:eb:e5:51:2e:f6:dd:e6:51:36:5d:d1:36:07:fa:9d:
9e:74:b5:53:af:1e:b2:c9:bb:3e:5e:8f:9b:9b:2f:66:03:55:
ca:8f:ce:b0:76:9e:05:d5:96:44:ce:39:35:3e:58:73:57:2b:
ff:79:c0:18:78:bd:0d:a7:0a:3f:0c:bc:80:04:d7:e6:dc:b0:
b6:6b:5c:93:bf:46:11:f2:62:88:ee:75:da:35:b7:48:0f:dd:
6a:70:12:bc:cf:35:49:e3:25:36:3e:dd:c1:11:83:d6:3a:12:
86:07:48:ef:a5:1d:b6:eb:35:6a:42:71:8a:57:ac:35:16:48:
ac:4c:1c:83:b0:fa:a4:bc:86:4d:83:2c:e9:0b:1a:c2:ef:73:
68:82:6c:2b:45:9d:b3:2d:4f:10:2e:cf:da:b0:b9:21:8f:ee:
9a:ca:7a:f0:fb:cb:b2:bc:3a:ad:4b:f1:cf:f9:9e:e1:b8:12:
d3:f9:60:e2:8b:1c:ff:48:af:a9:01:c8:da:aa:ce:df:8f:81:
6c:c9:8a:29:f0:7f:a3:c0:32:de:bc:dc:03:b6:fe:26:0c:63:
85:8d:1a:af:b8:20:b3:05:2f:35:41:ac:28:f0:58:3d:d0:10:
af:fb:d8:a2:b6:2c:f2:22:8f:f5:c1:17:3e:d0:d7:32:67:63:
a0:42:86:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:49 2026 by rpki-client