Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: sGP0iZiTWzvAmwA4rjLZpqT7WzxnHn8kga8iaCWJtrk=
Subject key identifier: BA:C5:94:49:62:AB:14:20:E0:84:B7:5D:0C:3C:A5:AB:37:08:9D:6D
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019EC2CA172AD5BE576AC8CF5C837570052F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0A69
Signing time: Sat 13 Jun 2026 21:01:24 +0000
Manifest this update: Sat 13 Jun 2026 21:01:24 +0000
Manifest next update: Sun 14 Jun 2026 21:01:24 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: AiHSpjAXom7c2XlmNqSFeYkdWVj/vwwX9a5J9IKmTS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:17:2a:d5:be:57:6a:c8:cf:5c:83:75:70:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jun 13 21:01:24 2026 GMT
Not After : Jun 14 21:01:24 2026 GMT
Subject: CN=bac5944962ab1420e084b75d0c3ca5ab37089d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:9f:54:4a:9f:df:05:b9:b9:5c:fb:7e:f9:
73:a3:5e:7c:4c:f5:0a:77:c7:f1:a2:e9:49:b7:3e:
61:f8:a9:b2:b3:46:de:10:e4:38:cd:15:2c:0e:48:
72:b8:b4:d5:54:c6:8a:97:f1:05:71:cf:f5:01:de:
10:93:08:52:f8:cd:6f:c0:76:aa:d4:5c:05:96:2b:
10:5e:dc:a3:ab:c7:d3:d7:80:3f:d5:c4:ae:68:b6:
cf:76:76:88:9c:82:3e:2e:d2:20:76:61:6e:d4:00:
81:00:c6:fd:dd:32:71:55:78:46:03:27:50:22:31:
4f:64:79:f7:11:12:ca:67:29:19:ed:4c:41:56:1d:
39:20:46:bb:fa:fc:f2:9b:e8:bc:87:14:67:bc:a5:
a3:1d:71:a3:87:18:6d:ed:16:88:ab:a0:2e:61:8c:
8a:db:8b:02:4d:4f:49:ce:15:aa:ff:38:24:c7:01:
fa:22:ce:33:5f:ff:72:7a:e2:06:a3:3c:f9:ce:48:
75:fe:d5:f3:10:9f:99:21:f3:75:56:52:e5:58:1c:
fe:fe:71:e2:12:ec:e9:c2:79:a2:f4:58:9d:e6:c2:
c5:01:32:7e:95:bf:24:46:ca:37:c3:45:f0:4f:59:
30:2d:e3:0a:4d:d9:97:9f:fa:7e:78:51:1d:ff:03:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:94:49:62:AB:14:20:E0:84:B7:5D:0C:3C:A5:AB:37:08:9D:6D
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5f:f2:45:32:a7:16:2d:f4:49:8c:38:33:ab:68:cc:57:a8:
4f:06:14:fe:96:f6:b2:33:41:76:23:a9:28:84:34:c3:d0:8e:
9f:f6:68:a7:8f:29:6c:80:94:1c:a8:a6:96:ba:37:2e:81:14:
da:57:a0:61:5f:9f:bc:97:3c:e0:fc:80:97:dd:d6:4d:29:05:
ff:ce:ae:a3:b8:15:6e:ac:5b:ec:d0:2c:48:c4:18:e8:a9:51:
40:db:ba:d3:7a:9b:2b:8d:02:32:e4:66:04:87:ec:d0:b7:85:
37:de:21:65:d2:52:a1:e5:2a:72:a6:03:15:32:89:51:92:b7:
53:ae:9a:20:1d:41:87:ae:43:e1:d3:9e:63:b6:0d:a0:73:27:
e6:2a:cc:23:3a:95:c1:30:bf:90:d3:f5:c5:7d:e0:f8:ec:85:
f7:4c:90:63:34:3e:05:63:6c:77:c8:99:d4:08:6e:63:89:5d:
59:50:d5:9d:68:09:2e:82:1d:2e:a2:72:c5:d5:10:3d:dd:89:
d8:05:5a:64:2d:5e:60:aa:da:24:69:40:2e:57:ee:22:03:f2:
f2:bd:8c:d8:90:85:16:2a:81:14:5d:bb:4c:0b:3a:72:84:6d:
79:08:4e:d0:e3:e3:95:3e:4a:c6:51:a8:db:00:f0:68:5d:d8:
57:39:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:45:33 2026 by rpki-client