Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: i2TyiXgLhJf0R6/e2lsaWHofkhmCsPx9XacyDc7vTsc=
Subject key identifier: 71:49:63:8F:C3:B8:17:0D:A2:19:DD:5D:2F:9D:79:C1:FF:C1:2B:35
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 01A0F832899EFA78E11D27C85F46A50B5C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 1A8B
Signing time: Thu 01 Oct 2026 16:00:56 +0000
Manifest this update: Thu 01 Oct 2026 16:00:56 +0000
Manifest next update: Fri 02 Oct 2026 16:00:56 +0000
Files and hashes: 1: Sq8500KhQRP1l10Z1msF9d2ysQw.roa (hash: ReVbiMOhRmv6RCWB0b28trkVO+ZZwLBYu/yBa/+30Dw=)
2: V6JPaEYI_A430h4XiTPHTg3pH9Q.roa (hash: cJrgnz2SqNu03F38EzPAz9CCWIpMgD1Jz/dKPwQAOAg=)
3: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: 0I87YzPoIww9pNrBHhAJGrpJUCOURblJxNDnI81TH/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:32:89:9e:fa:78:e1:1d:27:c8:5f:46:a5:0b:5c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Oct 1 16:00:56 2026 GMT
Not After : Oct 2 16:00:56 2026 GMT
Subject: CN=7149638fc3b8170da219dd5d2f9d79c1ffc12b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:6c:6c:40:ca:a8:22:63:1c:bd:f9:6f:1e:
5b:a3:56:0b:ed:6d:b9:99:ac:97:04:f3:d5:a7:ca:
06:97:f7:e3:a9:99:09:e4:eb:27:f7:8d:f4:ca:a1:
1d:b9:8e:b4:72:54:28:ac:12:a0:d3:76:20:8d:dd:
a2:63:d5:a1:99:be:be:9a:3c:d6:f5:d9:04:6d:d4:
ae:5c:de:a6:40:68:a8:a2:38:1d:a2:3e:6d:09:80:
45:b4:11:e6:b8:fb:bb:29:79:3c:16:ec:24:5b:53:
76:cf:c7:e8:5f:cd:9a:d1:1c:d1:e2:b2:a0:05:ee:
12:6c:03:a9:7c:46:a5:e1:34:5a:c3:9e:7a:d1:08:
47:af:77:a9:67:68:48:6c:a7:e1:79:18:50:53:1f:
23:87:27:34:0a:34:74:a5:f9:f8:6d:33:4d:ba:98:
ca:16:4d:00:19:73:6d:3d:da:07:f9:1a:80:20:fe:
1b:52:e8:62:9c:7b:15:23:f9:12:e8:5b:f5:3a:c1:
e3:f6:a4:11:d6:c0:81:8f:79:b7:c4:38:1a:a9:79:
33:2b:ef:67:72:91:45:1b:95:9f:22:94:a2:34:36:
bb:27:1b:ca:95:2f:47:de:6c:ad:fb:7f:1e:bb:33:
49:a5:53:d8:86:9f:18:fe:8d:65:b5:28:61:e5:31:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:63:8F:C3:B8:17:0D:A2:19:DD:5D:2F:9D:79:C1:FF:C1:2B:35
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:16:58:84:75:fe:4d:98:b8:b8:91:a9:1f:a4:5a:de:26:90:
de:56:7b:ad:7f:7d:b8:33:d3:90:38:a4:ef:94:16:b5:ae:d0:
3a:8b:3c:41:1a:84:2f:4d:57:b1:3d:6c:39:f4:5b:02:5b:46:
b9:81:71:cd:21:a9:c1:1f:f9:03:78:7c:50:04:9c:ea:3d:d5:
eb:9c:4b:3c:b6:58:1c:69:1d:13:4e:20:36:b7:4e:da:de:b5:
0f:2a:69:13:6b:2c:f9:fa:c6:9f:c0:3f:1c:70:ab:c2:68:39:
2b:dc:0e:d3:3d:5b:df:e8:b2:6d:0b:d2:68:4d:27:77:4a:4f:
dd:55:f6:c7:2a:3b:b8:ef:19:9b:51:e3:d9:67:76:d6:07:45:
ab:39:98:93:76:e7:50:0f:b6:da:1a:e7:a8:f7:90:39:d1:93:
d5:76:a5:25:11:69:d6:0c:68:70:3a:99:aa:85:8e:30:f9:73:
47:35:32:5d:b7:54:5d:6f:c7:c2:40:44:91:e0:5e:7b:75:cf:
77:c1:86:13:fe:56:5a:4a:ee:be:e2:6b:6b:8e:93:4b:1e:e1:
99:5a:a9:6a:e5:de:be:85:3c:0e:8b:d0:6f:c9:3b:49:66:d5:
be:53:4b:1a:ed:a4:fb:2f:be:1b:e7:70:34:ee:3b:92:c5:d7:
e6:b0:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:58:28 2026 by rpki-client