
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: o873cv/jQlY604Axws+HYMCQL4tihIfLX+5nNfoAdQQ=
Subject key identifier: 28:15:B9:68:A8:60:49:5B:C5:2E:2E:0D:BA:55:DE:6A:18:2A:85:EA
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 01A0B651E0466D6B8B473ABEE42600A38F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 0D22
Signing time: Fri 18 Sep 2026 21:00:13 +0000
Manifest this update: Fri 18 Sep 2026 21:00:13 +0000
Manifest next update: Sat 19 Sep 2026 21:00:13 +0000
Files and hashes: 1: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (hash: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk=)
2: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: blkVBU2iL6VSn60Eu8n0j12aLv9PQyCNSxu+y4uK+i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:51:e0:46:6d:6b:8b:47:3a:be:e4:26:00:a3:8f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Sep 18 21:00:13 2026 GMT
Not After : Sep 19 21:00:13 2026 GMT
Subject: CN=2815b968a860495bc52e2e0dba55de6a182a85ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:d0:52:16:ce:5f:4a:0b:5f:6c:8a:27:e6:
bd:6f:d2:3b:f7:c8:1a:24:20:ac:46:70:d7:5d:82:
39:25:ed:19:5c:d6:65:72:79:1c:f7:52:b3:48:77:
ec:7d:13:58:95:6f:54:6a:f2:07:be:27:23:66:27:
6b:74:8c:59:41:e7:6d:0b:ba:dd:3a:7f:29:07:8b:
bf:d2:74:7c:2d:08:c0:8d:82:86:2c:ff:1f:11:f3:
08:bc:c5:7a:c5:12:b0:5e:60:8d:2d:43:5f:d1:a3:
19:28:ca:03:fd:41:13:53:8d:58:61:b7:e2:1a:d9:
cc:44:0e:1c:db:db:5d:62:c8:c6:7b:2f:ce:90:e1:
9e:3d:fa:d3:c1:f1:2f:99:67:a8:03:5c:11:0a:ef:
8d:2e:92:05:79:93:55:93:f2:e6:40:37:0e:85:a2:
b1:2a:b6:df:95:1c:25:17:f5:55:1a:00:28:b7:5a:
34:8c:ec:9b:01:29:ea:5a:09:02:2d:a7:64:85:00:
fe:32:f8:dc:92:6d:c2:97:c6:9a:9c:f9:4b:0e:c2:
d8:26:a2:e0:bf:b1:11:01:d3:cf:05:9d:fe:a9:6e:
f7:e4:0f:0c:30:a1:33:ba:07:48:ab:74:1f:bf:70:
ed:93:6f:96:71:b1:50:fe:d1:f8:00:04:af:d1:77:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:15:B9:68:A8:60:49:5B:C5:2E:2E:0D:BA:55:DE:6A:18:2A:85:EA
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:ee:fb:e4:83:4c:a5:39:23:f5:d9:cf:e0:7d:e9:8a:86:
e6:fe:fd:47:a6:92:b9:bb:29:8a:d9:41:69:b3:bd:e6:80:fc:
82:67:f4:b2:de:c6:20:22:4e:95:82:94:8b:d2:05:45:5c:b6:
4e:20:f8:e2:98:f5:9e:0d:80:17:ba:45:d3:0d:25:54:e2:98:
28:f2:e7:68:fb:9e:6f:39:da:0d:5e:c8:7b:2e:75:78:ab:9c:
f8:47:68:9f:e9:63:54:dc:74:d5:37:a9:1a:63:20:4f:c1:65:
f6:cd:39:6f:66:c8:b6:4e:ad:a2:5a:e0:01:46:d1:05:6e:2d:
af:2f:58:cf:ca:5f:71:83:44:50:d2:9b:98:5c:e2:06:35:ae:
56:5f:88:74:36:ca:36:e3:2f:27:0a:6f:a7:a9:e6:18:88:e6:
7b:5d:b7:c6:3c:be:42:76:f1:74:d3:84:e7:7d:2a:5a:fa:4a:
93:09:1d:7b:83:7f:5b:c5:63:85:58:31:30:8e:ef:2d:f2:c8:
6b:71:6d:4b:14:3e:00:25:ce:99:dd:fd:66:2e:c8:e4:10:ae:
49:99:e4:19:43:81:f0:06:fd:68:c6:8d:48:7f:14:b1:76:a3:
03:36:06:14:c9:8f:b4:df:74:b9:21:13:71:36:9e:ee:d2:a7:
b5:6e:74:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:38:43 2026 by rpki-client