Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: sCxzMCQdI4DCX1nahUWu6I6O/fJzzb11woMzbi/93ow=
Subject key identifier: 65:23:0C:2A:C0:42:8B:86:8C:5A:96:47:36:AF:A5:C3:17:D2:7C:A0
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 019F94A4BA4BAF9069BB374BFA2056DF5900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 0C8C
Signing time: Fri 24 Jul 2026 15:00:51 +0000
Manifest this update: Fri 24 Jul 2026 15:00:51 +0000
Manifest next update: Sat 25 Jul 2026 15:00:51 +0000
Files and hashes: 1: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (hash: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk=)
2: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: StFV1YBFWO+vmgxU354+hQk4Lc7lEAmRnCWVSWNy+JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:ba:4b:af:90:69:bb:37:4b:fa:20:56:df:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Jul 24 15:00:51 2026 GMT
Not After : Jul 25 15:00:51 2026 GMT
Subject: CN=65230c2ac0428b868c5a964736afa5c317d27ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:87:5d:90:8c:d8:58:6a:24:d6:27:22:6f:
61:70:11:5f:78:ed:ab:b9:8c:72:87:41:c4:a5:c2:
db:f2:76:fc:c0:dc:1e:a7:cd:4a:4c:c8:15:ae:ac:
82:46:e4:d4:63:40:8e:6d:82:2e:d9:c4:86:a7:04:
30:55:74:b5:1b:42:c8:cd:49:31:c1:1d:e7:03:2e:
b0:86:b2:4e:a9:3e:6e:8c:23:83:ab:a7:4e:6f:35:
51:50:29:17:2b:70:e9:52:bb:fd:80:38:1a:bb:a0:
21:7c:0e:c0:2e:2e:5c:60:bf:32:4b:f3:fe:b2:e6:
d3:97:6a:75:12:7d:a6:dc:de:e8:61:56:aa:7e:27:
45:d4:cf:f6:a4:08:1c:79:c3:54:42:99:68:be:a6:
ae:74:2e:21:23:38:d3:72:8e:89:58:53:50:69:d5:
f7:87:a3:54:a1:98:29:6c:28:25:04:cb:7d:f0:78:
c4:d9:bc:2a:e6:34:0c:84:b1:7e:a2:86:0c:3a:cc:
e6:ec:5a:07:5e:4f:cb:a7:08:2f:87:be:b1:b5:be:
93:8a:02:6d:c1:fe:75:e6:d4:c8:1f:d4:1b:f5:51:
3b:4b:22:2c:31:42:86:dd:dc:04:5c:fe:08:78:d5:
54:f7:22:b7:eb:d8:fe:ec:11:87:ce:99:7e:11:ae:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:23:0C:2A:C0:42:8B:86:8C:5A:96:47:36:AF:A5:C3:17:D2:7C:A0
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b6:77:15:8b:88:1b:6e:68:54:95:5c:fc:0a:44:5d:2e:63:
af:d5:22:ef:8e:82:a2:f0:16:b4:2e:49:d1:d2:31:1d:74:ab:
48:74:f7:b9:49:c5:35:b3:34:44:99:8f:c1:b5:14:dd:5e:7a:
c1:db:33:f6:8d:aa:df:fb:8d:1c:f8:05:d5:81:12:53:13:63:
33:14:c8:ad:27:7f:3e:c3:2c:27:3c:29:96:5d:76:7a:2c:b0:
32:2c:a3:76:97:bc:f8:3a:b4:91:96:a7:a7:67:c9:06:a2:1e:
06:a1:cc:89:26:f5:c1:8d:52:74:24:2e:3a:4c:f9:43:46:c3:
05:10:21:91:e2:75:da:d4:e4:d8:3d:a5:0c:b1:39:fb:52:9f:
b9:68:ea:1b:39:d1:ed:eb:c6:a0:75:47:1f:52:f7:53:a7:4b:
26:41:67:8e:fb:a4:95:9f:f7:35:56:5e:f5:32:63:ce:95:84:
23:bc:e7:49:39:bb:28:07:d6:31:fd:8e:d1:06:8b:ad:ac:28:
ad:f5:e7:56:e6:84:35:2f:be:0f:cf:ff:97:88:95:ba:c6:56:
b6:00:10:8b:92:80:1d:9e:3d:d0:05:bb:ab:20:29:4d:69:64:
00:43:44:6f:8b:95:8e:3e:dd:3d:c5:b2:91:6c:eb:39:b0:ae:
d5:5d:2c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:41 2026 by rpki-client