Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: FLoigA5GZ3lLS95pW5S9JopGCYSCAqBSVmBocSEH/z8=
Subject key identifier: 4A:8C:55:38:A4:D0:E1:5C:D6:17:61:E3:E4:2E:8E:58:34:50:2E:A5
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 01A17A71B34A14F7A9CF749CD69CD5990D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 05C9
Signing time: Mon 26 Oct 2026 23:00:34 +0000
Manifest this update: Mon 26 Oct 2026 23:00:34 +0000
Manifest next update: Tue 27 Oct 2026 23:00:34 +0000
Files and hashes: 1: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: bF3/HvU8wHpxqGwh65EcKBQAk7SOjw2Fsi+eNaCkUKA=)
2: ziF5LUxXxsiZsU2Zn5F9Vs8QBIU.roa (hash: JWHNPV4Q0ijWQ7FA9BlDGI8xfPLJfKs3pJXg1QGEDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:b3:4a:14:f7:a9:cf:74:9c:d6:9c:d5:99:0d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Oct 26 23:00:34 2026 GMT
Not After : Oct 27 23:00:34 2026 GMT
Subject: CN=4a8c5538a4d0e15cd61761e3e42e8e5834502ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:12:fd:21:50:94:aa:cf:f2:66:89:15:7c:
5c:0d:c8:e9:96:3a:13:11:51:67:99:61:c7:c6:73:
39:b8:8f:b4:32:85:12:74:b8:b7:3c:68:38:52:9c:
8e:6c:8d:1d:ce:bd:36:74:3a:88:52:d8:4c:2f:0d:
da:e9:18:fd:27:32:f0:5e:ec:63:67:fd:7f:21:80:
8f:82:62:d9:38:44:95:6f:e8:cf:c9:19:60:16:d7:
54:6f:69:c8:36:9d:f7:0a:f8:17:4d:cc:4c:53:32:
45:b5:14:99:35:47:03:67:c6:19:f9:01:71:aa:81:
de:c7:77:8e:25:cf:d0:25:3e:6e:d7:64:22:e9:95:
2c:cd:69:fd:81:2a:22:0b:e0:14:32:ba:be:ad:40:
10:56:e9:ef:f1:95:7b:a8:1b:e7:a5:81:86:f9:d4:
bb:65:86:64:85:07:a1:3d:43:bb:e6:a1:cd:37:9f:
18:62:ab:62:30:db:ac:2e:86:03:9e:a2:0c:be:84:
39:d3:c1:58:31:04:37:74:80:cd:ca:46:9b:3a:bb:
e5:ff:e3:4d:d4:9b:76:f9:c1:31:f5:11:92:8e:20:
8c:80:54:e3:ba:e0:8a:68:05:a6:59:d7:f8:dd:87:
a7:ea:cd:d8:e8:60:43:62:f5:3f:1f:2d:7f:4e:eb:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:55:38:A4:D0:E1:5C:D6:17:61:E3:E4:2E:8E:58:34:50:2E:A5
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:90:46:02:43:18:13:8f:15:4b:75:22:ba:b5:1f:8a:33:
45:df:be:2d:02:be:03:ed:b8:3c:d4:37:19:1e:ad:2d:88:9e:
25:3d:39:7f:37:27:13:2d:1e:48:b2:a7:b2:f7:ac:84:af:92:
b6:c3:2f:96:59:ca:0f:56:d9:18:60:6f:61:44:ea:4c:f1:86:
09:ca:8f:ab:47:d8:75:39:d9:78:62:5b:35:19:b7:9e:63:1a:
54:8c:25:1a:f0:6c:89:64:81:60:bf:b1:32:05:c9:0d:84:d0:
db:cf:f4:b5:22:cc:b1:fe:53:65:69:c0:99:3d:79:95:f0:41:
c1:cf:dc:14:6e:6b:43:54:a9:17:d8:e1:c7:57:fc:93:c2:f8:
36:40:0d:98:ee:89:bc:12:f6:b6:f6:af:e6:08:81:b6:7c:d2:
fb:62:a4:67:ce:b5:4e:35:56:10:eb:a7:44:88:5d:ab:e7:04:
2d:30:43:47:72:b1:33:8f:e0:78:1b:9b:0f:68:5d:fc:d6:38:
26:67:f5:cb:6c:a0:64:34:ab:fd:13:47:d8:bd:83:00:f5:c9:
8b:f9:55:f8:b0:9c:3b:6f:72:be:91:3e:f4:65:e1:c7:f5:05:
05:31:8b:06:c4:4c:bd:ee:79:09:16:7f:48:45:81:64:4a:e6:
9c:76:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:00 2026 by rpki-client