
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: QHrH+i3YaIoKmDk2XQgjCOqZZG+DQ9t4t1ZnQHDhz50=
Subject key identifier: 10:82:97:CE:F3:6D:A6:FF:4C:60:1E:E7:C7:01:73:91:BC:17:3B:94
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 01A0035DF06AB9700C2F7D8A81BCD7B9EF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0B0F
Signing time: Sat 15 Aug 2026 03:01:22 +0000
Manifest this update: Sat 15 Aug 2026 03:01:22 +0000
Manifest next update: Sun 16 Aug 2026 03:01:22 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: aXB0rcEKvUiIYPU+OuHkbLpm0Vn17oCvBFPU4I7MgW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:f0:6a:b9:70:0c:2f:7d:8a:81:bc:d7:b9:ef:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Aug 15 03:01:22 2026 GMT
Not After : Aug 16 03:01:22 2026 GMT
Subject: CN=108297cef36da6ff4c601ee7c7017391bc173b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:e9:73:1d:f9:86:e4:6b:01:e4:65:4d:86:
33:ba:57:d3:74:f8:34:56:bb:33:76:3f:f9:03:83:
5b:eb:7c:f6:40:e3:20:61:a1:20:2d:ef:7b:45:89:
cf:df:d6:ff:08:e8:35:b8:ac:79:62:67:ec:6c:19:
6e:1a:a3:7e:86:94:da:d2:d8:81:78:15:9a:b5:0d:
d0:43:b0:e9:8c:f5:ed:ef:bf:f8:3a:5a:c6:d0:b8:
d4:68:b4:e2:d3:b8:66:de:03:27:f3:6d:74:b3:11:
0a:52:33:6c:c6:d8:d3:77:02:30:f5:22:f9:9d:9c:
60:19:5b:1f:e1:ba:23:6e:53:02:26:67:72:dd:d2:
b9:10:55:fe:fa:ac:90:b7:e0:54:6c:5e:83:e9:36:
b3:35:8f:30:e8:b8:db:62:e8:3b:e8:f3:92:c4:e3:
55:bf:7c:ab:6d:f4:e6:49:e1:00:49:a6:ed:d6:1c:
28:eb:20:18:17:e9:fd:f1:3c:41:d6:d5:98:2c:10:
44:ab:75:c3:ae:ad:b4:b1:32:3f:32:32:a7:95:ce:
25:48:3c:57:35:02:f6:54:d0:9a:b4:9c:47:b7:19:
8b:1a:ac:de:ba:7a:10:e5:a1:95:5e:96:2b:ec:93:
a9:82:0e:67:bf:39:51:0d:ad:6f:36:b7:d0:fe:8b:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:97:CE:F3:6D:A6:FF:4C:60:1E:E7:C7:01:73:91:BC:17:3B:94
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:68:a7:a6:8c:38:6a:84:d0:62:5a:67:19:2f:68:fa:0e:ba:
d7:18:e4:ea:06:1f:5c:1b:72:2c:91:b6:12:e5:7e:53:ee:c8:
93:b3:7e:03:f2:2f:0d:52:5d:69:ff:bc:05:e9:f7:c0:06:44:
6b:ce:c4:44:2c:c4:62:b2:ba:08:8e:d0:67:7a:5e:88:b1:c7:
c6:6f:95:f6:ba:03:20:d8:ec:00:61:d1:e3:45:db:8c:c9:e6:
65:e9:b5:bf:e2:7c:81:86:52:2f:10:c3:3c:63:8f:d0:1a:7d:
6a:10:55:82:f0:f7:41:c3:25:ad:3e:e4:5e:4f:ce:2c:6c:62:
de:f5:96:0a:d0:52:87:52:de:97:76:b1:cd:96:6d:6e:d7:a2:
cb:37:ef:f4:4a:34:f9:ad:aa:d2:53:81:56:de:c1:a4:2d:29:
24:e2:9d:ca:75:b5:70:c7:1c:ec:bb:5d:e8:70:fd:ea:e5:21:
04:a6:6a:9c:c5:ed:41:73:56:fb:79:a9:c5:e8:ff:e3:cf:5d:
84:4b:46:1a:74:75:9c:db:6d:08:18:3b:3a:21:b6:70:55:94:
d2:24:b0:e6:50:d5:f1:0d:ef:65:8b:b2:60:6d:b8:90:e1:b8:
d5:3a:42:9a:34:fa:a5:da:0a:37:d6:b7:5d:16:52:b0:aa:e2:
4e:29:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:48 2026 by rpki-client