Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: q7QQJVfAqgTwX+3LC5nXco1BOT4HF31QzXYnDoRPkIk=
Subject key identifier: 08:AB:83:4A:EF:A0:7C:33:BD:C8:41:70:5A:17:CC:47:6B:9F:2A:7C
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 01A0D4CB046FA364C29B0A51D9378E6B39E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 11C9
Signing time: Thu 24 Sep 2026 19:01:09 +0000
Manifest this update: Thu 24 Sep 2026 19:01:09 +0000
Manifest next update: Fri 25 Sep 2026 19:01:09 +0000
Files and hashes: 1: SgMIjUcR2c12DzERn5Ts_2Ui6dU.roa (hash: GYGPZLvxKXca2OxhVOyvlt9mnOVKXNEirW2JBi+fWL4=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: Eh7pF8KRaJUR0UsBSTVwuwGSs7WD1KoX1+sOwcqcK5s=)
3: XIThFyPTW5lXLvwW5lsLjLVEtsw.roa (hash: zsPoZ1kKOA5gCoYw0cog9xPEs778Ebzg1Uy38hXQLVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:04:6f:a3:64:c2:9b:0a:51:d9:37:8e:6b:39:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Sep 24 19:01:09 2026 GMT
Not After : Sep 25 19:01:09 2026 GMT
Subject: CN=08ab834aefa07c33bdc841705a17cc476b9f2a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:50:c4:f9:15:40:7f:8c:0f:72:a1:c7:e5:
24:cb:51:eb:88:2b:8c:fe:d7:d8:5f:a2:a4:13:1d:
c1:25:0a:b5:a7:09:15:ad:24:f9:04:42:37:74:f9:
2f:a7:5b:6c:ce:d0:23:af:87:92:ec:f4:64:0f:64:
e3:84:82:c6:4d:26:6d:64:cb:44:d7:6a:0f:26:ba:
5a:45:8b:2b:1d:4b:f6:d3:bc:52:0d:d0:f8:03:bc:
99:1b:b6:bf:ff:d8:25:dd:60:69:66:e5:79:81:b4:
6a:1c:a5:ef:3e:91:33:8d:9b:02:43:80:7d:3a:df:
bf:17:9d:c0:93:31:87:40:29:db:45:a5:2f:46:d1:
d9:8f:75:5b:e6:f9:5d:dc:2e:fd:d9:e7:bc:15:6a:
82:d3:9e:a5:48:bd:92:3e:e4:20:69:ee:35:4b:62:
f0:6b:b2:10:60:7a:0f:51:76:c6:84:f1:f9:c6:72:
72:ad:aa:86:45:65:9c:c2:cc:3b:41:5f:2d:47:49:
0b:04:bc:4b:92:67:79:b3:50:02:94:a6:fb:0c:d7:
78:fd:f7:05:8a:fa:f2:10:72:23:a6:b0:a9:09:18:
56:6d:b1:55:82:db:0c:9f:da:68:be:52:9b:4f:dd:
c7:14:50:12:50:20:07:87:70:6b:39:ac:fd:01:c8:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:83:4A:EF:A0:7C:33:BD:C8:41:70:5A:17:CC:47:6B:9F:2A:7C
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:05:b3:d3:de:14:4c:1a:6a:89:0b:8c:55:2a:9c:fc:e0:5e:
ed:3d:ac:f4:eb:cc:db:28:08:10:4c:74:7b:2a:d5:70:80:ad:
41:94:a5:36:d8:2b:c2:5b:44:31:6f:8f:4f:ce:58:bb:6a:9b:
de:67:67:f8:57:62:13:a4:e4:9d:3d:93:f0:8a:68:52:6a:81:
29:7e:74:1b:61:0a:d2:85:58:25:9a:e2:8b:28:ba:4c:04:7c:
ae:44:f9:c7:c8:4a:56:4f:a1:c2:c3:d0:31:92:fa:77:df:6e:
5c:9b:a9:22:7b:c4:c0:ff:f5:50:bc:db:ce:2a:27:d8:fe:de:
39:e4:35:9d:f7:32:c7:13:f3:1d:17:c1:f8:57:97:aa:5d:12:
7a:4d:bd:55:5c:14:ab:c6:a7:37:f2:0a:36:28:de:4a:1f:53:
b5:b1:d3:ed:1a:e2:c7:e8:27:9d:25:ca:e1:77:66:81:c9:6f:
81:67:16:24:c3:e6:aa:91:ef:e0:78:36:2b:18:c4:de:8c:28:
2c:c8:37:a0:2d:f7:44:3c:fd:f9:87:8b:17:e9:02:15:f7:76:
eb:ea:b1:38:73:5c:a1:19:7b:56:cc:d2:0f:c7:5c:65:b4:81:
1a:02:d1:08:ba:aa:3f:a8:25:34:c0:03:b8:6d:be:2d:5d:7c:
9e:b3:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:41:01 2026 by rpki-client