Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
File: WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft (raw, json)
Hash identifier: hJhFl8KMuMg15+UMiENAtpuhHYjlHObdV5XglyEvX8M=
Subject key identifier: 2F:42:5F:86:97:23:4C:CE:1D:83:E3:92:56:D3:37:37:4F:79:BD:0F
Authority key identifier: 59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
Certificate issuer: /CN=590bbeab48842a41afac4921d1357838b6fe6c87
Certificate serial: 01A1AB27AEB4CCE0684D552C85FFD4830695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
Manifest number: 03D2
Signing time: Thu 05 Nov 2026 10:01:06 +0000
Manifest this update: Thu 05 Nov 2026 10:01:06 +0000
Manifest next update: Fri 06 Nov 2026 10:01:06 +0000
Files and hashes: 1: 2fY4hZsSdTh_WzyCJONWuTPYXgI.roa (hash: jMpz0IEZreqrZP5N9+pawfm7cQg+jdhrHzZuUi3cLOw=)
2: WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl (hash: Nw6HKf2O4n9Zj/1xWe+K+riKfjM94rbVuQYoERQuP70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:ae:b4:cc:e0:68:4d:55:2c:85:ff:d4:83:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590bbeab48842a41afac4921d1357838b6fe6c87
Validity
Not Before: Nov 5 10:01:06 2026 GMT
Not After : Nov 6 10:01:06 2026 GMT
Subject: CN=2f425f8697234cce1d83e39256d337374f79bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:72:3b:fa:df:d0:19:b6:8d:25:16:e9:84:
ca:08:33:ec:f1:6f:3b:4e:c2:7b:07:2e:0a:9a:06:
c2:3c:c8:db:ee:de:07:73:ed:93:af:d8:d5:f4:37:
5c:81:90:54:9b:85:de:11:be:58:52:8d:b9:b9:7d:
a8:45:a6:2a:eb:29:9c:b6:05:1f:6a:24:e2:ff:36:
1f:ac:ce:9a:33:65:08:0b:35:e9:4b:1f:b2:92:ab:
0d:ca:61:42:8b:69:d9:20:5d:c2:91:05:30:0f:33:
61:a2:43:bc:98:db:20:12:2b:b3:90:52:c6:ee:fa:
58:49:2b:39:8f:dc:1d:a8:94:73:bc:82:09:dc:11:
70:ae:b3:18:cf:22:70:43:81:2d:5a:49:9e:5d:98:
45:5b:f4:f4:3d:9c:82:88:68:61:11:8d:d9:88:5c:
69:5b:05:36:0f:ea:31:4c:8d:70:99:d8:3c:ec:ee:
0a:51:83:ae:6a:30:23:97:08:09:1a:3f:ba:36:25:
23:6e:1d:ef:48:fc:3c:fa:81:71:c4:bb:73:c0:86:
25:4b:75:68:96:91:f9:56:aa:ee:33:09:ac:91:58:
3d:56:0e:fd:b4:fe:c0:2f:29:22:b8:8f:00:9a:a0:
15:9b:40:80:13:dc:be:f1:4e:05:fc:96:da:ab:2f:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:42:5F:86:97:23:4C:CE:1D:83:E3:92:56:D3:37:37:4F:79:BD:0F
X509v3 Authority Key Identifier:
keyid:59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:aa:00:0a:72:00:08:7e:a6:59:81:27:ac:d4:4c:99:fe:13:
c0:e8:fe:41:15:f4:a6:90:36:ab:93:49:a5:44:7e:83:7a:cc:
87:90:74:bf:4a:fb:2a:00:55:3e:80:e9:bc:1f:3e:73:5b:6e:
0d:c0:da:fc:7d:8a:5e:b9:91:bd:73:41:ed:8f:7f:d6:a8:a9:
7e:a1:44:96:45:19:28:21:a6:1a:9f:68:61:01:ce:cf:23:c6:
6e:b7:b5:0d:13:be:da:c6:94:14:a0:bc:0a:4d:8d:b2:ab:0f:
6b:ab:6a:3c:ae:86:75:0c:7a:78:44:f8:0e:8b:e7:f3:8b:18:
36:5a:2b:7a:dc:a4:e8:25:e9:ea:65:75:fe:18:11:fc:fe:dc:
5c:51:06:65:34:9e:fe:7a:f1:b9:eb:70:ef:0b:e7:7e:e0:b2:
4d:d4:e3:14:39:71:7b:43:a5:88:76:ea:a2:4c:36:bf:69:85:
3d:e2:e1:ff:d7:6f:74:48:00:14:01:ae:81:95:3f:26:5d:87:
3b:68:a6:b4:40:1d:5f:4a:21:08:49:b5:50:1b:af:92:3e:8c:
6c:e3:9e:a6:5b:6b:ab:99:7c:0c:3f:45:16:cf:b9:05:fe:03:
06:3c:07:9e:72:46:95:6e:b9:7e:f0:d7:80:04:84:63:e9:91:
ba:81:af:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGrJ660zOBoTVUshf/UgwaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MGJiZWFiNDg4NDJhNDFhZmFjNDkyMWQxMzU3ODM4YjZm
ZTZjODcwHhcNMjYxMTA1MTAwMTA2WhcNMjYxMTA2MTAwMTA2WjAzMTEwLwYDVQQD
EygyZjQyNWY4Njk3MjM0Y2NlMWQ4M2UzOTI1NmQzMzczNzRmNzliZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv1yO/rf0Bm2jSUW6YTKCDPs8W87
TsJ7By4KmgbCPMjb7t4Hc+2Tr9jV9DdcgZBUm4XeEb5YUo25uX2oRaYq6ymctgUf
aiTi/zYfrM6aM2UICzXpSx+ykqsNymFCi2nZIF3CkQUwDzNhokO8mNsgEiuzkFLG
7vpYSSs5j9wdqJRzvIIJ3BFwrrMYzyJwQ4EtWkmeXZhFW/T0PZyCiGhhEY3ZiFxp
WwU2D+oxTI1wmdg87O4KUYOuajAjlwgJGj+6NiUjbh3vSPw8+oFxxLtzwIYlS3Vo
lpH5VqruMwmskVg9Vg79tP7ALykiuI8AmqAVm0CAE9y+8U4F/Jbaqy8vGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9CX4aXI0zOHYPjklbTNzdPeb0PMB8GA1UdIwQY
MBaAFFkLvqtIhCpBr6xJIdE1eDi2/myHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kN2Q1ODMtMmQ0YS00YWJkLTkyM2Ut
MjNhNThmM2Q2MWQ3LzEvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kN2Q1ODMtMmQ0YS00YWJkLTkyM2UtMjNhNThmM2Q2MWQ3
LzEvV1F1LXEwaUVLa0d2ckVraDBUVjRPTGItYkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaoACnIA
CH6mWYEnrNRMmf4TwOj+QRX0ppA2q5NJpUR+g3rMh5B0v0r7KgBVPoDpvB8+c1tu
DcDa/H2KXrmRvXNB7Y9/1qipfqFElkUZKCGmGp9oYQHOzyPGbre1DRO+2saUFKC8
Ck2NsqsPa6tqPK6GdQx6eET4Dovn84sYNloretyk6CXp6mV1/hgR/P7cXFEGZTSe
/nrxuetw7wvnfuCyTdTjFDlxe0OliHbqokw2v2mFPeLh/9dvdEgAFAGugZU/Jl2H
O2imtEAdX0ohCEm1UBuvkj6MbOOepltrq5l8DD9FFs+5Bf4DBjwHnnJGlW65fvDX
gASEY+mRuoGvFQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:17:35 2026 by rpki-client