Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: H7v80pftyh1UhC6B+kotEbOEgw2hYewqrd6mbmXopak=
Subject key identifier: 5B:C5:8F:4D:BB:88:AB:17:62:93:D6:53:97:FE:29:F0:D8:99:FB:BD
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 01A19DA27DF1B51D67934469670DF2C50665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 08BC
Signing time: Mon 02 Nov 2026 19:00:34 +0000
Manifest this update: Mon 02 Nov 2026 19:00:34 +0000
Manifest next update: Tue 03 Nov 2026 19:00:34 +0000
Files and hashes: 1: ra29butMifiezKtKfx76h0-beS4.roa (hash: CSRhvGkVJgI5m+Ih+PZR1asLchKiPtTXHdFmOp2umxE=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: qDmRUoNRVpg1uvAS5vXnXIvyKf6LcyPJ10Jv0b16aCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:a2:7d:f1:b5:1d:67:93:44:69:67:0d:f2:c5:06:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Nov 2 19:00:34 2026 GMT
Not After : Nov 3 19:00:34 2026 GMT
Subject: CN=5bc58f4dbb88ab176293d65397fe29f0d899fbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:c9:0e:ed:81:cd:82:51:4d:fe:62:21:06:
de:8e:b3:3a:2c:05:f0:d8:4f:0d:e2:21:c8:d3:6c:
3a:f4:f0:46:ad:dd:9f:45:b7:bb:25:9e:74:a8:4c:
6b:03:7e:8e:c8:66:37:48:6e:0f:b1:5c:59:3e:fa:
4c:32:f8:d0:a5:24:ee:f8:0f:75:bb:c3:b8:77:37:
b5:a7:05:1a:9b:3b:7b:da:7a:34:bd:91:9f:1e:be:
a9:08:71:f0:3b:d8:a9:93:cc:0d:2b:63:9c:d7:ab:
3a:32:93:38:40:37:5d:4d:83:4e:99:d4:53:ce:c5:
88:d8:81:aa:dc:fd:eb:aa:93:07:7f:f1:90:63:d9:
ee:6a:f5:ce:96:fb:13:74:e9:35:e9:8f:04:b0:77:
27:9e:2a:a6:5e:d9:ab:3a:fd:d2:a6:7e:9a:58:0b:
32:18:1a:24:8b:34:82:2d:d7:e8:ae:f2:97:26:d9:
8a:ce:53:98:83:cc:1e:b8:f2:11:a3:ef:95:5b:00:
ad:df:f5:26:5b:55:fb:52:f3:a3:44:6b:54:02:55:
24:77:ce:f3:c5:ea:32:1b:db:12:c7:2e:d8:b1:cc:
15:17:e6:ac:99:47:34:dd:b4:1d:9e:0e:35:5f:7c:
49:a5:23:99:c1:0d:1e:5c:c9:2e:e0:24:76:96:c6:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:8F:4D:BB:88:AB:17:62:93:D6:53:97:FE:29:F0:D8:99:FB:BD
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:59:53:94:76:5b:8b:8f:76:71:a5:6a:9f:a5:22:e3:04:0d:
f6:a4:16:02:13:f1:a2:8b:16:1d:c6:c0:fb:94:6b:a1:c7:de:
9f:85:b1:97:b8:e8:20:d8:16:48:c7:62:e7:aa:e3:e9:c0:46:
f7:a2:36:fe:74:45:a9:86:a0:fe:9d:8d:b0:be:90:10:a7:07:
16:7a:7a:fe:34:97:76:fb:b9:02:be:91:1f:3a:5a:09:73:71:
34:1c:93:55:24:61:39:4a:01:ac:dd:9e:f4:83:aa:ef:d0:16:
f6:6b:c5:40:ed:1a:4e:79:7e:bd:b1:a3:71:d8:d4:20:31:2b:
1a:9a:fc:bd:d5:d1:0c:68:71:36:c5:fb:d6:d7:83:26:85:89:
57:eb:46:07:be:43:11:2a:9a:a1:3a:69:40:d4:6b:fb:9a:41:
9e:30:56:8d:aa:bf:4a:7a:5a:47:37:1e:bf:d2:b9:5f:c6:a1:
98:32:d3:b3:ef:3e:1b:91:bb:9b:d4:19:8a:65:ac:96:52:05:
48:8c:8f:0d:09:85:54:ff:1d:05:c6:f8:49:ed:70:7f:a6:6e:
47:3e:d0:13:90:5b:cd:da:88:4e:35:cf:54:fc:be:02:af:c9:
73:ec:d9:26:65:e8:40:f7:38:97:d4:7a:89:cb:9d:5a:c7:a0:
bb:d4:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:30:57 2026 by rpki-client