Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: +9WE2qzXjJ61kL7rZQ0i1HN6/YgcdnPqOWHUeYoqg9g=
Subject key identifier: ED:17:D3:F8:41:B4:CC:1F:A0:AA:2A:31:12:22:77:D7:48:85:CE:A0
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 01A17627D11ED054907A3CC4B19A0AFA907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0BCF
Signing time: Mon 26 Oct 2026 03:01:23 +0000
Manifest this update: Mon 26 Oct 2026 03:01:23 +0000
Manifest next update: Tue 27 Oct 2026 03:01:23 +0000
Files and hashes: 1: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (hash: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM=)
2: Kw4ehkeFdhJyIYvKo5TkPObECaU.roa (hash: eV4xuQ9y0xW+Y+Qh7Gz6UOri5HdKzx1wpaGm5MSkuEA=)
3: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: 0a2nuqAF1FKRBvQMdO2mvE8rhg1kEi1EJSXkgk3i0ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:d1:1e:d0:54:90:7a:3c:c4:b1:9a:0a:fa:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Oct 26 03:01:23 2026 GMT
Not After : Oct 27 03:01:23 2026 GMT
Subject: CN=ed17d3f841b4cc1fa0aa2a31122277d74885cea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:af:53:93:30:81:86:a6:03:c8:91:02:15:
6e:3a:2e:28:8b:0d:9c:c0:2c:b0:30:14:60:88:b1:
6e:61:f6:e1:de:3b:5e:11:43:ec:03:b7:06:f8:06:
ca:1f:96:2f:5b:15:97:2e:38:ce:f9:75:93:28:bb:
29:83:19:38:8b:98:05:2e:c3:d5:d1:39:64:7e:88:
d3:22:d7:df:8f:cb:d8:68:07:10:dd:2a:e1:fa:ef:
ae:e6:e9:b5:e6:3b:4e:a9:c4:ee:4b:f4:3c:5a:2a:
49:8a:b2:2f:39:1e:6b:a6:60:21:92:e1:2e:32:58:
3d:bb:70:1d:7d:bc:0d:7c:3b:06:02:25:1b:35:0e:
74:77:5e:6a:7a:9e:76:3f:3c:04:36:b1:44:df:1a:
4e:f1:4a:1f:b4:49:52:ef:fa:23:a5:e4:ef:48:d2:
92:3a:c1:ce:54:74:6b:8a:f1:9d:61:7a:43:bb:f8:
25:4f:90:9a:79:db:a5:a4:b5:07:ee:3e:dc:3b:53:
33:04:47:84:43:c5:cf:d0:e0:2f:21:02:e6:28:7b:
33:34:3c:64:5f:a2:ac:25:85:f5:83:9f:26:db:8b:
7f:82:9e:eb:62:8a:a4:f9:b2:d4:3a:84:93:5c:3e:
70:79:7a:79:52:d1:59:91:55:64:99:d1:ba:65:6c:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:D3:F8:41:B4:CC:1F:A0:AA:2A:31:12:22:77:D7:48:85:CE:A0
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:17:f7:57:cf:7a:85:0d:a3:a5:35:cf:fe:8f:24:2e:14:08:
eb:4f:c6:7e:5b:55:a2:55:47:88:a2:e5:a4:a1:97:62:24:c2:
c8:cc:a6:a1:22:d0:58:f1:c9:cb:5f:6b:23:f2:b7:79:d9:30:
59:d6:10:4f:81:5b:6f:63:f9:8e:4e:d3:c5:82:82:96:8b:d6:
53:cb:a6:8e:7a:8b:1b:e2:db:7a:b9:ef:b8:8e:44:9d:df:d6:
d1:c8:07:37:fe:5c:85:dd:e1:74:02:72:9c:9d:cc:de:9d:b8:
f3:29:23:ea:ac:0a:3a:32:27:77:10:0a:8f:27:6a:5b:3e:ad:
bc:e5:83:2e:ad:d6:4e:5c:9e:1b:d6:d1:71:c4:84:cc:81:95:
5d:15:dd:91:4f:c8:ab:00:30:40:cf:7c:c0:d3:82:a6:5b:f5:
3c:a6:ab:25:87:15:4a:e0:da:14:9c:07:bf:30:b8:46:70:4d:
c2:90:7c:b9:b7:83:62:e6:f9:19:49:f8:3c:69:19:3d:5e:4b:
ce:a5:48:d1:6d:7e:66:34:9d:47:14:ae:77:49:42:1c:2d:73:
d4:8f:71:31:42:92:0f:c6:81:4b:a9:b7:72:9b:bb:3b:da:f0:
9f:7a:3e:c9:52:27:02:5b:77:96:2b:05:47:b9:7a:4c:97:69:
56:4c:c6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:24:51 2026 by rpki-client