Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: ofPyqW/bJOb562k+DnrTH/hEncBqnVdEdZKFd61aBl8=
Subject key identifier: 64:A8:EC:44:18:91:DD:68:A1:EE:39:13:52:89:44:C7:8B:E2:8F:DF
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 01A11E9B1B6C9429CC5F2BFD91AD24BAAC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 11FB
Signing time: Fri 09 Oct 2026 03:00:43 +0000
Manifest this update: Fri 09 Oct 2026 03:00:43 +0000
Manifest next update: Sat 10 Oct 2026 03:00:43 +0000
Files and hashes: 1: 59YcII7vwSrelszgVXfE1Zyv6ic.roa (hash: q6jTMI6TImBNKUCWPMApFyq9F6Fxj9YmbzWV3XM+69w=)
2: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: Tf88Epp995NNQ+ZeanQRpB/58rP8NTX8h8EwnDLcZSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:9b:1b:6c:94:29:cc:5f:2b:fd:91:ad:24:ba:ac:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Oct 9 03:00:43 2026 GMT
Not After : Oct 10 03:00:43 2026 GMT
Subject: CN=64a8ec441891dd68a1ee3913528944c78be28fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:0e:bd:f6:99:5a:87:1a:92:10:af:0e:c1:
7f:40:6a:74:ee:5b:d6:b9:92:6f:fc:8e:7c:7b:15:
99:43:31:98:2f:de:cd:a7:e3:0d:e6:35:af:bb:e8:
2c:6e:6c:39:30:4d:da:c8:ab:ca:53:90:1a:2e:69:
0a:f4:d7:7c:78:dc:2e:66:da:78:77:c1:d0:e9:f9:
4e:34:42:46:52:7c:97:b6:63:70:41:3e:ce:d5:53:
97:33:1a:46:4f:25:a7:d3:14:36:0a:2b:df:46:20:
8b:9a:b8:84:34:61:94:62:10:de:82:2b:b5:b0:64:
22:db:64:7b:a0:e9:bc:5c:bd:14:58:bf:0c:2a:ea:
78:e8:c2:08:4f:84:63:4a:74:13:86:4e:96:d6:47:
70:b9:25:3c:96:ad:3d:20:1b:dc:92:3a:3a:97:20:
cc:18:2f:15:a0:f7:06:dc:23:3e:af:8e:f7:03:42:
16:17:3d:bf:56:70:d1:76:ed:65:4d:3e:89:ee:f1:
4a:71:f9:47:00:86:09:cb:aa:93:32:88:3c:20:94:
f9:5c:05:83:27:c1:e2:ef:6a:ac:d0:86:c6:94:b0:
49:a5:40:eb:01:49:1d:79:80:ae:0f:c2:08:c4:1a:
1e:e7:bd:2f:d1:69:c9:c1:59:f5:e1:95:3a:35:db:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:EC:44:18:91:DD:68:A1:EE:39:13:52:89:44:C7:8B:E2:8F:DF
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:aa:5d:8f:20:cf:0d:18:0b:b4:13:22:99:f4:a3:96:c2:b0:
89:c9:f0:ab:3d:81:1b:7b:a0:f4:23:d4:ec:39:d4:98:5d:0e:
f1:b9:ef:f8:ea:93:6a:45:69:eb:3e:09:7d:41:e0:47:72:fd:
28:41:d8:02:77:7f:02:7a:5c:b5:c3:31:3c:b3:26:e7:80:ff:
4f:7a:02:a7:58:b5:03:7b:4c:a5:b0:bf:f6:c0:f6:d2:8f:3e:
67:7e:d5:2e:22:f6:31:09:da:92:bb:28:f0:58:99:8f:93:ed:
b2:91:71:30:d9:bf:bc:e1:75:00:25:9b:c0:30:60:06:32:f9:
61:80:71:01:f0:12:7c:a1:b3:6c:a6:89:2c:87:ff:56:8f:aa:
61:c9:cf:c2:93:1c:7a:fb:91:ed:c1:2d:17:88:ac:a8:b1:74:
02:ba:3e:b1:8c:27:40:7a:23:e4:d1:72:94:24:4b:18:57:4b:
d5:a2:b9:c7:ea:78:18:c3:50:af:8c:8d:a4:03:9f:4a:20:ec:
22:b8:f4:b8:3a:2b:ff:77:69:1c:cd:e6:a0:2c:0f:77:9a:e7:
47:2a:65:13:83:b7:7b:85:bc:2d:ff:17:31:90:47:3c:37:99:
0d:f9:f1:8b:0a:a1:34:02:5f:17:f8:a5:13:07:08:0f:be:58:
14:f2:ec:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEemxtslCnMXyv9ka0kuqyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTVlZDhlM2VjYzkyYTJkZThjODBhYmU5YTgxOTVkNWZm
OTk3ZTYwHhcNMjYxMDA5MDMwMDQzWhcNMjYxMDEwMDMwMDQzWjAzMTEwLwYDVQQD
Eyg2NGE4ZWM0NDE4OTFkZDY4YTFlZTM5MTM1Mjg5NDRjNzhiZTI4ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseYOvfaZWocakhCvDsF/QGp07lvW
uZJv/I58exWZQzGYL97Np+MN5jWvu+gsbmw5ME3ayKvKU5AaLmkK9Nd8eNwuZtp4
d8HQ6flONEJGUnyXtmNwQT7O1VOXMxpGTyWn0xQ2CivfRiCLmriENGGUYhDegiu1
sGQi22R7oOm8XL0UWL8MKup46MIIT4RjSnQThk6W1kdwuSU8lq09IBvckjo6lyDM
GC8VoPcG3CM+r473A0IWFz2/VnDRdu1lTT6J7vFKcflHAIYJy6qTMog8IJT5XAWD
J8Hi72qs0IbGlLBJpUDrAUkdeYCuD8IIxBoe570v0WnJwVn14ZU6NduQxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSo7EQYkd1ooe45E1KJRMeL4o/fMB8GA1UdIwQY
MBaAFFil7Y4+zJKi3oyAq+moGV1f+ZfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5Nzct
MDA2N2JjYWYzNzcwLzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5NzctMDA2N2JjYWYzNzcw
LzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMapdjyDP
DRgLtBMimfSjlsKwicnwqz2BG3ug9CPU7DnUmF0O8bnv+OqTakVp6z4JfUHgR3L9
KEHYAnd/AnpctcMxPLMm54D/T3oCp1i1A3tMpbC/9sD20o8+Z37VLiL2MQnakrso
8FiZj5PtspFxMNm/vOF1ACWbwDBgBjL5YYBxAfASfKGzbKaJLIf/Vo+qYcnPwpMc
evuR7cEtF4isqLF0Aro+sYwnQHoj5NFylCRLGFdL1aK5x+p4GMNQr4yNpAOfSiDs
Irj0uDor/3dpHM3moCwPd5rnRyplE4O3e4W8Lf8XMZBHPDeZDfnxiwqhNAJfF/il
EwcID75YFPLssg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 11:47:36 2026 by rpki-client