Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: 5bnGGhUKYIb6A7x6Q6MYIE3fhASH0s0vzwxQoK8CRyg=
Subject key identifier: 62:76:50:A4:05:BF:E8:C1:F5:99:25:D0:EA:DB:FD:BF:F3:9A:04:2C
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 01A0DDCE195DECD0CA37DB1FD35ECCB968E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 1A6E
Signing time: Sat 26 Sep 2026 13:01:06 +0000
Manifest this update: Sat 26 Sep 2026 13:01:06 +0000
Manifest next update: Sun 27 Sep 2026 13:01:06 +0000
Files and hashes: 1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: isoWOlE4S83+nQnkru8nxG+zkNdJ8/bxhUFEpvOynIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:19:5d:ec:d0:ca:37:db:1f:d3:5e:cc:b9:68:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Sep 26 13:01:06 2026 GMT
Not After : Sep 27 13:01:06 2026 GMT
Subject: CN=627650a405bfe8c1f59925d0eadbfdbff39a042c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:ba:49:63:64:69:8c:a0:70:94:b3:9d:b3:
5c:98:ba:98:32:c1:67:39:12:7a:22:37:d7:1d:ab:
b8:fc:e6:5d:fd:b4:d8:30:e8:aa:79:64:4a:6a:bd:
d4:60:00:6a:73:3b:94:5b:5b:37:ae:d3:d6:f2:20:
a1:20:cc:20:da:a0:4b:8e:f0:f7:10:53:b1:89:f5:
19:5d:81:a0:64:3c:cd:96:fd:51:e4:49:4f:09:e7:
92:72:0d:e1:e3:9c:e3:80:8b:51:8e:9f:ec:fe:46:
46:64:69:86:1b:6c:31:08:52:09:98:86:58:3e:ad:
af:fa:e4:13:1d:98:a7:18:35:23:63:22:91:5d:87:
ac:75:ae:00:f6:ca:ec:2a:ab:ee:fa:f6:03:97:1c:
ad:14:48:66:c6:6c:ae:73:51:e5:d9:41:59:f4:ef:
56:6a:1a:1b:d5:08:e8:2a:2b:22:fe:99:5e:0a:6c:
f5:78:f3:56:12:30:de:fe:b1:22:e3:43:3f:ca:10:
0f:cd:b1:03:f6:0e:41:8f:d9:57:77:56:fb:bb:f1:
6a:aa:3d:46:ca:fb:e2:5f:14:5b:fe:d9:a6:9e:83:
41:17:08:75:0a:12:72:24:14:e9:f8:c1:b2:62:02:
e2:79:ae:26:60:a5:48:3a:fc:71:62:c3:70:64:93:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:76:50:A4:05:BF:E8:C1:F5:99:25:D0:EA:DB:FD:BF:F3:9A:04:2C
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fd:74:c2:af:e6:c2:82:ae:30:40:a9:6c:d5:33:80:a0:11:
b0:16:c7:d3:19:80:3f:25:4f:ef:4e:50:81:60:5e:d1:cd:38:
24:24:6e:64:f0:90:40:6c:87:7e:d4:12:b5:9f:20:1d:45:64:
d6:7d:4c:5d:aa:a3:8e:9c:9e:72:1d:b5:9e:ef:98:1c:fc:88:
c1:72:ef:b6:76:7c:33:62:d0:fe:4f:b1:e3:09:e3:c8:65:fc:
74:66:ff:10:7f:3b:8a:ca:d1:63:44:59:9d:7e:7b:b8:d0:bb:
c9:a4:3d:48:c1:18:2c:cb:81:3a:78:21:ad:d6:5c:73:95:08:
fb:74:02:6f:76:b3:00:2c:01:46:1e:13:b9:60:b7:d1:65:97:
df:c4:a1:b7:64:9f:f6:9b:55:db:2a:dd:0f:a8:59:9e:b9:f4:
c9:2b:44:18:dc:4e:c7:e2:83:c2:ee:32:c3:47:4f:8f:92:ad:
1b:22:c4:f9:3d:49:fe:84:a6:7b:7f:7e:ba:6a:93:48:b2:4f:
e7:9d:08:ca:43:06:8a:94:89:30:96:7c:a6:03:45:82:f0:7f:
18:e6:f4:d9:0d:ec:69:b4:95:c0:c4:9d:1c:10:16:36:d6:56:
71:b6:29:98:11:a1:98:40:1b:4b:c5:f7:6f:82:32:f7:43:a3:
f8:5c:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:13:13 2026 by rpki-client