Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: nwEi96EzWjNvheGbihvSinFPsHff1vhnlRWFjNRTz68=
Subject key identifier: 06:43:B1:6E:2C:F7:28:DF:A0:05:DC:E6:F6:11:57:22:F2:94:6C:82
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 01A1212EF0FD3AB37F11DCA1331791C4518F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 158E
Signing time: Fri 09 Oct 2026 15:01:26 +0000
Manifest this update: Fri 09 Oct 2026 15:01:26 +0000
Manifest next update: Sat 10 Oct 2026 15:01:26 +0000
Files and hashes: 1: 0VnbCUUxMHz9IQSGbuoNhNu-3i0.roa (hash: hvzM8HfzEPqtWwc9Q56WgaJxRYytObZ9iUV/CwXnl4U=)
2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: ruyb8nm80ZM9aISicYBotgqIf30IYSuSU5db/4NqR3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:f0:fd:3a:b3:7f:11:dc:a1:33:17:91:c4:51:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Oct 9 15:01:26 2026 GMT
Not After : Oct 10 15:01:26 2026 GMT
Subject: CN=0643b16e2cf728dfa005dce6f6115722f2946c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:dd:6b:c2:c6:ea:58:05:18:9a:8c:44:e9:
33:17:6d:7e:8c:6b:ee:4b:f0:7b:db:73:14:a8:a1:
8a:44:8d:44:9a:1f:a1:6a:ca:7d:9e:be:63:fb:32:
31:13:b0:30:85:e9:cf:b3:16:d1:8e:6b:cf:ce:80:
50:bc:c3:74:b5:c7:e9:a3:40:e9:0f:17:5c:4e:04:
01:86:a5:a9:fd:4f:47:1f:fd:5d:31:af:13:7d:c4:
3d:00:b0:cf:37:9a:b1:71:33:64:2b:41:90:24:5d:
6e:b2:96:03:23:6c:92:ec:c5:2c:25:c4:36:39:cd:
d6:d6:d4:45:ae:e1:96:65:c9:a7:e2:0c:96:44:31:
d9:0a:77:c9:7c:2b:fb:4b:d3:3f:af:b2:02:fe:bf:
d1:1d:cf:c9:82:0f:60:7d:3f:d7:f2:70:d1:f6:98:
fe:05:0c:2b:56:b4:cc:24:3c:28:fd:bc:3f:64:ec:
7e:b9:cb:0a:3c:83:2b:9f:6f:e3:4a:b4:cd:5d:97:
f8:ff:d2:7b:7d:86:07:78:72:f3:89:57:f3:22:be:
5f:78:6e:59:97:fe:0e:02:5e:25:a8:f8:f3:a3:4c:
92:92:9e:16:20:94:16:74:ee:e8:6e:11:65:42:0a:
14:02:bc:a8:dc:6e:a9:dd:03:25:f7:4b:7b:81:79:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:43:B1:6E:2C:F7:28:DF:A0:05:DC:E6:F6:11:57:22:F2:94:6C:82
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a5:1a:8d:83:b1:b9:51:e5:d9:be:1e:11:99:7b:b7:ad:18:
7d:e5:4c:26:03:5a:19:34:9f:59:00:9b:00:e0:21:f2:e0:8e:
ba:6f:ce:04:fd:31:e8:6e:cd:56:93:1f:88:9d:42:a6:91:16:
92:ce:e5:80:a5:76:ce:a2:31:ae:31:82:65:5f:9b:c8:ab:b3:
39:a9:54:7e:e4:69:73:45:f5:94:06:5f:53:a3:13:8e:6a:7a:
e0:69:8d:bc:74:29:26:15:88:c3:ea:d5:ff:69:f1:ae:e2:8c:
ba:75:71:ef:85:3b:21:d5:db:5e:90:89:48:48:4a:cb:bd:42:
c7:b0:ce:a6:ac:14:0c:5c:c6:3b:16:c1:24:2d:2d:5c:95:38:
f8:b6:d7:37:04:d5:1d:a3:d3:cb:04:ec:4f:64:f0:ae:25:ee:
dc:bb:c8:bd:0f:71:f2:1c:83:3a:ac:df:7e:54:7c:91:5d:07:
cb:38:ec:43:84:33:a8:13:0f:f7:07:d0:6b:91:85:62:a3:18:
51:31:1c:88:bd:3c:e1:3f:0b:d0:17:12:9e:ed:6a:cc:88:71:
72:b0:1a:a6:74:d9:ee:ea:f3:14:f2:00:a2:f4:0f:3e:a9:29:
e0:ac:e3:81:b4:88:85:99:c9:8e:a0:7e:e8:6e:35:c3:16:fc:
71:14:b4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:33:29 2026 by rpki-client