Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: uf4Aihuqq7keT77INOcCvVkwXCqGpN/XO5CCpnIOyew=
Subject key identifier: 8C:0A:37:DC:5E:E2:A4:CF:23:2E:7B:A4:59:C9:14:2C:BA:3F:98:88
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 019F8F46FE6CA96F1FD5D6FF9C48B3DED82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 08D8
Signing time: Thu 23 Jul 2026 14:00:22 +0000
Manifest this update: Thu 23 Jul 2026 14:00:22 +0000
Manifest next update: Fri 24 Jul 2026 14:00:22 +0000
Files and hashes: 1: J1GYT5rRj5L_N6tZy2ntpItqAlo.roa (hash: LsALbZjhGHRQ6Sb9UqH1fb/SrgtXCL5+zJg+18cqSLM=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: dqq85u6sv6NJczwmlZc8vLnUkjRdbGQB64LWhPzl7yA=)
3: _My6XhMU3zxgGRKHGXcd-n4cvSk.roa (hash: ocTV8bc0q/eClf0jIXDUKVxA8j0B5XwR5lvU8ldB0v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:fe:6c:a9:6f:1f:d5:d6:ff:9c:48:b3:de:d8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Jul 23 14:00:22 2026 GMT
Not After : Jul 24 14:00:22 2026 GMT
Subject: CN=8c0a37dc5ee2a4cf232e7ba459c9142cba3f9888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:a0:3a:f4:ee:e2:b7:b3:06:9b:d5:96:cc:
a3:8c:f0:50:3a:1b:45:fc:c5:6c:42:7f:e3:d5:f8:
4e:e2:49:fc:52:a4:88:3e:4e:9c:2a:3d:c6:59:b0:
8e:07:d3:8a:f3:0f:83:05:ab:d3:f1:f2:e3:fc:48:
b5:71:3f:a9:4a:6d:2d:68:2e:dc:75:7e:6c:5c:a9:
37:e5:5a:be:b2:41:f5:37:98:c4:44:e7:11:05:25:
57:61:58:2a:98:9e:80:b8:b1:f9:5a:c3:59:9e:d0:
82:f5:8d:c3:2d:be:a1:44:31:35:f6:1e:79:3b:12:
7d:1a:2d:82:03:cd:9b:08:fb:ee:31:61:ad:ec:a0:
81:2f:f7:57:97:e3:b5:e0:6c:57:f8:a0:90:4c:67:
7c:18:c4:14:1c:09:1a:07:c1:94:88:0d:68:75:45:
bd:dd:1d:fc:8d:d0:a7:2d:51:e7:ea:77:8c:0a:e8:
29:94:3b:ef:28:44:98:a0:75:62:c9:34:50:fd:41:
92:e0:ed:55:e0:cc:94:04:a6:73:f3:96:c8:82:d1:
60:e3:98:4c:08:87:cd:4d:30:61:4c:23:8f:73:85:
54:10:4f:1b:e4:74:3c:39:a9:fb:38:42:6e:38:d2:
f9:0c:9e:ae:c1:90:48:82:a3:5c:50:f6:b7:0a:aa:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:37:DC:5E:E2:A4:CF:23:2E:7B:A4:59:C9:14:2C:BA:3F:98:88
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2d:dd:72:b4:4e:3b:5d:3b:a1:c7:ee:2d:ae:2e:55:45:fe:
3a:6c:c1:8d:b4:56:84:6e:7a:08:d3:65:47:4b:d9:41:45:b4:
aa:2d:a6:e9:50:e5:3b:5c:2c:2d:66:08:7f:dd:8d:a3:0d:89:
23:ac:1c:e2:9e:ca:cd:81:a6:0f:e9:af:86:96:70:ba:85:d5:
29:7c:71:41:22:e8:e6:74:50:ec:ae:ce:06:5b:8e:42:76:38:
e0:05:81:96:79:16:c4:78:a5:f2:c8:54:77:5a:d3:0e:2a:77:
74:d9:15:ef:3a:87:a6:94:af:6a:1c:73:6f:55:84:ae:09:32:
31:3e:f7:87:ee:fb:78:02:e7:ba:42:95:e2:07:88:6b:9a:d0:
f2:65:21:62:24:84:8c:4a:29:54:77:70:d2:40:ec:b5:88:57:
e9:bf:8f:18:01:c9:00:aa:88:00:86:fc:9d:56:07:6e:80:d8:
22:08:ca:87:c1:f4:e7:e4:c3:8b:64:83:2e:81:97:4f:3e:9a:
eb:30:ea:e7:76:e4:d0:b4:65:8c:01:ce:ba:24:23:fa:4e:56:
92:01:6f:4a:ec:b8:de:5d:d2:e0:1f:e5:8e:d1:b9:38:d2:3a:
8e:40:f0:53:96:e3:ef:e8:74:67:8a:aa:bb:08:7c:e9:d9:7e:
0d:bb:36:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:58 2026 by rpki-client