Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: KwE1rC9wV36o2HbMHu5xwBO6ll2TFvsAegOzjodHLUI=
Subject key identifier: 69:03:59:47:D6:1C:8D:11:B5:D4:56:3F:11:81:5D:DD:FB:94:1F:06
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 019E30059CD212AF3683FEE2E2CFCDC6B78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 1408
Signing time: Sat 16 May 2026 09:02:14 +0000
Manifest this update: Sat 16 May 2026 09:02:14 +0000
Manifest next update: Sun 17 May 2026 09:02:14 +0000
Files and hashes: 1: 0VnbCUUxMHz9IQSGbuoNhNu-3i0.roa (hash: hvzM8HfzEPqtWwc9Q56WgaJxRYytObZ9iUV/CwXnl4U=)
2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: B+OLqJYqDThGuruNovDRKz/36SX9A914TS1kBtZWbus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:9c:d2:12:af:36:83:fe:e2:e2:cf:cd:c6:b7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: May 16 09:02:14 2026 GMT
Not After : May 17 09:02:14 2026 GMT
Subject: CN=69035947d61c8d11b5d4563f11815dddfb941f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:68:1e:56:ea:40:6a:27:ed:99:4e:c6:40:
48:be:5b:ec:8e:fc:c1:7b:96:35:62:8b:0f:18:b3:
43:0d:4b:88:f0:de:15:fb:eb:4c:26:77:69:2a:6b:
18:4c:4f:0a:3d:ac:04:48:a5:92:4c:3e:7a:d7:f7:
23:36:77:51:39:3d:47:98:67:e4:54:ed:c5:26:23:
0a:2b:39:ec:84:e7:e8:c2:c8:ba:fa:b9:a3:01:21:
a7:1a:22:5b:73:1b:0e:d9:e6:3e:06:32:56:82:ef:
11:a0:aa:d4:0f:47:98:b1:f8:67:08:42:43:38:68:
39:ea:04:c2:a4:d0:03:68:c7:95:58:a3:56:aa:9c:
5d:c1:47:9d:5d:c9:73:87:c9:fd:3f:27:f4:d9:74:
a9:e8:c7:29:5c:fa:f0:3c:b8:70:10:92:17:a7:3b:
94:50:3e:e6:92:52:9f:26:2b:f4:84:4c:fd:cf:84:
ae:f0:5f:50:1c:39:5f:42:d9:81:2f:7b:7c:87:64:
4d:e5:2e:c2:84:7b:b9:a9:f4:e9:02:d7:c2:10:e9:
57:15:f9:22:8b:81:0f:1f:ef:e3:1d:ec:60:be:ad:
e5:08:46:6c:a4:ec:0d:e7:70:b8:03:94:01:56:1d:
78:19:15:ba:20:d3:45:fd:7f:ac:9d:36:08:02:11:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:59:47:D6:1C:8D:11:B5:D4:56:3F:11:81:5D:DD:FB:94:1F:06
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ba:ac:f7:80:4b:e4:0f:9d:cd:6c:34:f1:d2:85:f9:7c:b4:
eb:e5:4c:ae:66:20:ac:a0:ce:d5:6c:76:d8:90:d2:54:f8:a9:
30:e5:3b:2f:b7:f2:65:a1:17:a5:20:2c:93:eb:94:a9:30:63:
9e:d7:20:b0:e9:ee:76:1e:71:a5:3d:01:ca:cd:c4:f1:2d:48:
25:79:81:88:60:5b:0a:14:4b:9a:9f:d4:da:8b:6d:20:c4:8e:
24:1a:1c:2a:2f:5c:45:bb:43:fd:55:7e:fb:dd:f4:87:0d:1a:
a2:0c:87:87:c9:19:e7:6f:53:ba:e8:20:18:27:d5:e9:3d:e2:
a5:0c:8a:75:b0:2e:b5:28:8d:a3:85:bd:28:31:90:fe:3b:2c:
e8:5c:77:57:de:d3:92:cc:2c:5a:e5:2b:c2:7a:42:10:ad:ab:
99:e9:a2:0e:0a:56:86:3d:fc:b7:7b:31:5e:ab:0e:8a:2a:96:
ae:4c:5f:6c:9d:69:71:b5:1d:d5:01:e6:67:0b:ef:e6:1b:80:
07:5d:9d:ac:d9:53:46:b2:1a:c0:9e:ed:af:fb:20:a9:a9:a0:
a6:da:33:08:fe:eb:98:40:ce:5d:31:12:c8:52:84:e9:a5:ee:
85:91:62:53:fc:26:2d:0b:2f:a2:f1:87:de:01:b7:25:67:5e:
5a:cd:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:46:52 2026 by rpki-client