
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: Ofj2i+3DKdXoCjK0/60GENaPWPcs+oAa9l+vrkokSHA=
Subject key identifier: 54:34:34:3D:E4:47:06:3C:29:29:81:8C:56:A3:F6:F5:FC:D6:4C:37
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 019D999989FBB8A532D400496E39DA96F5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: G24q/bF0TKpPvNXOruNMUAR/K/oGvb7ux1EsEMA4h10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:89:fb:b8:a5:32:d4:00:49:6e:39:da:96:f5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=5434343de447063c2929818c56a3f6f5fcd64c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:14:b0:87:63:8d:1d:f0:03:90:50:f5:61:
c2:4f:d6:a4:fa:5b:18:81:3b:3a:0f:07:e1:4e:7a:
bf:cc:81:51:ca:54:d0:12:4f:4a:62:15:5a:06:f3:
ab:62:f5:9a:bc:e9:1a:74:ee:a0:4e:af:5f:45:bb:
b2:46:37:bf:b0:53:57:ac:41:92:58:2b:5b:eb:08:
02:d4:ec:bc:05:66:10:53:a5:84:ba:cb:19:49:6e:
00:38:2e:f2:d1:14:4f:8c:c7:b8:8c:63:b7:9a:f1:
ae:d6:c8:99:d7:49:de:37:d8:47:50:62:03:32:89:
80:ea:1d:91:e9:4c:7f:8d:22:40:db:c3:ad:ae:2e:
e8:d9:1a:29:28:c9:8d:39:a6:2a:29:e1:1e:61:b1:
05:cf:24:c0:8a:02:5e:cf:46:5e:f9:b7:38:5e:fd:
c7:0f:71:8c:81:1c:7c:07:88:fd:39:e0:fe:d1:6d:
3b:30:f2:f2:84:28:66:7c:28:a4:62:e6:e9:82:2e:
6f:0e:35:a5:73:87:06:c5:53:89:98:98:ae:1f:47:
ce:54:ce:a2:64:85:e8:43:5f:3b:bf:12:ab:b6:13:
d3:be:47:35:92:54:7d:5d:ec:a8:9c:1a:79:b2:a6:
ac:47:65:64:b5:3e:3c:87:d0:a1:aa:ad:83:80:75:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:34:3D:E4:47:06:3C:29:29:81:8C:56:A3:F6:F5:FC:D6:4C:37
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:93:4e:26:6a:9e:97:2a:15:f0:f4:0f:97:c7:7a:99:f3:c9:
63:a9:22:bc:d3:ff:d1:20:84:75:49:72:12:e9:c5:74:f8:4e:
5b:c7:4e:05:8c:c9:d1:8d:29:e1:94:23:d4:d0:ab:7f:03:c4:
28:6d:1d:12:86:13:45:42:50:40:4f:dd:d9:e9:20:92:d2:98:
ad:d8:cb:af:6b:06:79:5e:a5:9a:c6:74:d3:7a:84:00:5e:25:
ac:36:e2:57:ad:b9:f0:89:ae:3d:7a:c5:a2:af:c1:42:24:66:
3b:26:00:46:23:08:04:a1:a0:02:8e:8f:6f:d3:2c:d3:9c:d5:
d1:e6:89:28:65:11:35:7d:d8:b1:cb:b1:e1:e5:dc:66:2e:d1:
6a:e1:5e:0b:bb:27:95:bd:5b:25:f8:4b:80:9a:d3:97:c6:73:
31:b5:8c:ee:84:a8:49:af:eb:01:b9:e5:53:fa:0d:41:01:93:
37:d6:da:59:ed:ad:93:d7:1a:ee:5d:e5:67:cf:5b:f6:1d:48:
be:d8:0b:bc:62:2a:70:81:cf:c1:4f:0b:19:ed:e1:7b:32:9f:
ec:6b:6c:e7:ab:2f:f6:92:65:8a:9f:63:41:71:c2:71:40:21:
40:ac:0c:2f:cd:af:68:fb:aa:76:4a:93:b9:05:6b:8c:6c:6f:
88:b5:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:03 2026 by rpki-client