Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: EedwUHkpIsDM6r5pDrWWuvFOV4nyXn14nEBafH7sCcg=
Subject key identifier: 77:21:3C:29:1A:9F:F8:7B:20:88:85:8F:69:93:9B:C0:13:CF:16:34
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 019FCAB898DDFD3927D0DE522BC25C707CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 0CA8
Signing time: Tue 04 Aug 2026 03:02:03 +0000
Manifest this update: Tue 04 Aug 2026 03:02:03 +0000
Manifest next update: Wed 05 Aug 2026 03:02:03 +0000
Files and hashes: 1: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (hash: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk=)
2: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: uMwQkwMJvXoR284ARVsf394ZG9tvh0UkILxmEmrLIFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:b8:98:dd:fd:39:27:d0:de:52:2b:c2:5c:70:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Aug 4 03:02:03 2026 GMT
Not After : Aug 5 03:02:03 2026 GMT
Subject: CN=77213c291a9ff87b2088858f69939bc013cf1634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:30:2b:e2:38:28:4d:e0:fd:99:c1:0f:eb:
9e:d9:92:c4:2e:76:28:ee:71:1e:b7:dc:b5:ec:29:
fd:7f:cc:c2:fe:b9:05:db:85:61:07:94:e5:4f:1f:
15:4e:b2:ba:20:c2:65:bd:4d:82:6b:a5:7a:91:80:
20:10:c5:40:e1:68:af:cd:d2:92:a6:ac:5e:0a:b5:
80:ee:56:1e:43:43:31:9d:57:05:ac:2e:ad:50:fc:
82:08:c8:53:13:a5:e9:ad:64:be:96:2c:ce:6d:f1:
e1:3f:f1:6b:f0:3b:f6:c3:dc:40:93:78:a6:54:15:
39:e1:e3:e8:29:45:fb:b6:48:2e:44:56:c8:b5:08:
e4:e4:c6:52:93:ba:09:93:89:bf:41:fa:32:9c:05:
31:4e:d0:ad:75:c8:8b:4b:e4:a2:5f:6f:08:a5:13:
48:17:35:00:44:ca:fe:cb:5d:b3:01:c1:cc:36:e9:
27:22:69:2e:bb:66:20:27:6e:0a:f3:dc:8f:7d:01:
fe:4d:72:5e:6d:a3:af:9c:e7:91:c0:fc:50:5f:f6:
53:cd:dd:46:b5:82:da:4c:e5:39:f0:a1:30:73:94:
dd:43:06:c5:41:81:03:41:e8:d5:bf:57:b7:06:24:
a9:a3:aa:34:86:c6:e0:27:73:84:a4:17:aa:68:46:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:3C:29:1A:9F:F8:7B:20:88:85:8F:69:93:9B:C0:13:CF:16:34
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:92:76:05:b5:69:b6:10:68:05:72:6f:1b:b9:f1:c7:bc:58:
be:60:e2:30:9a:45:86:64:3c:c4:e9:9d:9f:07:16:2a:5d:ba:
0e:4c:ca:a4:79:5e:3c:75:74:fe:db:a8:5f:38:18:6a:7f:f4:
0c:1e:9e:d7:34:8a:9b:e9:ce:36:41:07:e1:3e:52:f9:dc:3c:
f8:da:a9:dd:17:df:12:e0:d6:c4:28:16:de:1a:15:cb:36:66:
19:68:eb:9e:39:44:bd:b3:b7:8e:a7:fc:f7:93:bd:16:8c:09:
52:49:53:ec:cd:be:5c:63:c9:cb:cb:59:2d:da:51:50:4b:ff:
22:57:93:63:68:c9:7b:84:e1:49:59:fa:95:da:88:c4:27:a8:
49:c7:bb:c0:03:5b:43:9d:97:63:89:26:c4:ed:65:a4:68:7f:
50:0c:05:9a:8b:c4:fe:77:d0:ce:77:bc:bd:b7:66:42:12:2f:
ba:2c:10:bf:40:db:e1:78:e2:51:94:a1:77:4f:0c:f4:6a:ed:
48:38:d2:6b:e5:55:44:7f:cb:02:be:86:b0:80:4e:30:a8:3d:
f6:4c:77:b4:41:38:77:d4:2e:a8:b0:20:0b:6d:55:f2:91:be:
5c:cf:ab:a0:81:4a:7d:79:16:eb:a9:51:cb:91:cd:da:6a:1d:
a5:8d:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:57:50 2026 by rpki-client