Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: Bb8oB3Q7KOy5lWBQFLP9Qm8U5VLaf5VbvxmMsO+N4a8=
Subject key identifier: 3E:28:89:A9:80:A5:35:8E:E6:0E:81:B4:A0:5F:8F:9B:92:C6:4F:C5
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 01A0E174503A0F7407165649A32A89061F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 156D
Signing time: Sun 27 Sep 2026 06:01:31 +0000
Manifest this update: Sun 27 Sep 2026 06:01:31 +0000
Manifest next update: Mon 28 Sep 2026 06:01:31 +0000
Files and hashes: 1: 0VnbCUUxMHz9IQSGbuoNhNu-3i0.roa (hash: hvzM8HfzEPqtWwc9Q56WgaJxRYytObZ9iUV/CwXnl4U=)
2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: W0KcFvIsWjVMmYzjB6WbT5yCgDSIxA1aVseYs5BI2gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:50:3a:0f:74:07:16:56:49:a3:2a:89:06:1f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Sep 27 06:01:31 2026 GMT
Not After : Sep 28 06:01:31 2026 GMT
Subject: CN=3e2889a980a5358ee60e81b4a05f8f9b92c64fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:8d:99:af:e3:86:10:cc:5d:2f:83:39:65:
db:b0:02:95:50:7e:28:54:53:97:5b:a6:44:d1:5b:
8e:54:df:30:57:ee:11:4a:8a:5b:9c:35:d7:b5:73:
7d:d5:4b:fb:5b:32:70:87:28:da:34:28:c0:68:1d:
68:fc:3e:cc:52:89:cc:a1:6d:15:22:f3:f9:21:de:
c2:98:94:6f:26:19:94:7d:63:7f:09:5f:de:96:cd:
62:12:ca:35:6f:43:a8:f9:f5:13:8c:cc:d6:24:53:
6c:1a:0c:07:f1:cf:25:c3:97:99:16:76:20:c7:87:
dd:4d:ff:69:c5:ef:0f:6f:61:8a:c5:14:84:e2:50:
31:f4:f0:55:6e:18:e1:6d:00:b1:e1:3d:04:e8:9a:
c2:c5:21:5e:01:aa:e2:f2:fe:e2:be:78:33:2e:5f:
99:ef:36:fe:39:2d:12:cf:14:fa:c3:a6:f2:16:8a:
da:2d:0a:f6:08:ba:16:6e:28:62:0e:4e:90:3d:33:
b1:95:ed:71:4c:a6:6c:62:56:83:55:2d:83:90:da:
5e:98:19:9a:a8:bb:8e:2d:c9:97:42:77:44:35:7b:
12:06:56:27:53:98:b5:3d:b8:a4:26:8e:fe:16:50:
8b:3d:5c:7e:b2:86:e5:1f:ef:29:f7:93:e0:9d:ef:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:89:A9:80:A5:35:8E:E6:0E:81:B4:A0:5F:8F:9B:92:C6:4F:C5
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:55:07:a8:11:bf:f3:cc:18:19:c6:fa:36:43:e9:22:4f:6d:
68:b6:f9:cc:c6:07:45:3e:17:4d:9d:6b:67:95:7e:30:b0:ec:
56:bd:b1:46:d7:be:1f:41:e5:b4:e3:16:44:cf:1d:fb:e4:9c:
97:2e:5b:63:bc:35:94:8d:66:fb:8c:f8:05:30:98:3f:11:63:
b6:40:40:db:ce:5d:1b:77:57:4d:bb:42:84:dd:00:a9:19:6b:
43:15:09:86:d9:93:6a:a1:ad:6f:04:7a:55:4d:15:d6:b7:f6:
02:30:71:f3:75:bc:52:66:23:fe:d2:66:da:46:a6:61:09:42:
62:73:b8:37:66:c4:d7:49:6a:e0:be:39:06:bf:a1:cb:3b:be:
5b:3c:21:1b:10:6a:b8:39:fc:d2:e1:f8:e6:1e:53:56:6a:ba:
df:85:ba:66:14:e3:76:13:1d:a9:d8:c7:fc:64:96:71:78:44:
eb:01:e6:a1:7c:15:80:4f:30:a5:17:53:2d:20:ab:48:18:77:
da:5b:40:45:34:c4:42:a6:ed:91:2a:ba:77:5a:08:d5:ed:eb:
7f:e9:95:8f:9d:8b:a6:92:dd:8e:66:23:ea:6d:56:89:cb:44:
e1:76:65:9e:14:44:44:ec:60:41:cc:2d:51:ce:44:ff:4b:27:
f2:35:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:12:19 2026 by rpki-client