Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: DKqQs0fOAVAQvVwArSeC0ym4mR/1/cHU5xqrNBfxFm4=
Subject key identifier: 2E:FA:E1:ED:7E:46:61:B3:D1:B2:9C:4B:5C:12:2D:9B:B1:2A:2A:C8
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 019CADFEB6FFBA8A65EDCC5ACC23C4F70071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 10:01:17 +0000
Manifest this update: Mon 02 Mar 2026 10:01:17 +0000
Manifest next update: Tue 03 Mar 2026 10:01:17 +0000
Files and hashes: 1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: E+f7ZcvCyXczLNl6XvGYL4A0YG2KzH/XpC7I1bXEPxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:b6:ff:ba:8a:65:ed:cc:5a:cc:23:c4:f7:00:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Mar 2 10:01:17 2026 GMT
Not After : Mar 3 10:01:17 2026 GMT
Subject: CN=2efae1ed7e4661b3d1b29c4b5c122d9bb12a2ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:7d:3d:4a:49:7a:88:99:12:0d:cc:1d:9c:
95:33:0a:a4:02:e3:10:d6:7b:0d:ef:f5:a4:de:0f:
0f:91:73:5b:a8:8b:00:f8:d6:75:d9:b9:bb:e5:74:
b6:cd:68:5b:4c:c7:c4:39:84:18:89:46:fa:f4:55:
66:52:6a:c1:e9:ad:36:bd:71:c1:31:61:1c:b2:ad:
d4:e6:e9:5b:46:d3:51:01:0d:28:a7:5c:4e:4d:9d:
0e:bc:08:29:45:ba:2e:3b:86:0d:f2:5e:cf:52:cb:
b0:d3:7d:06:69:a8:de:9d:0d:e5:5c:3b:27:55:d5:
1b:16:fb:27:b2:da:7a:61:cf:e3:b4:2b:17:77:41:
28:4b:f5:7a:ca:b1:1e:dc:b3:fa:fa:72:b0:b8:13:
8b:11:ed:e2:98:04:d6:ea:db:c0:c9:60:c0:05:62:
89:71:c7:fb:01:be:41:26:b9:da:74:c5:ad:2c:53:
36:84:23:e5:64:91:4a:c5:0e:82:e6:da:e0:03:16:
ef:5b:0a:2c:ed:16:74:ba:af:36:a9:69:41:e8:39:
67:52:bb:46:a7:0b:80:18:6a:94:7e:03:8c:f0:78:
be:e9:33:3f:d4:34:de:00:87:7a:dc:2f:b5:8b:aa:
8e:11:d7:43:3b:46:a5:42:4d:f4:d1:6a:61:45:7d:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:E1:ED:7E:46:61:B3:D1:B2:9C:4B:5C:12:2D:9B:B1:2A:2A:C8
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bf:26:8f:41:12:79:76:39:76:f1:9a:1b:8d:0c:48:fb:f7:
97:86:5f:43:af:65:9f:62:cd:0d:8c:e5:2e:8f:1c:cd:34:4f:
34:2b:e4:86:27:d6:ff:bd:f2:15:ca:b5:96:63:3f:ef:ed:c3:
9e:11:43:d8:d8:f8:29:a7:9b:a5:65:cf:94:c0:bb:fa:a4:48:
b8:52:3a:00:b7:2e:33:51:6f:2a:d8:db:dd:33:a3:bd:d4:6e:
89:c3:32:01:64:d5:96:e5:45:27:b0:52:20:4d:07:41:7f:dc:
f3:a6:86:ee:81:99:f2:1a:ca:29:0c:eb:85:66:b5:19:db:ea:
ec:e7:55:5b:31:b2:69:ba:9c:c4:65:c8:7e:e6:1a:a0:f3:b1:
fe:3a:ac:51:00:94:8f:75:c4:5a:42:5e:ee:ab:1f:d8:f0:28:
af:e4:a4:90:68:4e:ac:b7:01:23:c6:cb:3a:49:b6:10:0d:f9:
8c:3f:3f:ab:d1:01:4e:6f:2d:69:3b:e6:1a:29:07:46:9f:54:
4d:91:af:bd:ee:98:47:58:e4:b8:72:df:bb:51:43:ca:d2:97:
6b:de:56:86:dd:c2:71:a0:e8:a5:f9:a8:29:33:22:78:2b:4f:
46:ad:0e:98:e6:33:44:92:52:41:63:2c:14:f6:18:92:1f:7a:
ff:b2:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:50 2026 by rpki-client