Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
File: WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json)
Hash identifier: 3t6tiMjF1haRuduV2nnd+WYACze0lytXxQhfaus0Nns=
Subject key identifier: C3:47:8F:59:BB:46:E3:E5:CA:28:52:25:C9:B3:DC:50:C1:F5:4D:B9
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial: 01A0C5C58D5350E895C5F5FD11A16A6B1E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 21:00:53 +0000
Manifest this update: Mon 21 Sep 2026 21:00:53 +0000
Manifest next update: Tue 22 Sep 2026 21:00:53 +0000
Files and hashes: 1: 1-Qe3s-1rznU2RrPTRXbYx2Bx5z8.roa (hash: fRzTkPN8a27bua2wzuTpxH2x1y519ujmqn10IN10rFw=)
2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: tUy/9i8LtpSUnpF2dEBn4XvVrqck0apU1GfqeqN9bXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:8d:53:50:e8:95:c5:f5:fd:11:a1:6a:6b:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Validity
Not Before: Sep 21 21:00:53 2026 GMT
Not After : Sep 22 21:00:53 2026 GMT
Subject: CN=c3478f59bb46e3e5ca285225c9b3dc50c1f54db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:a3:77:9d:c9:ee:18:e3:a3:e2:32:cf:94:
70:d4:51:ad:ee:40:fa:d6:7b:78:6a:ce:7d:5c:7d:
cc:a7:ef:08:ef:b4:45:d5:10:ec:4c:a4:dd:5a:50:
6f:37:3f:d3:ca:bb:22:92:e8:1f:86:13:ce:03:ad:
e4:3f:86:27:a6:d0:74:09:65:76:63:95:cf:75:d6:
f6:a6:17:ac:d6:77:ab:40:e3:61:0c:e0:36:e2:dc:
1c:b3:b6:b8:7d:f9:30:a8:0e:25:54:98:67:9e:1f:
f6:5e:bc:b9:3e:fd:a9:fb:9e:e6:c7:d7:fe:45:a2:
8e:08:7e:76:b4:9a:3c:11:df:d0:8c:c0:be:19:e4:
77:33:dc:ee:bf:80:e7:26:8b:a3:af:d8:23:e6:c7:
55:ec:99:5b:7f:71:6a:3f:94:84:ca:17:47:52:55:
a0:af:10:8a:34:69:81:80:8f:ae:b8:d9:55:e8:10:
27:8f:c9:2d:ad:90:3b:09:78:6b:1f:35:d9:9f:90:
9e:5d:0e:cc:8e:ea:f4:dd:8d:bd:a9:b1:bf:b7:63:
86:80:7f:d6:71:8d:b0:1d:23:9a:22:9f:51:53:d8:
04:10:43:a5:0d:00:09:02:7a:47:6f:4b:dd:42:68:
36:a3:28:cb:f2:e8:b1:62:cd:88:05:43:c5:f6:3c:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:47:8F:59:BB:46:E3:E5:CA:28:52:25:C9:B3:DC:50:C1:F5:4D:B9
X509v3 Authority Key Identifier:
keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:cd:8d:65:e1:9e:1c:ee:7d:86:18:70:ea:68:74:74:42:
54:c1:1f:48:08:d3:4b:c9:a1:5c:4a:0d:b2:0d:38:70:89:e7:
bb:16:f1:10:c4:2d:50:dd:a0:94:6f:92:85:51:9c:a2:8c:1a:
f1:13:9d:d0:36:66:92:72:4c:df:bb:81:c0:19:46:f5:23:35:
70:a1:fe:a9:a7:e9:38:f1:eb:7c:2b:34:52:48:20:bd:1c:b2:
36:d6:b3:8c:d5:58:66:97:95:dd:8e:e2:5e:00:f9:45:39:e3:
16:3b:db:97:1f:5b:0d:6d:f4:b1:a1:c6:82:7f:e6:ef:1e:d3:
a9:29:a7:c6:70:6c:c9:5f:b8:98:e5:5e:14:1a:e8:6e:c6:a4:
d3:25:b1:04:63:cf:d0:a5:a5:04:c4:28:9b:a4:59:ba:e7:38:
c7:a0:bf:59:4f:4e:75:09:b2:8c:68:df:09:77:84:24:5d:0e:
c2:38:73:7d:c2:3e:45:83:de:8b:f0:46:54:4d:80:b0:37:41:
b8:6d:98:4b:cc:a0:4a:a6:54:05:41:1b:dc:4d:db:40:5b:e4:
50:64:1c:d6:ae:59:ef:5d:5c:47:30:7e:85:a0:08:ee:2c:68:
24:7c:1a:c6:c5:af:13:46:2d:dc:e2:d4:be:2d:49:50:0b:6c:
8b:42:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:40 2026 by rpki-client