Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: B+BL0v1V3MJBNukBJK3NiCqyrWjJYpObxd4FAIpv3p8=
Subject key identifier: 49:71:A2:76:9C:61:53:B8:1B:8C:2F:25:2B:57:68:E0:39:85:76:69
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 019EE857A6631B1DFA6A5335A54996F77CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0F8A
Signing time: Sun 21 Jun 2026 04:01:58 +0000
Manifest this update: Sun 21 Jun 2026 04:01:58 +0000
Manifest next update: Mon 22 Jun 2026 04:01:58 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: N+mguvvstdR3/k9omP0S1T/ncOCgfotEzGE9ZiVUgw0=)
2: cbzvxlYd2Sf5BPkKpVOxRrjDUx0.roa (hash: VqP2QOQPebJ1F3l2x635f2ND94zv4XuMIM8H7AehW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:57:a6:63:1b:1d:fa:6a:53:35:a5:49:96:f7:7c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Jun 21 04:01:58 2026 GMT
Not After : Jun 22 04:01:58 2026 GMT
Subject: CN=4971a2769c6153b81b8c2f252b5768e039857669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:c5:65:28:e3:9f:28:6c:d6:60:0a:c4:08:
58:18:44:c3:72:cb:59:b5:02:cf:06:b7:ec:47:92:
c9:8f:5c:b5:1d:6f:87:6d:33:cc:6d:b9:da:ba:1a:
94:40:92:dc:04:ff:1c:ff:5d:f2:69:9f:7a:4b:8d:
d0:1e:ce:4e:e0:84:34:e8:37:b7:4f:e2:ee:07:f7:
3e:df:58:63:24:20:f3:ee:32:90:e7:00:7e:9f:09:
17:6d:61:22:8d:04:83:d2:c6:c6:c6:07:44:36:21:
05:f5:9c:64:1f:cf:d2:70:e5:b8:be:4c:c7:5d:b1:
68:79:1b:54:1e:98:dc:47:ed:fd:41:e0:00:5f:a3:
11:df:1e:ad:99:d0:7a:1c:66:19:3b:68:41:b1:07:
c8:7b:5c:95:15:7f:e9:37:8a:b4:ba:a8:d8:ec:8d:
26:d3:45:3b:12:b9:1f:04:48:9c:9a:f8:f5:fd:8e:
fe:55:88:d3:0f:a4:0b:4b:67:5c:1e:2c:76:d2:93:
21:3f:a6:68:7b:1f:a7:6a:46:4f:80:85:92:f1:2a:
0c:39:35:bb:41:62:f8:24:81:42:b2:d8:7c:9d:dd:
cd:01:44:46:a4:83:7e:cf:e9:fb:23:fa:a5:cb:d1:
1f:39:93:32:35:af:b5:7d:c1:84:2a:fc:8f:47:b2:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:A2:76:9C:61:53:B8:1B:8C:2F:25:2B:57:68:E0:39:85:76:69
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d1:8e:71:8e:2d:68:0f:ac:64:c6:3a:c9:76:bc:8a:20:50:
07:7e:68:10:58:31:2f:65:99:d0:36:88:e3:db:a0:19:c2:c1:
02:9b:55:cc:a4:ee:08:11:d8:11:0b:1a:ce:2d:7c:21:7d:fd:
1c:23:c8:b5:1e:85:8b:ec:2d:1f:b0:cf:84:a3:71:76:5e:eb:
a9:d2:d4:6f:eb:cb:f8:43:50:d4:ed:dc:41:69:d0:32:40:a6:
65:3e:91:7d:35:47:38:8c:5b:d0:58:2f:be:a4:18:f9:0e:ef:
0f:f6:74:ea:f7:63:4c:f5:84:68:90:46:08:76:b4:6f:01:89:
95:70:25:ef:80:f3:49:22:a8:76:a9:8d:52:42:aa:41:94:f7:
f8:cc:c8:42:80:ec:77:13:f3:90:4b:e7:40:43:23:aa:2b:e3:
ea:b6:9b:52:2e:64:f8:a9:e7:3b:59:65:6d:8e:7d:96:53:4f:
09:5a:97:0f:a8:64:68:a9:e0:5b:aa:84:6e:11:97:40:a1:6f:
49:8d:fc:30:3a:34:86:bd:07:d7:ec:1c:38:c1:80:21:f1:b3:
94:a2:84:8d:52:ef:fc:3a:be:34:5a:0e:85:8a:a1:f9:ea:29:
7c:cd:43:2f:2e:9a:8a:1b:48:cc:e5:07:41:96:a1:35:6f:4c:
56:c4:6b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:44:52 2026 by rpki-client