Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: DD1E1ohwmtsONHxjj0KcF16YWlOIPrfrGHI9xRzehxg=
Subject key identifier: 9B:4E:75:DC:9A:29:2D:D3:16:4A:2C:BC:E7:9E:35:E8:C9:72:39:22
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 01A0DB04033ACD14D1E2D39639FCD0B7CF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 0D35
Signing time: Sat 26 Sep 2026 00:01:08 +0000
Manifest this update: Sat 26 Sep 2026 00:01:08 +0000
Manifest next update: Sun 27 Sep 2026 00:01:08 +0000
Files and hashes: 1: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (hash: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk=)
2: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: E8vHLKb79lgv+R1iSIK3Go2VtoQatZtGb8lAfEbGoRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:03:3a:cd:14:d1:e2:d3:96:39:fc:d0:b7:cf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Sep 26 00:01:08 2026 GMT
Not After : Sep 27 00:01:08 2026 GMT
Subject: CN=9b4e75dc9a292dd3164a2cbce79e35e8c9723922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:a0:db:9b:81:68:20:4f:4b:cd:2f:0c:a7:
f0:7e:ee:a5:1d:d3:bf:ac:96:46:d7:3b:0e:b4:fd:
00:87:66:9c:ae:b9:73:81:57:8b:15:bc:9b:b5:fc:
68:5d:38:6d:5f:e6:0b:8d:00:7e:a7:7e:8f:f5:34:
3f:69:42:d2:d8:3a:c4:0f:d4:06:0b:a1:7c:11:3d:
08:ab:ef:12:b8:13:6a:bf:72:83:95:d8:e9:c7:02:
5b:99:38:da:0f:cf:f7:58:ef:15:af:f3:0f:c3:00:
60:c9:6e:64:e7:44:a2:c3:a0:f9:04:01:c3:ee:e1:
97:59:10:8a:df:df:2d:e8:ab:fa:b6:ff:69:6a:b0:
a4:a9:b8:b3:7e:95:85:0a:5d:de:3c:bb:99:80:bd:
f0:75:9e:ed:f6:4e:ea:0d:49:1b:32:6a:26:41:d5:
3a:cf:92:1f:e9:26:ca:32:b7:64:08:b8:8a:3b:01:
e9:16:a3:69:54:a2:e4:79:a4:de:df:24:43:68:29:
13:37:fb:ed:77:01:40:8e:36:8b:fd:9c:b4:b6:74:
dc:62:bb:b5:36:dd:fa:72:b7:29:de:88:c8:cb:1d:
24:ac:22:4b:e8:98:2e:2b:3d:be:ab:fc:a3:88:c6:
ff:46:93:b7:d5:86:9c:48:0e:58:52:c2:a6:01:6b:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:75:DC:9A:29:2D:D3:16:4A:2C:BC:E7:9E:35:E8:C9:72:39:22
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b4:72:71:a7:98:b1:4b:ca:3c:2a:e5:fb:6f:e7:65:de:2a:
36:cd:f0:20:e1:52:8f:77:26:4a:b9:6d:7e:ce:46:cd:bc:a5:
48:cc:2c:fe:be:91:d0:ec:a3:e9:02:44:c1:8d:57:fc:a2:76:
93:cd:f2:cd:f3:be:9e:60:e6:dd:b3:e9:da:5d:bd:39:4d:e9:
e3:ca:0b:3a:4e:0f:11:78:4e:4f:3e:c6:ab:73:75:e8:08:ea:
45:92:47:b8:cf:1c:70:33:1d:9b:f9:65:f5:08:7d:e9:e2:e8:
d0:28:c2:fc:e8:89:90:5b:72:78:ce:b5:59:2c:37:9d:c7:1c:
c9:03:0b:89:cc:5b:f1:d0:9f:ac:06:f5:1f:f7:a6:22:fe:da:
c5:82:37:bc:39:27:7e:f9:8e:b8:cb:92:e6:63:23:e6:21:7b:
0a:47:7a:ff:c9:9c:a4:be:f1:a3:82:af:e2:a0:39:ed:e9:ae:
12:b3:ba:96:62:39:91:70:6b:e4:d6:38:4f:13:f4:39:96:c0:
61:9f:6f:46:a8:b3:5c:ee:ee:a2:05:3e:4b:82:09:f1:1c:84:
c1:d3:36:1a:30:5f:fe:81:8a:74:5a:08:c7:29:14:d7:0e:e8:
66:02:73:67:dc:cb:1a:f6:2e:c2:6e:c7:93:84:a8:ad:5e:09:
9d:91:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:03:47 2026 by rpki-client