Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier: mjuUL35+Onpds6Y45M7tpu+tzhaRtqao+lIht2Otdu0=
Subject key identifier: 69:FA:32:6D:A8:AA:3F:33:BE:E0:61:8C:5F:3F:42:3B:CF:F1:12:5B
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 01A15AE6C9CFD41A051354EFDF2E839670CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number: 03BA
Signing time: Tue 20 Oct 2026 20:00:36 +0000
Manifest this update: Tue 20 Oct 2026 20:00:36 +0000
Manifest next update: Wed 21 Oct 2026 20:00:36 +0000
Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: NIznGUloAs68sUjjgbZkE7GfDpmy0BSRliF/IOljfvM=)
2: aVR1DGlOpMImv1P3m-JsR94bIGc.roa (hash: tbwolDJwQ7h6KJzx4qAPP8SgaZe4LSSKXZP0YAxibg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:e6:c9:cf:d4:1a:05:13:54:ef:df:2e:83:96:70:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Oct 20 20:00:36 2026 GMT
Not After : Oct 21 20:00:36 2026 GMT
Subject: CN=69fa326da8aa3f33bee0618c5f3f423bcff1125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:dc:1b:a6:0b:42:7a:70:05:9a:14:6c:c6:
36:02:15:9c:59:4e:18:ce:b3:07:99:9e:20:6c:9d:
3a:7f:80:25:04:cd:0f:55:7a:42:a2:01:9c:b9:21:
8e:1a:30:4f:09:1d:c7:f5:71:a9:2f:73:aa:2b:18:
9e:e2:f7:4a:7f:78:bd:0c:81:93:91:fe:70:4c:d2:
7e:75:53:20:ab:c6:2c:f2:52:3d:e7:19:ac:de:a6:
99:e2:fe:b2:5c:90:07:6d:4d:e2:c0:dd:4b:30:ba:
ca:fe:19:c7:db:66:0a:31:9e:b2:72:e7:59:3a:ff:
89:a3:20:97:9b:00:e5:54:99:5c:62:ae:d7:7f:a4:
ad:b9:49:d9:1a:57:ce:cd:a8:53:8c:e5:7a:b0:43:
c2:eb:7e:de:cf:c5:5e:2b:07:52:f6:8c:2f:26:ff:
83:40:b5:97:2b:8a:e5:95:ff:e4:c2:15:2b:30:25:
a6:ef:a0:5e:f4:42:20:09:a3:da:b4:11:10:c5:b1:
6f:5c:16:95:06:da:82:68:97:da:42:27:8e:fc:0e:
41:af:26:04:df:d0:be:0e:28:71:48:e7:7a:12:6c:
cf:51:4f:9c:63:3c:29:12:12:5d:ec:ec:f9:e9:41:
fe:cb:2c:cf:cd:f9:b7:93:18:74:cc:21:83:42:95:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FA:32:6D:A8:AA:3F:33:BE:E0:61:8C:5F:3F:42:3B:CF:F1:12:5B
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cc:6a:b2:a5:f4:4a:1d:d6:25:77:f3:9e:d0:56:3a:91:f8:
8a:6c:cf:e6:bd:91:91:b1:b5:b8:7e:ce:43:a3:54:4d:be:b4:
98:d8:a4:93:7d:14:5d:a0:2c:c8:d4:a8:19:ca:7c:3e:a0:36:
d4:bc:cd:50:97:d8:d9:d5:b9:41:c4:b4:2d:d6:4a:1a:4b:57:
b7:28:f4:95:d9:7a:d8:23:79:90:bf:b9:ee:57:27:01:4c:b6:
4e:7e:94:d5:9f:6b:b0:5e:de:92:52:a0:1e:51:1a:5a:c8:f3:
95:8c:87:5a:4d:69:66:ee:9b:78:c7:4f:fd:8b:3d:9e:01:a9:
14:d5:a9:1a:fd:1a:32:61:eb:87:e9:83:4f:63:5d:a6:21:a3:
d2:ad:35:10:c7:df:57:ff:bd:1f:27:73:f7:34:9f:6a:35:77:
f0:9d:f1:30:43:ae:ef:24:58:c1:bd:3a:0f:dd:2d:fd:32:0f:
c5:5d:6d:68:19:f2:08:2e:46:bf:f8:1a:a4:d1:44:b0:39:f3:
ae:94:c0:c9:f8:9a:70:d1:1b:c5:85:c9:ae:38:61:cf:e9:b9:
38:32:d0:d1:db:41:58:e6:ad:98:84:5a:e4:81:aa:16:a9:57:
6b:85:a5:27:71:86:1b:48:6b:20:d8:7b:39:a5:3d:9c:fd:96:
56:62:fe:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFa5snP1BoFE1Tv3y6DlnDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTY4MWM3MWJlYjQ2NGUwMWQ1YjY4ZTE5Y2E1NjZkYTk5
MzBlMjMwHhcNMjYxMDIwMjAwMDM2WhcNMjYxMDIxMjAwMDM2WjAzMTEwLwYDVQQD
Eyg2OWZhMzI2ZGE4YWEzZjMzYmVlMDYxOGM1ZjNmNDIzYmNmZjExMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhXcG6YLQnpwBZoUbMY2AhWcWU4Y
zrMHmZ4gbJ06f4AlBM0PVXpCogGcuSGOGjBPCR3H9XGpL3OqKxie4vdKf3i9DIGT
kf5wTNJ+dVMgq8Ys8lI95xms3qaZ4v6yXJAHbU3iwN1LMLrK/hnH22YKMZ6ycudZ
Ov+JoyCXmwDlVJlcYq7Xf6StuUnZGlfOzahTjOV6sEPC637ez8VeKwdS9owvJv+D
QLWXK4rllf/kwhUrMCWm76Be9EIgCaPatBEQxbFvXBaVBtqCaJfaQieO/A5BryYE
39C+DihxSOd6EmzPUU+cYzwpEhJd7Oz56UH+yyzPzfm3kxh0zCGDQpXleQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn6Mm2oqj8zvuBhjF8/QjvP8RJbMB8GA1UdIwQY
MBaAFFimgccb60ZOAdW2jhnKVm2pkw4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEt
OTdmOTFiYzk3YTQyLzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEtOTdmOTFiYzk3YTQy
LzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcxqsqX0
Sh3WJXfzntBWOpH4imzP5r2RkbG1uH7OQ6NUTb60mNikk30UXaAsyNSoGcp8PqA2
1LzNUJfY2dW5QcS0LdZKGktXtyj0ldl62CN5kL+57lcnAUy2Tn6U1Z9rsF7eklKg
HlEaWsjzlYyHWk1pZu6beMdP/Ys9ngGpFNWpGv0aMmHrh+mDT2NdpiGj0q01EMff
V/+9Hydz9zSfajV38J3xMEOu7yRYwb06D90t/TIPxV1taBnyCC5Gv/gapNFEsDnz
rpTAyfiacNEbxYXJrjhhz+m5ODLQ0dtBWOatmIRa5IGqFqlXa4WlJ3GGG0hrINh7
OaU9nP2WVmL+qw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 23:54:25 2026 by rpki-client