Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: b0ZhBHYYb62KAriqop1UWlBGwRrG4FCXH92heuCJl3Y=
Subject key identifier: 1B:C5:5D:D8:78:50:EF:3B:CE:82:39:4A:BB:B1:04:C7:DB:36:9F:45
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 01A18074575DCFABCD8F0F0C7575EE0D73D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 057C
Signing time: Wed 28 Oct 2026 03:01:10 +0000
Manifest this update: Wed 28 Oct 2026 03:01:10 +0000
Manifest next update: Thu 29 Oct 2026 03:01:10 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: ne4r6HJQoUFl6j0bJzZhuqNi7w4J8ZJOG0K2TLZXKDE=)
2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:57:5d:cf:ab:cd:8f:0f:0c:75:75:ee:0d:73:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Oct 28 03:01:10 2026 GMT
Not After : Oct 29 03:01:10 2026 GMT
Subject: CN=1bc55dd87850ef3bce82394abbb104c7db369f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:b5:91:5c:ca:af:ee:68:04:94:31:ef:aa:
11:7a:2d:c8:be:94:e5:15:15:a3:fd:2a:dd:69:6f:
19:75:2e:a7:a6:aa:42:99:9f:ac:30:86:47:18:e3:
53:48:41:19:3d:80:2d:5c:1d:cf:0f:b8:22:de:7f:
d6:1e:76:a0:64:7b:c5:a6:28:cd:89:f1:81:93:e4:
9b:99:37:78:5d:c1:6d:92:83:58:d3:84:21:68:c5:
f6:27:b8:2e:91:2b:f9:20:6e:56:6d:89:d0:a0:ea:
b8:ff:4f:42:2b:22:e2:d6:ba:3e:80:74:4c:1e:fc:
61:5c:e0:59:42:d2:1e:6d:a7:fd:5e:fb:7b:df:be:
b2:ef:94:39:1a:5c:c2:a3:a2:c6:e3:2f:9e:a2:9b:
8a:93:be:3e:ce:d3:02:15:72:65:20:9a:70:80:91:
19:b0:6b:ee:24:4c:f7:ea:2a:30:fe:9a:41:29:9a:
d1:84:b0:ca:06:8d:6c:38:35:f8:59:86:87:68:eb:
7e:16:43:b4:33:82:0a:46:2c:11:40:6b:26:19:55:
20:93:07:2f:f7:5b:fa:d3:8c:ba:c8:aa:8c:ce:5d:
16:c3:3f:be:bf:41:88:89:fd:5c:7c:25:f7:33:67:
d2:5d:4e:59:94:15:90:9c:76:76:ad:fb:64:04:d7:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:5D:D8:78:50:EF:3B:CE:82:39:4A:BB:B1:04:C7:DB:36:9F:45
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7d:89:05:76:6d:d0:eb:87:fc:18:95:fc:8d:98:89:02:d9:
12:40:a1:db:67:25:e9:b0:48:9d:8e:10:18:a3:4b:5b:86:3c:
ec:54:f1:48:ab:31:25:23:c4:30:e8:1b:2f:59:b2:d4:ee:3f:
dc:c3:14:a4:28:fd:5e:34:93:52:46:6d:ae:71:34:a5:fe:cd:
38:fe:e2:f8:bf:00:93:0d:ad:dc:29:55:90:7c:c5:da:9b:af:
26:04:34:65:da:c7:22:9a:76:f0:25:33:81:f8:12:79:dc:e3:
8c:87:ef:85:77:97:d4:03:9a:f9:09:62:d0:e1:8d:af:a2:33:
cb:6a:ab:b2:a0:32:1c:57:35:10:45:2f:05:95:fc:ab:41:2e:
04:bd:f6:53:b2:8a:7d:20:03:b0:f1:71:dd:71:fd:b8:7a:98:
97:c0:21:5a:3a:04:01:18:1c:3e:46:53:17:7c:cb:b6:97:54:
1c:bf:c3:05:b9:6b:17:3c:c5:e2:17:44:dd:53:47:64:c0:3b:
62:5b:2d:bc:13:a8:5a:e7:26:74:da:a5:df:52:0c:ed:70:56:
20:45:f8:6a:d1:83:bc:e7:e2:41:ad:e1:59:5f:16:5d:a6:c4:
12:c5:0e:7e:4a:73:2e:56:4e:01:22:ad:1b:d5:39:fb:02:55:
02:10:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:05:44 2026 by rpki-client