Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier: nOOpDgc11VhR6rxPk4DlBWDLb8daRO83x+xP9G+rAjg=
Subject key identifier: F7:F1:E1:00:7C:26:E3:BB:21:A1:B6:81:BD:90:57:96:51:4D:B4:2C
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial: 01A1AABAA17B76EE1E115B2628734368DBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number: 149F
Signing time: Thu 05 Nov 2026 08:02:00 +0000
Manifest this update: Thu 05 Nov 2026 08:02:00 +0000
Manifest next update: Fri 06 Nov 2026 08:02:00 +0000
Files and hashes: 1: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: WEGtPN+/pPKEX8sRNuImDppWVAy7+MCx2A16lpKmsDg=)
2: uSTOG5hPdGAJ8tKDlqGT_j-Wz90.roa (hash: K1kjwbswlvDhq+X0b+wPq3xckmUou+CcfH9LmHS/rpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:a1:7b:76:ee:1e:11:5b:26:28:73:43:68:db:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Validity
Not Before: Nov 5 08:02:00 2026 GMT
Not After : Nov 6 08:02:00 2026 GMT
Subject: CN=f7f1e1007c26e3bb21a1b681bd905796514db42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:ba:ef:be:a4:6b:e2:09:59:6c:f1:c2:bc:
18:54:f8:54:22:c4:cc:cd:44:12:d3:d1:dc:bf:7f:
d9:4e:69:2e:b7:e0:ca:22:b1:31:5e:13:33:be:5a:
fc:08:6f:2b:ba:d3:fc:16:3c:fd:0f:80:87:96:15:
32:4c:c9:6c:4f:c8:75:07:1d:25:e8:dc:96:c8:0e:
56:7f:32:af:46:e4:85:b4:57:3f:42:18:9d:e5:bb:
bd:a6:3e:ce:23:48:64:8a:e6:f6:13:df:0b:6c:00:
26:fa:0d:4b:ff:3d:e7:aa:44:2c:a2:6b:b8:17:50:
6f:09:58:07:66:a0:9b:2a:af:11:da:c8:94:74:57:
65:4f:23:42:f2:16:cf:aa:0f:98:b1:52:88:ae:7d:
e2:cb:fa:c8:b6:04:11:ea:ac:43:fa:fa:de:0d:79:
a2:25:b1:74:9f:83:bd:2b:42:b7:b2:db:74:14:19:
47:d0:6d:fd:56:e8:27:fb:c3:da:4a:40:da:a8:42:
33:84:57:c5:30:f4:8a:d9:05:95:71:51:d2:a4:89:
f7:7b:a4:39:4a:23:e4:07:d7:fd:cd:2b:ca:e0:c7:
9b:4a:0d:b4:20:23:5b:24:7e:0a:62:8b:3f:14:80:
a2:83:2a:3f:28:3c:d6:95:50:a2:43:12:0d:83:9d:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F1:E1:00:7C:26:E3:BB:21:A1:B6:81:BD:90:57:96:51:4D:B4:2C
X509v3 Authority Key Identifier:
keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:92:54:5e:3b:95:75:f8:86:2e:fa:52:04:a6:f1:ee:07:39:
85:ff:04:b5:40:85:f9:e4:5e:67:65:a1:3e:ea:20:d9:b1:5d:
d7:85:39:3f:09:a0:38:1a:30:eb:38:8e:0a:2b:9c:44:b9:68:
24:aa:16:e1:cc:de:ab:2b:1a:09:e8:ac:9f:25:55:93:31:53:
f6:3a:5b:d0:92:96:23:28:17:9d:a1:b1:99:98:33:21:4f:dd:
a8:bd:f5:8b:ce:4a:28:d8:6a:8f:bd:41:ec:e6:8d:8c:64:ab:
61:aa:ab:6e:e8:90:56:87:10:c0:98:03:a0:e8:2a:54:6f:c7:
31:93:53:fb:f9:f7:18:e0:66:e9:87:35:e8:48:22:03:41:51:
a9:da:1f:d2:65:07:09:93:ef:ea:9f:61:a1:a4:e8:b9:b5:0a:
d9:aa:8c:61:7c:d1:a8:5f:47:38:e5:81:76:ae:f5:ee:b3:62:
f0:53:e3:d0:1a:f6:8e:51:3f:38:3b:e3:1b:96:97:31:17:73:
56:41:55:27:fa:1e:87:45:ba:a1:9f:cb:d4:c4:6f:c7:de:b7:
b6:e1:4e:9b:da:fe:cd:95:c4:0a:37:64:7a:36:ba:3f:07:5f:
ea:41:b4:e3:19:da:4f:cc:3e:69:d7:2e:47:37:0b:84:02:45:
7b:74:ee:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:03:43 2026 by rpki-client