Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: H/+lrN1vWNwvf/Hi7DXiXfxIRfhA8efxqkE8hAkmfgQ=
Subject key identifier: 57:06:60:CE:2E:CC:F9:B0:C5:93:CD:4B:CC:34:E3:5F:90:AA:79:C9
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 01A12AD7061344E0AAD66F2740FCCC51CEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0BA8
Signing time: Sun 11 Oct 2026 12:01:37 +0000
Manifest this update: Sun 11 Oct 2026 12:01:37 +0000
Manifest next update: Mon 12 Oct 2026 12:01:37 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: yBKz6coXID69bbZTMrXN9QX5Hm4jPICPTE5SUWDCecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:06:13:44:e0:aa:d6:6f:27:40:fc:cc:51:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Oct 11 12:01:37 2026 GMT
Not After : Oct 12 12:01:37 2026 GMT
Subject: CN=570660ce2eccf9b0c593cd4bcc34e35f90aa79c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:b6:7f:de:34:08:c4:72:b3:14:55:9f:97:
61:89:98:6f:70:64:a9:82:de:4f:00:05:48:54:e5:
62:56:2c:b9:0a:48:15:0c:2e:af:43:57:c7:26:b2:
7d:62:c6:c8:93:03:df:b6:e7:48:c1:b4:f7:ae:01:
fb:85:1c:2f:5e:03:00:6c:27:9c:c3:ff:23:98:e1:
1a:6d:0d:ad:ed:bd:a1:c3:e9:c4:12:ce:c4:c0:84:
d0:88:9d:d2:09:55:56:80:bb:ac:c2:13:5a:1c:38:
5a:12:9d:8e:1a:76:b2:73:11:88:5f:1a:56:16:95:
a1:3b:8e:e9:aa:18:8a:d4:d1:9c:d4:ff:cb:55:b3:
2f:4d:35:7e:ab:fc:ed:4e:3e:86:74:aa:c1:7f:01:
76:8a:05:51:bb:07:dd:3e:2a:7b:d0:d0:e1:d3:aa:
e9:6f:e9:45:ff:f9:b5:ce:8c:6e:38:3b:ba:30:14:
08:13:97:38:ee:7a:48:c2:d3:be:5f:d4:02:a7:8a:
1d:29:32:e9:a8:58:c7:0f:27:ed:77:2f:2f:5f:dc:
7a:cd:d6:f3:67:4b:ba:9f:3d:6a:d9:f4:af:50:dd:
5b:9c:4f:34:63:e7:30:5a:a1:aa:0a:48:af:d8:c8:
6e:3f:8f:24:d1:ec:70:0f:64:a4:19:ba:1d:02:7e:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:60:CE:2E:CC:F9:B0:C5:93:CD:4B:CC:34:E3:5F:90:AA:79:C9
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:16:21:2a:ce:be:24:59:fd:66:a5:32:90:cc:8c:23:8d:d9:
de:10:b6:fe:b0:38:f3:3b:46:41:c2:1f:1a:da:bc:11:88:03:
05:e2:2d:a4:cd:b9:c8:1a:05:a6:4a:4c:66:c6:fe:4f:ba:3c:
e0:78:e5:2e:9a:e5:c3:22:a8:88:dd:4e:3c:1f:05:25:44:b4:
26:73:d8:9b:2a:62:df:17:56:0a:80:5c:5e:12:9d:a4:15:90:
b5:67:38:13:64:6b:68:9d:1c:8d:9b:53:b0:55:55:19:d5:cf:
21:b0:54:74:d0:45:51:9a:de:c6:6c:e1:d6:10:81:30:49:f4:
e4:43:e8:89:19:10:a4:d7:41:c6:0b:00:02:43:b3:1f:dc:5b:
e3:78:cf:4c:d1:41:27:d9:c0:4e:7f:15:47:52:71:e1:ce:42:
a6:b9:79:0d:e7:68:ac:a1:cf:db:60:23:cb:cb:ff:7a:74:61:
c2:0c:03:dd:8f:b0:25:b6:57:5f:2a:cf:8e:f6:ab:04:28:87:
e2:b7:58:1e:69:4e:6a:f0:c9:87:24:cf:9e:9e:c7:38:fc:73:
6c:fa:8f:a9:ec:26:40:d8:74:c5:3b:3d:58:9e:5f:c7:16:ae:
69:17:01:c7:62:42:19:2f:fb:44:e1:b6:a2:f5:74:96:1b:cb:
5c:24:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:19:54 2026 by rpki-client