Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
File: WqtKKPwphT3SPHa9Hi94zpmZoVo.mft (raw, json)
Hash identifier: mgXbhTaSrxYcq2LjcrcMavMiOiRmy5t4fD2txlwi94E=
Subject key identifier: 88:ED:BA:28:5E:1A:D3:2D:01:DA:8D:D0:BA:02:B1:78:B3:1A:BC:4A
Authority key identifier: 5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
Certificate issuer: /CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Certificate serial: 01A10A02453E15884A264E8C89566DAA46F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
Manifest number: 0412
Signing time: Mon 05 Oct 2026 03:01:23 +0000
Manifest this update: Mon 05 Oct 2026 03:01:23 +0000
Manifest next update: Tue 06 Oct 2026 03:01:23 +0000
Files and hashes: 1: EMk1x-Yq2E7ICBWcn7fe0Nq2L0Y.roa (hash: D2NqPAH29xRvH/d4YHn/OWVA2W3ni6yvZbORqpqzPi0=)
2: WqtKKPwphT3SPHa9Hi94zpmZoVo.crl (hash: j0skQVgLOn5y2fVseZpNsbtqp7XipvcTAzdjBiEW8mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:02:45:3e:15:88:4a:26:4e:8c:89:56:6d:aa:46:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Validity
Not Before: Oct 5 03:01:23 2026 GMT
Not After : Oct 6 03:01:23 2026 GMT
Subject: CN=88edba285e1ad32d01da8dd0ba02b178b31abc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:89:0e:72:b3:8f:56:43:ca:53:7e:fa:17:
86:0c:48:9d:46:5a:07:0a:82:00:bd:08:04:7a:77:
20:b5:13:35:58:ec:96:b4:a6:16:b3:3b:48:fa:0a:
53:92:56:e3:b2:a7:1c:f7:36:a2:cc:b2:ca:2d:ac:
f7:e3:7b:7b:9b:4e:9d:85:c2:bd:2b:b1:d6:07:09:
77:7c:62:28:74:e4:c3:63:0e:c3:3f:70:42:2f:2c:
ac:af:99:af:bb:d2:be:01:ba:45:04:e1:e2:27:f3:
ce:8a:1f:f2:1e:15:73:c5:dc:4a:55:1c:d1:d9:95:
0d:45:5b:e2:b9:94:5b:25:00:69:5c:ce:d6:59:4b:
b7:60:7a:a4:13:64:19:df:ba:ca:24:3f:02:f8:39:
ab:28:ec:c3:76:32:2c:5f:5d:01:2e:2f:82:f0:27:
fe:c4:6c:c2:4d:72:4d:5c:b1:36:34:8f:c5:84:3f:
60:3c:2d:e2:98:81:df:e4:85:fc:bc:2f:2a:9e:26:
c7:b8:e4:bd:b3:2a:2f:66:91:39:95:ae:63:bb:2a:
0c:f5:28:20:68:93:f3:dd:57:d3:c8:97:a9:38:9c:
a0:50:eb:b5:68:80:39:43:41:96:df:7d:dc:a5:59:
e7:5a:2e:8c:72:e7:a6:bb:0c:6f:c3:6d:a4:a7:9b:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:BA:28:5E:1A:D3:2D:01:DA:8D:D0:BA:02:B1:78:B3:1A:BC:4A
X509v3 Authority Key Identifier:
keyid:5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8f:a0:58:da:d1:d8:da:ce:4b:a1:a6:b8:02:0b:e5:b7:c6:
ae:9e:38:bd:d1:d7:b3:40:e5:1c:92:46:42:6f:78:36:58:6d:
49:57:47:c7:1a:d7:18:7f:83:d9:88:73:eb:94:31:b4:ff:9a:
6c:4f:85:51:9e:58:03:b8:bd:ba:17:31:01:e7:23:d6:53:1d:
42:23:01:9d:5e:d3:0a:72:89:0b:72:e7:ca:82:4d:f8:ee:fe:
13:40:95:26:1b:86:7e:56:79:a7:3b:36:a0:56:90:b4:77:40:
02:dd:84:a3:f2:08:36:96:63:77:4a:c3:ef:0c:cf:0f:bb:78:
d3:15:45:3e:b8:06:68:0d:e2:97:ba:d2:ee:25:e0:ed:0e:c7:
88:27:8f:7d:7a:43:99:61:a1:0c:52:11:6b:28:9d:f9:2c:c4:
9d:85:f0:24:42:dd:fa:02:da:f0:86:08:36:a9:cd:3a:e0:33:
d7:6b:af:64:fb:b0:07:b1:56:12:b4:5d:42:47:48:10:64:aa:
a4:db:5c:73:d9:a1:5a:b3:1f:17:e7:33:d3:ca:08:00:a9:8a:
6f:20:c3:f4:de:04:9a:54:00:c1:5a:88:e6:52:60:22:00:79:
3b:6d:78:85:3d:3d:76:8d:e1:85:05:f1:29:fc:1a:af:8c:8b:
e0:d0:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:13:47 2026 by rpki-client