Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier: JB0AkZ+7hPgfJ1qMxNpjsDq0IdHbWPgMHnFRblpjljA=
Subject key identifier: 0B:51:A6:ED:A1:4F:C4:6C:49:94:8D:E9:70:8E:74:00:DF:0C:DC:14
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 01A0C2564303380BC8122CCB2391981721AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number: 036B
Signing time: Mon 21 Sep 2026 05:00:28 +0000
Manifest this update: Mon 21 Sep 2026 05:00:28 +0000
Manifest next update: Tue 22 Sep 2026 05:00:28 +0000
Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: OuWk4Rhp/Cqn1pWV/egvtmXM2zxnGDBJdP1KCsPBYLU=)
2: aVR1DGlOpMImv1P3m-JsR94bIGc.roa (hash: tbwolDJwQ7h6KJzx4qAPP8SgaZe4LSSKXZP0YAxibg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:43:03:38:0b:c8:12:2c:cb:23:91:98:17:21:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Sep 21 05:00:28 2026 GMT
Not After : Sep 22 05:00:28 2026 GMT
Subject: CN=0b51a6eda14fc46c49948de9708e7400df0cdc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:59:4c:bb:74:1c:74:e7:f1:58:30:d9:3b:
33:6b:dc:12:e2:99:0b:bb:f2:c4:96:8e:03:6f:d9:
5e:85:03:cf:64:f4:0a:f5:f1:24:97:34:ba:d4:fd:
bc:a1:3f:e1:12:93:47:fe:1d:4b:b5:ad:3c:6c:8c:
0b:64:8b:5e:09:44:e3:f9:a9:7e:9a:e8:48:d1:fb:
c8:95:7a:93:e4:b4:e1:09:9c:8b:d4:33:2f:46:d9:
3c:db:96:8e:f9:61:ac:be:5f:6b:b6:08:a7:3e:07:
93:e7:d8:76:c8:50:2a:4a:fa:62:e9:43:28:dd:48:
b4:78:a3:1d:e6:97:6e:a5:6e:60:54:94:56:26:9e:
f2:5e:56:29:88:2e:0f:21:4d:12:2c:6c:1e:cb:a5:
3f:43:a4:ea:8a:7b:57:06:88:f2:0a:a1:48:c9:c2:
9d:c5:2c:02:8e:74:c5:5c:3d:cd:e3:64:42:da:98:
9c:7d:2e:f2:8e:1b:70:01:da:c5:17:a4:14:55:08:
5e:5b:c0:ad:fc:cc:fa:86:95:b5:ec:3a:c2:cd:39:
08:29:27:9a:21:75:02:55:ce:6f:96:82:4c:7e:38:
ca:8e:91:07:6d:51:df:2f:bf:6a:37:b3:42:97:47:
4e:84:4f:f3:e5:17:36:a7:c7:7a:d1:bc:2e:b7:be:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:51:A6:ED:A1:4F:C4:6C:49:94:8D:E9:70:8E:74:00:DF:0C:DC:14
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ac:19:47:e8:ce:c5:56:3f:21:bb:87:62:8e:85:f5:36:da:
3c:af:35:5e:95:6f:04:67:a0:28:d4:bd:e1:73:e4:10:4b:04:
6a:72:6f:4b:c8:c1:b9:51:fe:35:a8:fd:ac:f5:a8:8c:8d:ea:
8a:8b:af:c0:7f:5d:a2:67:54:b8:ba:f8:60:5f:11:89:77:be:
2f:82:9a:e5:86:c7:02:48:ff:cd:c0:01:70:ab:a2:5d:3b:6b:
67:59:c1:b8:59:69:81:98:65:bc:a5:c9:c0:f0:0f:80:51:00:
88:00:6f:4e:16:84:a8:33:d9:ef:f5:5b:a0:06:6f:3b:00:5e:
36:a6:3a:2d:a5:d9:21:c5:ef:83:3a:e6:1f:b2:b2:9e:53:ec:
1d:8e:f1:92:40:d5:26:f7:f5:1b:37:7e:d6:5c:55:5a:01:e8:
f5:64:37:95:1c:37:5d:90:c9:94:a7:70:aa:0a:a3:7b:78:fd:
89:69:5a:cf:a9:93:fe:b6:09:29:c1:5b:3d:df:27:36:2b:ba:
d1:53:78:e8:62:73:26:ca:66:27:bc:56:f9:e1:46:99:83:f3:
cd:c0:c9:7a:65:69:fc:97:af:7d:85:fc:05:f1:15:57:91:8c:
85:81:4c:95:bb:c5:c8:a8:3b:d6:f1:b8:a8:f5:f1:07:d5:7e:
0c:37:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:59:38 2026 by rpki-client