Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
File: WqtKKPwphT3SPHa9Hi94zpmZoVo.mft (raw, json)
Hash identifier: 8fL/2vie6POnwctxFVAtFEW3Fn7ic/99Y8ljDCw5Udc=
Subject key identifier: 03:09:60:5C:27:CE:AE:34:95:B4:5B:CF:A8:6E:6E:13:B0:D9:4A:41
Authority key identifier: 5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
Certificate issuer: /CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Certificate serial: 01A0408529780A15543E59270AC5656AD860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
Manifest number: 03A9
Signing time: Thu 27 Aug 2026 00:01:03 +0000
Manifest this update: Thu 27 Aug 2026 00:01:03 +0000
Manifest next update: Fri 28 Aug 2026 00:01:03 +0000
Files and hashes: 1: WqtKKPwphT3SPHa9Hi94zpmZoVo.crl (hash: drnFngqXoWoGcKu+T14QDkl0B3lwLcFc/+GAzNvGRfs=)
2: rHga55Czu_olcqXp1dL1ZJ5IEJs.roa (hash: HvIYhtCsc4ksr8e9YC8iXYnS+/L7IK0zJKHOtTBpT4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:29:78:0a:15:54:3e:59:27:0a:c5:65:6a:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Validity
Not Before: Aug 27 00:01:03 2026 GMT
Not After : Aug 28 00:01:03 2026 GMT
Subject: CN=0309605c27ceae3495b45bcfa86e6e13b0d94a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:2b:57:39:91:0b:57:0f:71:17:0b:dd:d9:
50:1a:6a:fd:95:9b:6f:59:3e:46:18:23:0e:ab:78:
54:91:22:ba:64:b4:3f:48:c0:fb:f6:6c:f1:35:39:
9e:2b:48:ef:7e:b4:ff:b5:1f:10:28:09:cf:85:bb:
58:ea:2e:bb:db:27:21:39:15:60:91:ae:11:62:39:
e8:2e:87:67:46:fe:1a:26:29:4b:5d:91:3e:77:27:
49:42:1c:23:9f:12:c0:03:08:16:0b:02:a0:ae:fc:
9b:b4:37:b8:21:c5:ea:ab:38:32:e2:fb:fd:4a:52:
59:24:05:c0:ce:67:14:83:e3:44:be:80:96:2e:f2:
1e:9d:e1:58:ff:73:10:47:2e:1c:d6:75:88:01:0e:
95:f0:2a:e4:4e:2f:b8:97:58:fc:9a:6f:6b:7a:75:
d9:97:68:51:53:c6:86:85:50:d8:54:15:3e:b8:f8:
0d:d8:7c:01:5f:43:c6:eb:36:6d:0a:fb:61:f2:7b:
74:53:ed:c2:d9:c8:49:73:d4:63:9d:f5:59:06:cc:
f5:9e:c2:0b:d5:af:15:bc:4b:91:8b:56:0f:ac:4d:
05:c0:91:47:d0:a5:04:0b:ba:5a:6f:05:42:80:fa:
c9:7e:1e:2d:39:60:87:97:f3:ad:07:1c:e4:c6:f1:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:09:60:5C:27:CE:AE:34:95:B4:5B:CF:A8:6E:6E:13:B0:D9:4A:41
X509v3 Authority Key Identifier:
keyid:5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:18:a7:28:06:aa:8a:33:4b:ee:a7:5b:64:3c:45:9b:ea:f4:
7e:79:61:26:13:05:d8:3c:fe:d3:b2:61:43:5d:00:ea:a9:e7:
cf:7f:ed:d5:56:6f:f4:f3:18:58:23:fa:19:9a:f6:e1:f2:fb:
99:4f:99:81:6c:4e:83:49:9e:52:36:f4:2c:0f:0d:4e:d2:72:
41:bc:bd:71:cc:1d:9f:7a:e0:13:10:fa:c6:46:ab:34:7c:14:
61:b0:42:80:d8:ea:ef:de:5a:11:1c:c5:a7:8b:69:50:68:d0:
86:b6:c3:d8:3c:32:76:85:bc:fa:38:39:61:94:92:24:de:bc:
7d:f5:74:1e:a2:12:c6:54:27:a0:f0:67:32:df:03:ea:01:1d:
af:54:c3:fe:a2:60:25:94:7a:e0:f1:eb:11:32:b2:a3:3b:5e:
17:e7:fe:4f:b6:64:9b:7b:d7:a9:32:4e:2a:0f:3b:12:e1:63:
bb:40:57:bc:1b:7c:97:41:95:04:a1:33:30:22:c0:70:c9:c5:
a5:d0:b7:8b:9f:8c:c3:85:6a:6f:b3:46:00:fa:f2:06:1b:80:
49:a2:9e:77:21:bc:23:63:ab:b3:ef:05:37:07:7f:3e:11:0d:
1d:ee:d2:8b:6b:81:4a:b5:19:0c:ae:b0:72:d9:90:12:3a:77:
ec:45:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:59:36 2026 by rpki-client