Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: r1ILmhQbQt8kcL3gKOsQL+lNqWInJZWKe9cw4k0oU7U=
Subject key identifier: 05:9E:19:9B:40:B6:11:49:76:92:8A:7C:11:11:C0:3E:82:E7:3E:44
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 01A14BAB237E67B239CC091BAE9FD392389B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 1AAC
Signing time: Sat 17 Oct 2026 21:01:09 +0000
Manifest this update: Sat 17 Oct 2026 21:01:09 +0000
Manifest next update: Sun 18 Oct 2026 21:01:09 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: RfF32i9CoaWnQsOPXXNp1AqrI/+YfoaBFOwNrZVLAJA=)
2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:23:7e:67:b2:39:cc:09:1b:ae:9f:d3:92:38:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Oct 17 21:01:09 2026 GMT
Not After : Oct 18 21:01:09 2026 GMT
Subject: CN=059e199b40b6114976928a7c1111c03e82e73e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:bc:31:b0:86:e1:a4:4d:66:fc:32:b4:ed:
e2:3d:35:64:4f:3e:84:c9:64:9f:0e:18:ac:23:3d:
7e:f3:74:4e:e9:6a:e4:f2:1c:84:f1:b6:b8:bd:8b:
c8:9c:7d:ef:f0:bd:64:b9:e8:02:a1:1d:ed:b9:9e:
ad:3d:77:0a:0d:3f:00:e8:4d:7b:be:a7:fd:01:9c:
18:7a:d4:21:c5:24:2c:63:a0:10:15:87:ea:04:7d:
d1:90:42:21:a2:97:19:36:d3:29:b8:d5:37:04:c3:
af:01:84:16:73:0c:39:a8:d2:59:a5:66:fa:34:38:
23:4c:9c:87:12:c5:64:b6:c6:7a:5e:29:d5:e9:6f:
d3:7d:3b:63:4a:d8:dc:06:06:89:59:d8:8e:e4:ae:
01:e2:d6:2c:8b:76:e0:ba:43:c4:1d:e6:d6:3a:8e:
22:0c:4a:2c:34:68:89:31:af:66:ba:dc:31:83:04:
79:cb:2b:bb:68:c7:79:3e:06:01:d9:37:4d:12:91:
e7:1c:e0:ac:da:3b:73:bf:57:0c:7e:3e:29:c3:c7:
c3:62:84:63:a4:6d:33:69:3d:a2:84:c2:01:75:fb:
ab:58:4d:58:62:b7:c5:18:73:b3:9f:a9:34:4e:9c:
5e:16:14:e4:2c:30:62:b3:91:d2:26:57:77:12:5a:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9E:19:9B:40:B6:11:49:76:92:8A:7C:11:11:C0:3E:82:E7:3E:44
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c5:e1:ec:a1:a3:ab:4b:d3:04:b2:59:38:c3:02:92:0b:ff:
22:c9:f5:de:8c:1c:a6:a4:1d:b0:03:56:09:a5:a0:8a:c5:9f:
1a:fe:ab:b6:2a:af:db:e0:80:ff:48:d2:f3:ea:4d:62:c0:2f:
50:23:56:7e:47:f4:c4:57:08:3a:8e:f1:8e:79:45:20:ee:6b:
1a:ec:a8:38:7e:ce:0f:59:07:a8:f7:e2:3f:6e:8b:07:46:dc:
1d:e5:1e:4d:15:d9:75:73:a3:f1:eb:23:82:18:f4:b7:58:17:
b9:c6:cf:0c:4f:41:18:3c:7e:0c:c3:38:87:76:c8:64:6d:7b:
6d:58:07:9d:b9:f7:ed:66:0d:64:c6:6c:db:ee:fb:62:23:39:
4b:d4:88:42:43:67:98:96:93:52:72:9a:a0:d9:7a:95:d5:04:
dc:8b:50:95:83:44:84:08:cd:eb:22:0c:70:39:76:e0:28:19:
84:1a:47:b2:d1:43:d0:7a:48:dc:19:85:4a:a1:e4:d0:94:33:
97:30:41:e5:79:82:99:dc:ac:b3:fe:e9:0e:bd:f7:fa:4b:33:
05:b8:19:06:0e:e6:e6:39:25:5d:3f:b6:46:c6:a6:35:89:8a:
d4:80:55:5a:e3:b2:4c:7c:cd:52:f9:23:ba:7e:b9:50:d4:63:
49:6a:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:09:19 2026 by rpki-client