Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier: qaNmzKq/fW1DPbEVmvXNyTEIg3tE1Y3Q021ISLbfUuM=
Subject key identifier: 4E:A1:46:5B:3D:DB:A9:F4:FA:EE:D7:D5:39:D0:44:34:94:80:51:D0
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 01A0C8C64837C1B9B31CDFD6DE408366817F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number: 1021
Signing time: Tue 22 Sep 2026 11:00:32 +0000
Manifest this update: Tue 22 Sep 2026 11:00:32 +0000
Manifest next update: Wed 23 Sep 2026 11:00:32 +0000
Files and hashes: 1: RQWnJPu94hc5D5O6bWePWkgHj8k.roa (hash: H6KkLd/CfuStlDzKAZnOMPQq5KQ8X+oHLBoePa/1Jkk=)
2: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: gF3rV+YZNTSsl74Vjb1j8Pb9BFzcfKlujCCU36SiJN4=)
3: qZTFDchkILhj7kGV1ckQbjm6EM8.roa (hash: t3O4AqRrM3ioDjFfkL8yzXf/zjvA7R8cp1XCSm0ZDY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:48:37:c1:b9:b3:1c:df:d6:de:40:83:66:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Sep 22 11:00:32 2026 GMT
Not After : Sep 23 11:00:32 2026 GMT
Subject: CN=4ea1465b3ddba9f4faeed7d539d04434948051d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:30:d7:d9:15:1f:c4:83:d6:44:82:8b:e2:
82:6b:66:55:f6:99:f5:b3:ab:d7:49:83:3d:af:8a:
9e:fa:ed:20:5f:a2:08:a9:ca:94:c0:71:f8:dc:fd:
8e:55:4b:68:c4:88:fb:e8:70:0f:5a:03:e0:30:fc:
a6:00:ba:31:a7:2c:26:91:e9:52:10:97:2f:b0:2b:
64:01:ab:00:cd:96:fa:dc:17:45:50:53:ca:2e:81:
ad:5e:f0:6f:55:bf:1f:e4:e9:80:80:91:19:03:b0:
10:9a:7c:5b:1d:4d:92:fe:f8:4f:58:68:fe:fd:f6:
2a:db:59:93:ef:4c:ee:2f:10:f0:5a:c0:48:ba:51:
b5:3b:aa:8a:79:92:49:13:d3:8c:76:d4:3e:f3:4f:
cb:07:6e:97:4b:c7:ea:ac:fc:bb:6d:fe:31:aa:48:
21:fd:5c:2c:e0:f4:2f:eb:ac:3d:39:44:14:5c:cf:
d7:9f:bc:6f:1d:cf:f5:bb:7e:fa:65:bb:95:be:34:
1b:6d:1d:d0:29:06:ae:fa:d3:ab:3f:1f:ac:19:97:
61:15:80:a8:2d:42:d9:39:28:7a:72:70:e3:09:5b:
2d:7e:41:65:59:fd:81:17:d9:2b:0a:58:50:7d:fd:
f9:98:3a:ff:e5:1e:98:b7:6c:60:62:d3:cb:23:ea:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A1:46:5B:3D:DB:A9:F4:FA:EE:D7:D5:39:D0:44:34:94:80:51:D0
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1b:18:03:a3:9c:bb:7d:ea:c3:c5:c6:42:ba:b2:c8:40:a0:
4d:0f:82:ab:59:d2:ed:e5:0d:4f:3c:9c:25:05:e0:95:0d:a8:
37:5c:d3:c2:04:ff:b8:0a:04:1d:af:f3:6d:37:39:0d:e7:fe:
76:05:b2:78:e9:91:89:d8:d2:6b:20:28:2b:77:ae:9b:ac:e1:
d6:9f:f0:43:7f:ab:43:8e:cc:87:34:45:19:9d:b0:9c:bf:15:
18:e0:8c:ed:4d:45:2a:74:bd:9f:73:b7:85:d4:86:eb:05:4f:
c2:cc:a2:4a:e4:5f:70:95:7b:4d:64:d9:1c:61:81:af:04:1b:
30:a2:6c:ca:ea:d5:81:d2:09:5b:e2:bd:30:0e:0c:b0:29:90:
ea:27:52:f5:dc:f7:56:1e:bb:8a:b6:d4:29:ba:7b:d5:3f:eb:
e2:da:34:1f:f2:f3:92:8a:93:f8:9a:a8:79:c0:ef:91:55:8a:
53:1e:91:58:c9:69:22:4e:ee:41:90:84:37:b3:98:cc:24:ed:
fb:be:74:22:31:8a:ba:a3:f3:66:7d:77:13:ba:78:b9:4e:0e:
c4:fe:70:21:08:b4:81:41:f0:19:00:11:af:4d:23:0d:4d:d9:
e2:ae:38:ea:c7:94:a7:96:0e:04:73:87:c4:1d:bc:24:a9:f9:
01:40:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:33 2026 by rpki-client