
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: p3xr4Q4SjrRlE9Wb/rE9R3e0hfHzGupiNY6sEabb2fw=
Subject key identifier: F9:5A:B0:BA:F0:A5:D5:53:F9:3F:C4:5E:40:17:8A:17:58:96:BE:43
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 019FAA8747483B56C2D0E04F9319876BCFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 14CC
Signing time: Tue 28 Jul 2026 21:00:19 +0000
Manifest this update: Tue 28 Jul 2026 21:00:19 +0000
Manifest next update: Wed 29 Jul 2026 21:00:19 +0000
Files and hashes: 1: 0VnbCUUxMHz9IQSGbuoNhNu-3i0.roa (hash: hvzM8HfzEPqtWwc9Q56WgaJxRYytObZ9iUV/CwXnl4U=)
2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: PsAbkQrB70vslA5q0R6KB7Rq1r5T9hjrjChel+XM8G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:47:48:3b:56:c2:d0:e0:4f:93:19:87:6b:cf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Jul 28 21:00:19 2026 GMT
Not After : Jul 29 21:00:19 2026 GMT
Subject: CN=f95ab0baf0a5d553f93fc45e40178a175896be43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:e8:32:e8:4d:74:3b:26:e7:a6:fa:5c:1a:
d6:6b:3b:c0:e2:40:9a:45:5f:27:ca:e4:61:e0:be:
a1:63:4b:80:25:0a:92:c0:2c:5e:fe:55:c7:4c:21:
62:19:c3:b7:a6:b1:84:1e:3c:6d:32:cb:5a:f2:2a:
12:92:e0:75:d4:73:26:23:8f:19:80:23:83:2c:fc:
10:30:f5:87:7d:58:00:4d:35:0a:8b:1b:36:07:f5:
65:62:d8:3c:d7:0e:b0:32:3e:c0:80:bd:c3:71:7f:
81:2d:68:3b:af:84:73:f9:1c:54:be:97:0f:c5:52:
9f:9c:df:73:05:e7:73:ce:0b:a2:cf:20:31:9a:ac:
7b:39:21:36:15:a4:7c:24:bd:18:95:83:d2:5a:42:
fc:8d:1c:d1:e3:02:03:51:23:9e:12:25:05:25:b6:
8e:52:1e:d3:a8:28:3c:b5:dd:55:41:c3:1e:e1:e6:
aa:fd:03:0f:2f:76:70:fe:a8:9a:a6:ed:c7:e5:29:
43:07:f1:d1:88:27:ba:8c:e0:82:c9:39:c3:30:b2:
1f:79:82:a3:f2:7b:38:74:d1:f0:84:c2:4f:db:55:
c5:eb:c6:10:a7:3f:9f:1c:05:5f:55:5f:66:a2:26:
74:0f:a1:8f:c8:35:65:55:7a:b6:ef:50:73:da:7f:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5A:B0:BA:F0:A5:D5:53:F9:3F:C4:5E:40:17:8A:17:58:96:BE:43
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:70:1f:64:2e:59:de:1c:69:64:6a:38:bb:ea:16:dd:fc:e9:
86:ff:48:19:2a:12:5e:3b:d6:29:6f:70:34:21:19:d4:d7:80:
74:95:c8:86:81:97:ad:6a:3d:9a:f0:e2:a0:56:e2:b0:2c:88:
be:ec:f7:f8:a2:dd:d9:9a:c5:0a:09:a6:0f:11:3a:4d:57:2d:
67:8f:5b:f8:7a:8d:96:58:8c:ae:39:c6:8f:38:e8:b6:7f:57:
4f:c5:3d:08:a8:6b:c1:aa:c5:14:68:ec:95:f4:42:5d:b1:9b:
21:79:c8:a7:bd:99:a1:e0:b2:92:47:78:35:0e:9c:89:75:2c:
5f:87:fd:d5:34:96:3c:d5:a6:6c:ae:55:bc:36:37:cf:d4:a2:
f8:2b:63:45:4d:1b:b1:25:f8:e4:d2:45:96:e2:dc:47:32:8b:
16:a6:7c:8f:a9:16:ff:ac:ff:75:51:77:fa:67:44:59:8b:d2:
15:15:9b:e8:a9:48:fa:30:14:b1:7e:9a:9d:02:15:b5:e8:10:
9e:f9:77:85:d5:46:f7:74:7d:6a:d3:a0:38:b2:c2:48:f3:d8:
ab:66:52:1e:b9:88:8b:ce:79:14:88:a1:03:ae:75:42:07:23:
48:0a:cd:12:84:06:16:ee:4b:06:72:bf:a5:a7:d2:78:28:14:
8c:62:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:24:29 2026 by rpki-client