Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: eDGeRZqouaxLEzSJl5RXnWI7ipsX5FWusLd8ixhbLFA=
Subject key identifier: 3A:D4:37:C2:45:0D:AE:95:B4:6B:21:E3:D8:9A:24:3A:5B:0B:37:F1
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 01A1841A6906F71AA0AD09C35AB19F06F3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 1447
Signing time: Wed 28 Oct 2026 20:01:25 +0000
Manifest this update: Wed 28 Oct 2026 20:01:25 +0000
Manifest next update: Thu 29 Oct 2026 20:01:25 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: zi7drjuxQ2nI59m5iLPITGUBNkE+p5s7UQjHOsHYdTk=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:69:06:f7:1a:a0:ad:09:c3:5a:b1:9f:06:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Oct 28 20:01:25 2026 GMT
Not After : Oct 29 20:01:25 2026 GMT
Subject: CN=3ad437c2450dae95b46b21e3d89a243a5b0b37f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:65:9d:87:70:e7:3d:8f:a8:ae:3f:4d:d0:
df:a3:78:0d:02:74:32:0c:a0:61:15:61:fc:27:68:
07:34:f0:2b:fc:51:94:94:c0:73:e8:7e:d8:22:c2:
19:13:b1:c7:99:5f:90:cf:e7:aa:43:46:03:44:02:
91:50:be:90:b2:dc:3f:91:97:0b:13:03:ae:55:aa:
05:4c:4b:bf:1b:75:ef:e4:fa:09:c1:d6:3c:1a:26:
c9:f1:cb:fb:ac:2f:51:ae:13:f0:78:64:2f:fe:95:
8a:85:b3:1d:0a:a4:72:88:9d:f4:fc:b5:86:9f:a3:
b6:bd:7c:fd:f8:64:8b:8d:06:87:b7:98:18:bc:39:
75:c0:e9:03:ee:08:e0:b6:a5:f1:3a:42:5b:27:5d:
ca:fd:27:b9:ff:11:2e:2e:ae:aa:a4:0a:51:a2:38:
a0:04:49:7a:4b:59:65:e1:4a:f7:1b:55:8d:79:f9:
14:17:cb:8a:df:90:64:57:ba:23:e4:4d:bc:b0:e7:
3e:1e:f9:46:29:e4:17:b9:7f:7a:6f:ac:fd:39:83:
12:57:06:15:b7:83:22:c6:92:91:3c:8f:7a:73:42:
52:35:a7:72:25:ce:a1:96:1d:30:a5:d2:2f:54:5e:
f0:6f:4c:9c:40:06:6b:30:79:48:b9:63:e9:6c:fb:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D4:37:C2:45:0D:AE:95:B4:6B:21:E3:D8:9A:24:3A:5B:0B:37:F1
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:db:be:9b:bc:bd:f1:d8:25:c2:70:36:36:b6:16:c2:c0:79:
cf:97:3f:9d:17:91:62:a5:1a:28:25:f8:0d:fe:8a:c1:bb:3b:
5f:f2:8b:fe:e9:27:c1:44:06:cf:6f:b8:c6:7b:80:dc:86:b3:
fe:3a:2a:12:35:83:67:99:ac:e1:71:6d:37:03:2c:98:45:a5:
e4:54:e9:ae:25:63:01:2e:fd:2f:62:d9:e3:17:54:cb:58:1d:
d8:d8:0e:09:92:0a:5b:6a:e2:9b:7d:1a:f7:1a:24:1a:24:49:
e6:20:ac:78:cb:c2:20:16:68:42:a2:cd:c7:4f:36:bf:d3:8f:
15:f1:f6:45:75:ba:a6:01:a7:ea:ee:5c:74:11:4b:26:49:7f:
46:c1:14:18:f8:34:24:3d:cb:64:e8:23:3a:c2:ce:fb:49:a9:
8d:c4:14:30:63:53:74:da:3e:4d:81:2a:72:2e:57:19:ee:ee:
01:39:db:e7:2f:94:6b:3a:2a:91:c1:6c:b6:f1:72:3b:3a:f5:
db:65:d6:df:ba:ab:c9:3f:ec:0a:2f:5a:49:39:38:14:f1:30:
a0:ec:a1:4e:52:d7:2d:9a:19:f7:3f:99:7f:6f:9f:0e:f4:ee:
1b:c9:eb:0b:73:4a:73:f2:f1:cc:ab:e9:dd:53:9b:1f:68:19:
df:67:8e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEGmkG9xqgrQnDWrGfBvOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3
MmViZWYwHhcNMjYxMDI4MjAwMTI1WhcNMjYxMDI5MjAwMTI1WjAzMTEwLwYDVQQD
EygzYWQ0MzdjMjQ1MGRhZTk1YjQ2YjIxZTNkODlhMjQzYTViMGIzN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n9lnYdw5z2PqK4/TdDfo3gNAnQy
DKBhFWH8J2gHNPAr/FGUlMBz6H7YIsIZE7HHmV+Qz+eqQ0YDRAKRUL6Qstw/kZcL
EwOuVaoFTEu/G3Xv5PoJwdY8GibJ8cv7rC9RrhPweGQv/pWKhbMdCqRyiJ30/LWG
n6O2vXz9+GSLjQaHt5gYvDl1wOkD7gjgtqXxOkJbJ13K/Se5/xEuLq6qpApRojig
BEl6S1ll4Ur3G1WNefkUF8uK35BkV7oj5E28sOc+HvlGKeQXuX96b6z9OYMSVwYV
t4MixpKRPI96c0JSNadyJc6hlh0wpdIvVF7wb0ycQAZrMHlIuWPpbPv1oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrUN8JFDa6VtGsh49iaJDpbCzfxMB8GA1UdIwQY
MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt
OWM3MDhkYWMxZDkyLzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky
LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStu+m7y9
8dglwnA2NrYWwsB5z5c/nReRYqUaKCX4Df6Kwbs7X/KL/uknwUQGz2+4xnuA3Iaz
/joqEjWDZ5ms4XFtNwMsmEWl5FTpriVjAS79L2LZ4xdUy1gd2NgOCZIKW2rim30a
9xokGiRJ5iCseMvCIBZoQqLNx082v9OPFfH2RXW6pgGn6u5cdBFLJkl/RsEUGPg0
JD3LZOgjOsLO+0mpjcQUMGNTdNo+TYEqci5XGe7uATnb5y+UazoqkcFstvFyOzr1
22XW37qryT/sCi9aSTk4FPEwoOyhTlLXLZoZ9z+Zf2+fDvTuG8nrC3NKc/LxzKvp
3VObH2gZ32eOAQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:42:19 2026 by rpki-client