Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: XY4CvCv/Ne2YjR4FWhGh5JVj6J0WrH6K5kZH26dmNqA=
Subject key identifier: 9A:09:FA:C2:63:76:E7:42:D6:4A:DE:FF:AA:45:5C:A1:85:8B:88:C5
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 01A17DE11DDC5F899122B6605B845F8BDD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 15:01:07 +0000
Manifest this update: Tue 27 Oct 2026 15:01:07 +0000
Manifest next update: Wed 28 Oct 2026 15:01:07 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: RppfsgMiGghOxgCDNB4VKIzfd+y8efetEwe4t4UM/wM=)
2: mlSBu9TMzRv1cMksxUNnCbKCFl0.roa (hash: 2BjuTtcqQP3+XgVLMLJcS2zD2YXPkZIw27QDfsAhCoI=)
3: q8bxI4KwUJabKAhcIRxGXIBY40U.roa (hash: ptYSizJNQ3Kc8/zLMIQuVYyw+eoexSAPxfZlEWXvP/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:1d:dc:5f:89:91:22:b6:60:5b:84:5f:8b:dd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Oct 27 15:01:07 2026 GMT
Not After : Oct 28 15:01:07 2026 GMT
Subject: CN=9a09fac26376e742d64adeffaa455ca1858b88c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:70:46:3e:c5:b9:7b:a4:25:49:81:b2:55:
ab:a0:ef:d6:5c:1e:ef:a7:b4:47:fc:b4:b4:02:a3:
b6:d0:60:88:45:00:d1:b4:99:93:4d:62:93:6d:59:
15:15:5e:24:f3:40:d7:49:89:5b:05:0b:78:bd:86:
8b:09:eb:f1:ef:6c:a7:db:6d:fd:b7:c6:99:5c:e9:
0f:5b:b2:fb:62:64:e8:ee:0b:d3:5a:bf:06:be:16:
63:e8:92:58:52:e9:a7:77:6f:a2:19:2b:b7:72:a0:
df:ac:ba:0e:14:ee:04:3f:bd:84:ca:4f:06:41:b1:
5f:5c:12:a7:05:d7:58:ea:da:61:1c:f6:b4:ff:e7:
7c:91:c5:ad:86:17:09:4c:44:47:25:73:9b:94:82:
25:e6:6d:64:9b:2f:ff:e5:75:00:50:d6:04:12:2c:
7e:78:9a:31:1c:1c:76:38:52:14:b2:60:d8:df:15:
df:74:e4:6b:5a:5c:d7:37:7d:73:4e:68:08:9a:61:
36:b2:70:ef:79:06:99:fe:3d:b5:c0:2c:23:c5:2d:
32:26:cc:e3:55:32:e0:5f:b4:a6:c3:0e:21:01:25:
f1:6e:08:da:fb:66:80:08:5f:7a:79:fb:f6:91:b1:
39:75:a7:5f:65:81:71:50:5e:be:a7:78:bc:2c:15:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:FA:C2:63:76:E7:42:D6:4A:DE:FF:AA:45:5C:A1:85:8B:88:C5
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a1:df:10:7b:c9:06:99:0e:9f:68:02:49:78:3b:5a:fb:10:
e7:31:36:c6:4e:61:72:13:57:54:ad:05:16:36:a6:12:2a:f7:
79:79:10:c6:38:58:08:11:9c:c8:38:31:50:b3:0a:13:0d:9b:
a9:8e:ed:f6:82:bd:14:88:19:17:c9:fe:4d:ca:e2:d4:e3:f3:
19:b6:89:3a:8f:6e:43:31:d8:35:3d:74:c2:81:d2:b3:5b:86:
14:48:87:2f:c5:7b:bd:1c:c7:33:26:06:db:15:38:b4:d8:34:
b7:65:fc:a9:12:f3:41:0e:70:e4:ae:5c:0a:b6:42:fe:41:d1:
97:8b:44:13:69:5f:41:88:56:a6:59:95:9c:95:4a:3a:6d:0e:
d7:de:38:51:f6:24:f3:54:f0:b9:96:2f:d1:58:ea:93:f8:13:
f1:4a:02:85:5e:fa:58:29:da:78:2c:a7:3c:73:e5:fc:61:33:
11:4d:5e:ec:1b:1e:e6:93:1a:cc:fb:a1:bf:5b:30:53:c7:a0:
93:fc:4e:50:17:2b:a7:26:09:38:40:c5:29:11:08:d7:fd:af:
6e:ac:ae:7b:3a:cd:74:ba:b0:9c:4f:ac:4c:35:87:03:fb:b1:
a2:b4:4a:88:55:53:5f:b0:94:19:0e:0c:43:0d:1e:7b:c4:ec:
89:19:31:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94R3cX4mRIrZgW4Rfi91+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTI5NDVkMjMxZjVmOGE5NzRiZTcxMmU4NzE4YWI1MGYw
NGNmZmEwHhcNMjYxMDI3MTUwMTA3WhcNMjYxMDI4MTUwMTA3WjAzMTEwLwYDVQQD
Eyg5YTA5ZmFjMjYzNzZlNzQyZDY0YWRlZmZhYTQ1NWNhMTg1OGI4OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpNwRj7FuXukJUmBslWroO/WXB7v
p7RH/LS0AqO20GCIRQDRtJmTTWKTbVkVFV4k80DXSYlbBQt4vYaLCevx72yn2239
t8aZXOkPW7L7YmTo7gvTWr8GvhZj6JJYUumnd2+iGSu3cqDfrLoOFO4EP72Eyk8G
QbFfXBKnBddY6tphHPa0/+d8kcWthhcJTERHJXOblIIl5m1kmy//5XUAUNYEEix+
eJoxHBx2OFIUsmDY3xXfdORrWlzXN31zTmgImmE2snDveQaZ/j21wCwjxS0yJszj
VTLgX7Smww4hASXxbgja+2aACF96efv2kbE5dadfZYFxUF6+p3i8LBU8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoJ+sJjdudC1kre/6pFXKGFi4jFMB8GA1UdIwQY
MBaAFFpSlF0jH1+Kl0vnEuhxirUPBM/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEt
MmU0MWZmM2UwYTZmLzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEtMmU0MWZmM2UwYTZm
LzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqHfEHvJ
BpkOn2gCSXg7WvsQ5zE2xk5hchNXVK0FFjamEir3eXkQxjhYCBGcyDgxULMKEw2b
qY7t9oK9FIgZF8n+Tcri1OPzGbaJOo9uQzHYNT10woHSs1uGFEiHL8V7vRzHMyYG
2xU4tNg0t2X8qRLzQQ5w5K5cCrZC/kHRl4tEE2lfQYhWplmVnJVKOm0O1944UfYk
81TwuZYv0Vjqk/gT8UoChV76WCnaeCynPHPl/GEzEU1e7Bse5pMazPuhv1swU8eg
k/xOUBcrpyYJOEDFKREI1/2vbqyuezrNdLqwnE+sTDWHA/uxorRKiFVTX7CUGQ4M
Qw0ee8TsiRkxRA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:30:28 2026 by rpki-client