Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: 2DBFjDE1A1TL+4EdsAtwhTD9A2eHNxFSKi0zPs0qElo=
Subject key identifier: FC:07:D0:BF:BB:82:E3:B9:CA:D9:0F:1A:CE:DC:43:31:DB:B3:1F:BA
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 019F935C28F3348CF222DCDB9D2CEA1F1500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 14C0
Signing time: Fri 24 Jul 2026 09:01:58 +0000
Manifest this update: Fri 24 Jul 2026 09:01:58 +0000
Manifest next update: Sat 25 Jul 2026 09:01:58 +0000
Files and hashes: 1: 0VnbCUUxMHz9IQSGbuoNhNu-3i0.roa (hash: hvzM8HfzEPqtWwc9Q56WgaJxRYytObZ9iUV/CwXnl4U=)
2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: ngiS/xt06GcScil5nX+ZHag/4Rcgz7L9cJd4l0ti0zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:28:f3:34:8c:f2:22:dc:db:9d:2c:ea:1f:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Jul 24 09:01:58 2026 GMT
Not After : Jul 25 09:01:58 2026 GMT
Subject: CN=fc07d0bfbb82e3b9cad90f1acedc4331dbb31fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:d7:d0:89:34:45:6e:fb:c2:9e:50:08:3d:
4f:49:c8:bd:22:12:43:41:75:37:2b:2b:0f:03:42:
72:25:73:6c:c8:c2:60:3f:0f:e0:e1:e1:18:ee:35:
23:59:f6:59:96:ba:ba:ba:22:dc:0d:89:23:82:d5:
97:77:2a:14:40:28:4c:60:73:75:7e:1c:36:b0:62:
28:92:ef:68:8f:7a:df:58:78:68:12:84:f9:39:85:
50:31:47:cf:5b:59:2b:92:7f:f9:4b:0f:c4:b6:5c:
49:35:38:75:26:a4:a2:b4:28:bd:cc:e1:78:23:88:
17:91:d9:a5:25:a2:fb:5d:b4:51:c3:45:b0:15:bf:
ed:a7:1a:d1:48:5b:dc:50:03:92:45:ff:52:32:e6:
4a:88:29:88:5e:af:3b:70:5f:74:74:b5:4e:21:71:
89:c5:42:33:d7:66:97:a3:ca:55:24:f9:d9:ec:10:
ca:89:89:65:53:d3:69:ec:90:69:52:a0:2c:3e:f2:
fe:4c:1c:02:a4:29:13:88:1c:16:56:d5:58:e6:fa:
97:41:70:1e:21:79:b9:d8:71:9a:e2:84:cc:b9:d9:
ff:23:55:2d:4a:cb:0e:88:54:ba:e6:40:8b:a5:d4:
c3:ee:37:19:8e:84:1b:fc:e3:a3:f7:f9:fc:11:ca:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:07:D0:BF:BB:82:E3:B9:CA:D9:0F:1A:CE:DC:43:31:DB:B3:1F:BA
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4c:35:c7:15:66:a3:a9:47:b5:f8:d5:fe:da:40:55:ea:f3:
ab:c4:fe:7a:dc:cf:c0:d6:3e:25:04:31:2c:22:3d:b6:8f:bd:
ae:21:da:34:1e:e3:e3:f8:53:07:58:13:b3:1a:e0:bb:17:ce:
82:35:c6:a9:46:28:70:ad:ef:9a:33:d0:2c:fb:2e:27:72:03:
08:7d:3e:15:cc:fc:8e:a1:4a:bc:e5:4c:55:cb:cc:68:33:dc:
02:28:20:46:73:4b:25:6c:f1:5f:62:2d:c2:40:77:e0:e1:10:
b9:b1:2c:51:26:64:62:cb:33:91:e9:39:90:26:e2:60:52:33:
40:38:fa:72:16:7f:fe:de:04:4f:7e:97:50:31:80:90:2a:e1:
f0:2b:1d:97:7b:62:54:d1:bf:56:e3:cf:ef:4f:92:58:ae:78:
21:bd:c7:fb:6c:c8:09:ee:2b:50:cd:96:12:1a:1f:e2:14:7c:
53:be:ed:bc:59:99:8c:77:bf:6d:19:7f:97:0c:9d:7b:01:d8:
58:fd:3f:b4:50:dd:a3:6a:bb:13:c2:83:fd:48:ed:01:24:c7:
70:d3:97:a8:3c:e7:c8:a3:1a:b9:04:bf:eb:ff:5d:5c:1a:f4:
a5:f0:ea:35:b0:41:70:4f:ea:63:98:41:b9:ce:02:37:3b:0f:
32:73:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:57 2026 by rpki-client