Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: +SZm5DzLfy2jScIGzAr1FN/ajtO0pq2SyAtoKCauE60=
Subject key identifier: B1:1F:05:39:58:A8:5D:E6:F0:BE:DA:79:FE:42:1E:6B:17:1A:70:FC
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 01A17DAA27BE6C0DB8B0C46E66990414EF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 09D8
Signing time: Tue 27 Oct 2026 14:01:05 +0000
Manifest this update: Tue 27 Oct 2026 14:01:05 +0000
Manifest next update: Wed 28 Oct 2026 14:01:05 +0000
Files and hashes: 1: J1GYT5rRj5L_N6tZy2ntpItqAlo.roa (hash: LsALbZjhGHRQ6Sb9UqH1fb/SrgtXCL5+zJg+18cqSLM=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: +KgF3F3GZD4IpaQOKm/K7j9qhDwdZ3Vfjaph+fveoIw=)
3: _My6XhMU3zxgGRKHGXcd-n4cvSk.roa (hash: ocTV8bc0q/eClf0jIXDUKVxA8j0B5XwR5lvU8ldB0v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:27:be:6c:0d:b8:b0:c4:6e:66:99:04:14:ef:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Oct 27 14:01:05 2026 GMT
Not After : Oct 28 14:01:05 2026 GMT
Subject: CN=b11f053958a85de6f0beda79fe421e6b171a70fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:f2:68:81:d4:1c:79:bc:73:5c:1a:fc:4a:
a3:2b:63:6b:60:d0:5d:3b:71:9d:d5:44:61:c0:5d:
4a:8b:cc:d2:87:d7:8a:67:e2:d3:45:65:71:db:d3:
d8:92:87:6a:25:e0:92:e2:4a:3d:7c:b1:d2:86:5b:
4f:c1:b3:a4:de:35:79:3c:f7:6f:ff:b5:b7:46:24:
8c:4c:64:68:ef:7a:b5:e2:bd:71:20:42:84:9e:73:
d4:77:ab:f8:3b:fd:cd:8f:c1:68:0e:20:c4:86:94:
bb:c5:02:84:ac:be:6d:17:fb:41:1d:c1:ca:10:4e:
eb:18:3d:48:5d:ac:9c:4e:a7:02:91:e5:8d:10:d5:
95:d7:ea:86:5c:34:fc:c2:4a:9e:80:b9:da:38:2a:
ed:49:7e:ba:95:c6:dd:4a:6e:3e:33:e6:b3:f6:38:
0f:c5:cb:fc:bf:a8:40:9d:c5:d0:09:c0:3a:b5:1c:
21:cc:ac:a5:ee:8f:9d:64:d3:0a:0d:33:f9:1a:7c:
f0:9e:4c:ca:04:5d:5b:72:95:8b:1b:b0:79:be:cd:
08:3f:db:1e:09:fa:6d:0a:e8:84:86:7b:bc:a0:37:
d0:4b:15:f8:bb:35:91:bd:12:7c:d9:96:07:4b:c9:
4c:7f:92:a9:bc:72:4e:a3:4c:4a:36:13:ab:65:de:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1F:05:39:58:A8:5D:E6:F0:BE:DA:79:FE:42:1E:6B:17:1A:70:FC
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:97:ca:72:bf:8c:c4:af:6f:aa:be:93:2d:b7:7b:1c:c9:13:
20:c4:6d:8e:a1:6f:58:d9:6f:2b:b5:e4:0f:2b:0e:4d:24:f1:
fb:71:b7:20:86:e1:60:83:63:fa:c6:51:09:f4:1b:1b:04:7c:
b3:1f:59:0a:fd:67:f8:f5:cc:13:4d:b2:88:8a:29:30:06:1f:
7d:1e:59:92:71:87:a0:09:d4:f5:58:84:69:35:2d:e6:9e:64:
c2:77:d6:48:35:2d:23:71:ae:05:6d:6d:a9:5b:ac:d6:9e:6d:
b7:40:c8:eb:a7:0d:41:b9:c7:cb:d2:1c:ea:5c:d3:19:e6:01:
a3:66:4d:f8:67:29:0b:4a:9a:76:8f:38:8b:6d:d7:7f:8f:db:
b0:8a:71:89:3b:20:19:90:2c:30:27:db:70:8e:4a:f7:0b:fc:
08:e9:65:bc:a7:4e:95:e7:c6:36:20:6f:10:63:04:b1:6a:37:
44:34:76:f8:cf:4e:0e:3d:08:a2:5c:aa:d3:61:df:21:4b:b9:
43:db:37:90:0c:b8:e7:ae:04:21:64:8c:d9:da:3b:c7:81:a0:
dd:ac:8f:da:f2:26:d2:18:41:ab:99:12:b0:96:16:8d:c4:db:
c8:85:31:7d:18:25:3c:5f:85:b9:05:2d:3d:3c:dd:3c:c7:4a:
13:a8:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:21 2026 by rpki-client