Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier: kBTvf1nswZ302fg61eEfSdrxSaKgSa6e/ai1WBPDIFE=
Subject key identifier: F2:46:99:20:D2:F5:FB:C1:F7:E1:E3:A5:76:15:59:47:27:DB:55:1A
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 019FA861F5D73343D30E58E022EA1D29783B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number: 02D9
Signing time: Tue 28 Jul 2026 11:00:19 +0000
Manifest this update: Tue 28 Jul 2026 11:00:19 +0000
Manifest next update: Wed 29 Jul 2026 11:00:19 +0000
Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: xPJl41xaG0IpbYuqCu3fVx8hoQk9kSAvb+EqP3GwAKQ=)
2: aVR1DGlOpMImv1P3m-JsR94bIGc.roa (hash: tbwolDJwQ7h6KJzx4qAPP8SgaZe4LSSKXZP0YAxibg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:61:f5:d7:33:43:d3:0e:58:e0:22:ea:1d:29:78:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Jul 28 11:00:19 2026 GMT
Not After : Jul 29 11:00:19 2026 GMT
Subject: CN=f2469920d2f5fbc1f7e1e3a57615594727db551a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:2d:93:22:80:9a:75:6a:0a:63:61:8d:55:
dd:a3:50:2a:bf:04:b5:bf:8b:7c:e1:99:b2:25:5a:
1d:c9:e4:ac:e2:8a:a3:05:81:6e:ac:26:7e:c9:f2:
db:b6:60:ca:a2:e8:8c:a9:d2:c2:49:20:9d:67:32:
e7:a0:51:52:8b:e0:f9:06:46:bb:b9:51:92:98:77:
e6:08:a0:f0:12:76:bd:3e:62:05:92:58:74:92:c8:
e7:5d:ee:0a:e6:27:70:29:62:6b:00:50:5a:ef:05:
9d:73:a2:9f:d8:bb:11:35:39:de:e9:b0:e6:2b:4f:
91:2a:b2:c3:9e:eb:9f:c8:cd:cb:b5:d1:c8:3d:a6:
48:6c:50:3f:b9:16:58:4d:f2:d6:6b:c6:aa:49:e9:
d5:38:91:44:2a:ad:5b:b8:79:05:3c:ed:c9:6e:1c:
08:06:26:a1:1d:1c:77:3b:ad:92:d9:a4:0e:2d:cc:
55:71:b0:2b:5e:5c:49:83:b4:ef:42:e2:a8:c2:a9:
5a:5e:5c:ad:26:73:a7:20:0d:b8:ad:94:57:cf:70:
49:f3:da:7e:07:53:99:43:05:13:19:59:c1:39:f0:
48:01:1d:b7:8e:00:73:4a:a9:29:34:af:2d:82:bf:
e8:44:63:7b:5c:0c:df:8e:77:f1:0c:34:4d:42:5d:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:99:20:D2:F5:FB:C1:F7:E1:E3:A5:76:15:59:47:27:DB:55:1A
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bc:dc:86:cc:d7:57:3d:99:39:a9:64:68:d3:9f:21:ad:79:
64:29:80:34:f8:12:df:f6:b2:a9:53:d9:82:d3:cd:37:c9:61:
e7:85:20:4c:10:de:39:fc:0f:29:a9:90:25:c5:30:70:7d:14:
78:d3:fa:45:d9:c3:75:dd:7c:81:52:dc:4d:9c:0f:97:f4:8b:
23:ca:21:81:8b:ab:dd:03:e6:e0:38:51:b2:52:32:b5:58:35:
af:a2:78:51:2a:33:b7:7d:87:84:b1:d8:36:7b:81:cb:40:8d:
46:1c:32:06:3c:3b:b7:91:fa:c5:06:b9:66:94:3e:94:c3:76:
c6:07:28:6c:e9:93:13:57:b1:64:49:e5:0e:22:a0:cb:de:0e:
ed:52:d2:a0:a7:43:52:37:2a:e4:56:be:55:87:6c:58:a7:d3:
48:9c:c1:b8:7f:3d:63:31:b6:1a:34:58:dd:d8:21:34:a1:62:
e9:33:87:d6:ec:f6:bc:82:af:de:68:16:f2:19:4a:b4:4e:55:
13:f2:4c:0c:d6:f3:15:64:b4:48:86:b8:d2:22:39:83:d3:20:
bb:67:ad:db:8c:00:40:9b:9a:0d:22:83:57:58:20:fe:64:33:
9a:f5:46:e1:8e:d9:c7:12:f0:38:f4:e7:df:98:17:bd:ac:01:
c4:32:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:45 2026 by rpki-client