Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: oGJ8Na9f/UllIx9A4A5sLs7cI3sxTaXOFwox9TVVpT8=
Subject key identifier: 5E:16:EF:2B:3F:FA:B8:A6:C6:73:6F:F5:13:74:89:B1:EB:32:3E:BC
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 01A108817B6409C2FBDAE75F198FCE90C478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 1407
Signing time: Sun 04 Oct 2026 20:01:05 +0000
Manifest this update: Sun 04 Oct 2026 20:01:05 +0000
Manifest next update: Mon 05 Oct 2026 20:01:05 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: l6ImNnfRxjcR493RytZi1qYd975l1cE2EsZGITeQz4Q=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:81:7b:64:09:c2:fb:da:e7:5f:19:8f:ce:90:c4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Oct 4 20:01:05 2026 GMT
Not After : Oct 5 20:01:05 2026 GMT
Subject: CN=5e16ef2b3ffab8a6c6736ff5137489b1eb323ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:62:94:4b:9d:6b:f0:0c:14:b9:21:a4:78:
82:23:a2:cc:18:2e:4c:04:73:e2:5d:6b:c2:0d:60:
16:e9:48:7a:d2:ee:2c:03:09:82:af:f9:9f:fe:f9:
0f:ed:5c:8d:aa:72:65:63:99:d1:8e:b5:45:79:3c:
d8:8a:a3:07:b9:f7:74:b6:64:40:b8:c6:b3:69:d1:
5c:26:ab:1c:5e:9d:4b:ad:42:01:49:dc:05:47:6c:
f1:bb:dd:d3:4b:55:35:59:2c:25:bf:67:40:95:d3:
92:2a:e7:f7:55:28:7f:21:59:c0:c4:18:eb:55:d2:
3a:e1:13:da:61:5e:a6:89:f8:36:d2:8c:0c:04:37:
5e:db:36:6e:e0:99:d3:48:ae:ef:47:ee:11:0f:01:
eb:55:6f:a2:29:a9:f2:e5:00:45:a7:28:fb:c1:1e:
f3:27:eb:c0:a8:da:58:39:16:31:79:9a:24:f4:14:
e3:7c:59:ea:3a:3b:4f:45:1a:a1:2f:41:cb:58:12:
3d:a9:e5:9f:70:b3:b6:10:3d:9c:fa:f6:03:bf:5d:
cf:85:01:bd:cb:96:ee:7b:2c:db:76:3a:28:61:f4:
b4:4d:15:86:27:6b:e5:90:9f:b4:38:fb:13:92:4e:
e2:1a:5e:98:8f:3b:42:f9:bd:1a:36:ff:6c:e9:a2:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:EF:2B:3F:FA:B8:A6:C6:73:6F:F5:13:74:89:B1:EB:32:3E:BC
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:54:f9:e1:4d:85:17:3a:ac:ea:cc:d1:75:5c:16:a8:30:8e:
3f:e5:ec:46:f3:a9:7b:2e:70:d5:ae:ec:b9:72:6f:03:96:6f:
9b:b5:38:af:f7:c4:0f:3b:60:eb:0e:00:29:f3:7c:53:ce:31:
03:0b:44:a5:94:3f:03:14:b3:8c:cc:cb:48:ba:e6:2a:1f:24:
3f:c5:e3:4a:3c:ff:74:a4:a0:e9:1e:27:cb:f1:b3:c0:10:c4:
9b:5c:8b:9b:32:0b:cb:76:04:8d:e4:c8:1b:0f:56:f1:73:1d:
7e:a8:52:b3:28:e8:a8:8c:32:c9:30:fa:e7:97:fe:fa:9c:4c:
30:2b:a5:c2:dc:50:c9:2a:42:d4:93:eb:00:a1:de:89:2f:4d:
58:91:5e:8e:50:e2:f2:44:7f:32:d5:63:2f:0c:90:7a:37:85:
69:07:8b:d6:b8:ba:ef:d5:73:cb:81:95:c6:f7:16:67:2a:c7:
05:3e:c9:a2:15:7d:23:fa:ac:bb:13:de:3e:cf:f7:09:22:0d:
d5:2e:56:e1:84:5a:0a:ae:46:5f:b8:9e:71:24:bf:6c:12:a3:
02:3a:b9:43:0a:6c:72:96:d4:09:dd:d6:61:f5:e8:4f:72:28:
0e:2c:1b:7d:b4:a8:6b:71:64:a6:2f:f0:a2:ee:a6:f7:15:fa:
06:88:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:02:22 2026 by rpki-client