Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: Ajr5Bu6eoasAb8buPrlbrRIvqaFF/tcxkwTMpFKQKD4=
Subject key identifier: CD:1F:FD:38:80:A0:63:5F:BD:58:29:29:2D:21:37:52:02:A4:17:9C
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019E3072198B66BBF5285ECF1A88A329BC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 128E
Signing time: Sat 16 May 2026 11:00:44 +0000
Manifest this update: Sat 16 May 2026 11:00:44 +0000
Manifest next update: Sun 17 May 2026 11:00:44 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: 7x4SEnEYwtjT9Dh2BlhvlnQD+AuG0N6jWdovMgie/PM=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:19:8b:66:bb:f5:28:5e:cf:1a:88:a3:29:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: May 16 11:00:44 2026 GMT
Not After : May 17 11:00:44 2026 GMT
Subject: CN=cd1ffd3880a0635fbd5829292d21375202a4179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:0d:0a:aa:b5:d2:f3:89:8c:43:e1:99:a5:
29:3c:7b:d4:50:ad:3c:0b:23:a8:5c:05:81:79:94:
6e:c7:d5:5f:f1:70:ba:63:70:82:47:4a:e3:f7:4e:
36:d0:56:88:1b:23:98:54:94:80:eb:9b:de:46:c8:
79:0f:89:e7:9b:62:de:35:99:67:80:8c:ae:ea:09:
b3:28:8e:07:6b:f5:6d:7e:4f:7c:ba:e7:ee:91:de:
fd:14:dc:05:b1:df:67:17:bd:6a:6f:fe:45:15:27:
7a:73:d4:2b:1b:95:64:6d:c6:de:25:18:41:0c:5b:
71:0c:07:f7:fd:31:70:8c:98:4b:4d:a4:6e:37:84:
8a:ee:5d:bf:a9:7d:e8:1c:b7:77:a4:8c:dc:82:c3:
dd:a4:4a:77:3b:6e:4e:1e:ba:08:57:5d:f1:9f:da:
de:f4:b8:64:94:b3:46:fd:07:4e:94:fb:16:3f:5a:
02:f5:b1:f7:ff:d6:aa:ed:11:b1:3a:63:96:3f:b6:
34:73:8f:68:63:dd:45:06:16:bb:cd:61:3e:99:9e:
23:73:07:51:b2:c0:48:e9:2e:a7:3d:8d:36:be:01:
11:93:60:61:2d:05:b3:9e:f3:73:94:31:2b:ae:22:
d2:1c:f0:b8:39:ed:24:c5:00:b9:7a:d9:9e:d7:7d:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:FD:38:80:A0:63:5F:BD:58:29:29:2D:21:37:52:02:A4:17:9C
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b4:2a:b4:ba:87:52:37:00:b0:c3:b6:db:04:6a:2d:5e:96:
5c:74:06:72:1d:17:26:9f:cf:56:cf:3e:c6:8e:75:b8:b9:cf:
06:71:9f:91:6c:a7:58:a7:56:c7:db:ca:03:00:ca:1a:bb:e5:
7e:12:f4:28:56:6d:91:04:13:cd:08:02:a3:dc:29:1c:33:64:
af:58:f9:8c:66:4e:e1:8b:0b:0c:16:36:77:6d:db:f3:a5:32:
4b:ca:9f:fa:dc:38:f8:c2:07:d2:5e:da:fe:86:69:6c:10:0f:
31:49:be:cd:29:3a:fa:42:44:fc:98:e0:16:f6:6f:5a:9b:de:
81:ac:58:30:0e:28:01:26:8b:58:bf:2b:e7:4e:4c:ac:68:df:
a9:fb:6a:e5:2e:6b:b1:eb:a7:dc:26:cc:b4:a1:96:bd:ec:ed:
71:ac:ff:d6:0d:54:39:5b:78:f7:04:56:ae:6f:1e:d8:91:47:
99:90:7c:dc:f2:59:eb:30:1e:b6:fc:9c:0b:5d:54:6d:8d:e4:
83:0d:e3:f8:1b:16:cd:a6:76:03:8e:61:1f:5b:16:de:49:d4:
63:01:9f:98:d9:3c:77:47:e4:ec:df:28:53:75:03:c0:62:96:
7a:ca:af:20:12:72:7f:1d:ed:c6:27:9c:8c:ac:7a:79:23:06:
3f:64:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:46 2026 by rpki-client