Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
File: WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json)
Hash identifier: BO1LbNhkYCdxPg5jZ0faN2Ef/wdfckC6mRQ92t88qjY=
Subject key identifier: DB:0E:84:22:B8:D9:6D:CD:96:43:93:7D:10:24:61:14:79:DA:F7:D8
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial: 01A0D5396A983595DE4A762517CF2DFEF6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 21:01:44 +0000
Manifest this update: Thu 24 Sep 2026 21:01:44 +0000
Manifest next update: Fri 25 Sep 2026 21:01:44 +0000
Files and hashes: 1: 1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa (hash: fRzTkPN8a27bua2wzuTpxH2x1y519ujmqn10IN10rFw=)
2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: XqZ/cOC81MXzUWuixtwLpFsRN3ks44TAkOqfuXQg218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:6a:98:35:95:de:4a:76:25:17:cf:2d:fe:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Validity
Not Before: Sep 24 21:01:44 2026 GMT
Not After : Sep 25 21:01:44 2026 GMT
Subject: CN=db0e8422b8d96dcd9643937d1024611479daf7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:ce:2b:6f:27:2a:c4:45:66:d2:7c:64:8c:
e5:fb:68:1d:f1:9b:0b:18:5a:5a:10:9f:fe:e6:92:
44:e5:cb:84:7b:ad:1a:72:1c:a2:e7:88:b2:6e:00:
aa:3e:64:4c:28:c2:d0:3f:04:12:2c:59:de:ae:1c:
db:98:6d:a8:b8:e4:d7:0d:94:ee:72:7a:36:e8:f4:
e6:27:99:9d:3f:35:aa:23:e6:15:77:ec:1e:15:12:
5c:a1:fd:5c:b9:f4:06:0c:67:b6:3a:ec:37:01:e5:
5e:d1:67:cc:25:d1:e1:9e:08:4c:c5:4c:a5:2b:eb:
67:39:f4:bd:eb:f2:f7:17:70:04:5b:b8:9f:de:7c:
4c:27:bd:5c:02:aa:21:00:e8:a3:6a:b0:32:83:c4:
6c:9f:f6:5f:28:e7:65:41:6f:cf:31:d8:1d:63:db:
5f:80:f7:2b:f8:8f:c4:00:1f:6b:91:05:b2:2b:b9:
42:19:dd:c3:f0:94:48:9e:af:ef:90:c9:4c:dc:f4:
33:58:1c:0f:d5:24:d1:41:86:e5:1c:06:3b:33:f1:
a0:fb:8e:56:55:af:64:05:18:91:92:fd:2b:1e:7e:
e6:ba:0b:41:67:1f:b4:8e:5d:84:54:34:51:f8:be:
bf:c7:fd:0f:f2:87:b6:e7:01:70:17:7d:c2:7a:2d:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:84:22:B8:D9:6D:CD:96:43:93:7D:10:24:61:14:79:DA:F7:D8
X509v3 Authority Key Identifier:
keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:88:56:4e:82:6d:8e:ba:79:cf:bd:2b:71:c9:23:b6:15:58:
a3:d9:bd:11:8f:94:a5:7b:4c:45:0f:66:32:9e:c9:5d:05:58:
b0:1d:68:27:75:5f:bc:6e:ae:1c:27:53:2b:68:8f:23:34:a1:
b6:6a:13:df:0d:8f:74:9e:b8:44:d8:c3:bb:f6:6d:4d:66:a1:
0c:7d:e8:2b:39:0b:c4:f1:95:b3:9f:a1:b9:87:45:81:bd:e1:
6a:ec:4e:44:dd:1c:22:01:10:f4:f8:9e:37:2d:e8:c5:4b:db:
dd:99:4a:a6:a4:b7:9f:49:c7:50:cd:3d:63:f6:8b:0d:dc:e9:
6a:61:62:e9:6b:54:05:90:97:f9:19:f2:92:98:c0:d8:d6:91:
a6:f4:a5:18:3d:25:5b:c4:23:a8:9e:8b:7c:95:20:84:c1:11:
d6:df:d1:87:5e:81:b7:e5:16:49:e6:79:f5:ee:c0:dc:7a:a4:
5d:a4:97:d5:65:1f:3e:66:2d:75:78:e1:37:9c:4a:40:8b:f6:
6a:a0:95:53:21:39:f3:01:93:55:e9:6d:e1:02:5b:4a:bd:ab:
54:ef:a1:12:22:4a:00:bf:0d:67:21:55:9c:a5:55:81:35:3f:
a0:a2:0e:6a:6d:d1:ff:95:6d:c4:56:cb:78:a5:47:83:14:5a:
d9:ba:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:35:38 2026 by rpki-client