
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
File: WanLToBmxLffBLT9DXEgFrVYYFE.mft (raw, json)
Hash identifier: J7VOzGMTcQWYk+NG83RMSGFyaGytVhVB0QDNNiCz5FQ=
Subject key identifier: 04:82:15:E4:C7:05:2C:BA:DA:2B:C9:C3:7C:8B:33:12:F9:DB:A3:0E
Authority key identifier: 59:A9:CB:4E:80:66:C4:B7:DF:04:B4:FD:0D:71:20:16:B5:58:60:51
Certificate issuer: /CN=59a9cb4e8066c4b7df04b4fd0d712016b5586051
Certificate serial: 01A186762EDBE4CF820740E3F7000E5DF709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
Manifest number: 01D8
Signing time: Thu 29 Oct 2026 07:00:54 +0000
Manifest this update: Thu 29 Oct 2026 07:00:54 +0000
Manifest next update: Fri 30 Oct 2026 07:00:54 +0000
Files and hashes: 1: ODfm3Yxukkk8Zy5VhsFGvCnVz3Q.roa (hash: rPqaG7a4NES3BlfPeVXwXTW0FGFWtg1TVkdyJef/wvg=)
2: WanLToBmxLffBLT9DXEgFrVYYFE.crl (hash: 525H0Sn6uMzi8djQusrALEkSRYYQ3A6YPDaGquGKewc=)
3: uBNL_ss2Qb-o57v6RB1FMQTXLJ8.roa (hash: gTgD0ioaHypn29NRYsE+FbQ+jS6wHnoN/Ie2L/7E1rc=)
4: yBuaNUDtkZX5BM5UVm4FRpLBl4A.roa (hash: IGGEjHe9Mqw+ubMvARqgA6TVzk7zSt3+AzhRVYNBFSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:2e:db:e4:cf:82:07:40:e3:f7:00:0e:5d:f7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a9cb4e8066c4b7df04b4fd0d712016b5586051
Validity
Not Before: Oct 29 07:00:54 2026 GMT
Not After : Oct 30 07:00:54 2026 GMT
Subject: CN=048215e4c7052cbada2bc9c37c8b3312f9dba30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:76:73:50:c1:54:e2:b8:75:19:dd:0a:68:
f9:c2:6e:32:6e:6a:eb:f1:78:6b:58:db:a9:d2:88:
fa:eb:42:cf:aa:48:18:d8:f1:90:3d:bf:4d:fa:a0:
f4:ff:f0:0a:9d:8c:91:f5:d2:aa:94:b1:26:d7:9f:
ca:99:19:58:df:d4:53:69:67:04:ed:3f:36:51:39:
5d:e0:ac:75:af:a3:9f:88:bc:9c:e9:ba:ad:45:0a:
3a:48:75:dc:5a:ee:f4:e4:a7:1f:a1:7c:6c:23:d4:
2a:2f:ba:c5:c9:20:26:8d:4f:32:e9:91:65:4d:b9:
54:ec:1a:ae:7b:06:3a:19:0e:02:fa:cb:f1:f3:f9:
45:3a:be:94:a1:40:f5:f6:b0:86:a6:8a:6c:90:10:
53:60:57:ad:5b:9f:a6:e9:1d:2b:75:2a:c1:a3:51:
71:37:d5:89:21:fd:33:2c:4e:0d:21:ba:ee:20:4f:
01:11:2e:97:be:55:20:84:dc:d4:48:a1:b1:69:d3:
68:d5:ff:11:3b:bb:e7:c6:04:f0:6a:62:77:05:e8:
01:83:00:09:96:6a:36:62:86:b3:7c:bc:6f:de:fb:
66:28:a7:61:ca:87:ce:92:e4:78:84:06:35:6d:23:
29:b2:32:f9:3d:2b:07:f9:bd:95:c6:4e:61:bb:7a:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:15:E4:C7:05:2C:BA:DA:2B:C9:C3:7C:8B:33:12:F9:DB:A3:0E
X509v3 Authority Key Identifier:
keyid:59:A9:CB:4E:80:66:C4:B7:DF:04:B4:FD:0D:71:20:16:B5:58:60:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c2:bf:16:8f:23:63:fa:09:c2:b8:a7:5c:9a:b0:65:29:5d:
b1:51:4d:fc:d0:d0:4b:c2:ba:e5:48:34:60:d4:d0:98:44:c1:
8a:ba:ee:06:e8:18:9e:28:66:9a:7d:ad:f4:64:00:44:63:d7:
bc:19:1d:da:bc:1d:bd:7b:56:c9:8b:ec:af:52:3e:a2:df:9b:
f7:34:10:93:96:0b:a4:da:1f:6c:32:8e:dc:ab:d0:de:3e:d5:
a4:a2:22:70:98:0b:33:06:ec:58:1a:5f:82:be:7c:df:9c:c1:
42:da:4a:0c:8d:4c:a5:9e:08:5d:35:56:e3:39:64:0a:78:26:
c1:28:80:c0:74:b0:50:e6:29:c2:2a:2d:f5:12:ed:16:93:fd:
38:19:09:6b:58:fa:bd:4e:73:82:0b:2b:7e:c8:c5:6f:8b:9b:
d9:9e:63:dc:7c:2a:e0:59:66:d0:b7:6c:04:fa:22:59:82:8f:
41:df:37:d2:14:42:80:42:b0:3b:4f:90:65:95:f3:c2:50:14:
78:31:d1:cd:70:e1:96:65:6f:70:b1:e5:87:20:35:a4:23:bd:
19:60:32:0f:a7:52:98:04:0e:f0:12:e4:a2:5c:bb:18:bf:b6:
66:c7:94:fc:2b:c2:99:3b:75:82:41:85:a7:25:e6:18:27:87:
ee:4a:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:33 2026 by rpki-client