Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: W17NXvyXm3GB4TM9hQF8L5NyUkF7TiaU6iomv9ihNsA=
Subject key identifier: CD:7E:29:18:8B:25:A2:35:CC:9E:11:17:AF:EF:91:67:51:DF:AC:DC
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 01A17092C64A151F1B94F9B965B0213A80A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 1ABA
Signing time: Sun 25 Oct 2026 01:00:29 +0000
Manifest this update: Sun 25 Oct 2026 01:00:29 +0000
Manifest next update: Mon 26 Oct 2026 01:00:29 +0000
Files and hashes: 1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: Pi9P0DHjXZB8UNWGoFZYYh0n7djQGwQUPZmxv3n5Y7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:92:c6:4a:15:1f:1b:94:f9:b9:65:b0:21:3a:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Oct 25 01:00:29 2026 GMT
Not After : Oct 26 01:00:29 2026 GMT
Subject: CN=cd7e29188b25a235cc9e1117afef916751dfacdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:94:3b:9b:fb:a3:8e:bd:75:14:b0:c0:de:a5:
7f:27:c3:53:da:6c:77:8f:e7:de:80:cc:d7:1a:bc:
64:dd:26:bd:d6:21:1a:63:df:9c:4d:7a:df:1d:79:
3a:2e:f2:1e:d0:ab:2e:c7:5d:0b:48:d3:47:49:47:
1b:b4:d6:5f:42:02:24:eb:6e:c2:c0:a0:1f:ef:5d:
fa:e2:d6:f9:e5:b7:c7:33:f4:53:7a:fc:31:9a:b8:
c1:ca:0c:fd:50:d3:3b:fa:c2:bc:b9:a5:49:2d:23:
22:29:35:8d:db:95:55:59:7e:4b:2c:93:c3:b3:c3:
3f:d3:da:14:cb:65:f8:62:2c:36:e3:f0:ad:1c:1d:
3d:00:b1:30:4b:5f:e2:a1:4a:5b:ff:a2:9a:7d:76:
e7:ba:58:b3:86:c0:00:a7:f3:c2:cc:03:4d:b1:f3:
95:9c:ea:7f:99:22:d2:bd:64:61:3f:90:8a:c6:7c:
ab:fd:33:0d:7e:bd:d3:3a:1c:14:8e:ce:ca:02:fc:
0c:ef:f1:8b:88:df:ff:85:94:1e:c1:e0:e4:26:7c:
bf:7b:47:2d:ad:39:2b:5f:c2:38:54:0c:df:b4:e6:
44:23:da:9a:df:3f:21:f0:f8:d6:38:d6:21:2e:d9:
1c:ba:83:e9:bd:e1:25:01:c2:e3:de:42:e7:a4:61:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7E:29:18:8B:25:A2:35:CC:9E:11:17:AF:EF:91:67:51:DF:AC:DC
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:c9:b8:f2:ec:52:ee:fc:96:01:3b:b6:5f:0a:df:e4:2a:
a9:04:c7:04:b6:96:31:82:eb:33:2a:f1:d8:f0:e3:30:dc:72:
47:aa:04:c1:64:d3:5f:e0:e3:94:57:b4:2c:07:b7:71:6e:5d:
17:e2:af:f5:d9:4d:b5:60:63:6e:ec:6d:a3:b8:af:bc:81:3a:
d9:02:a3:6f:45:20:8e:30:cd:e4:5b:84:f9:4d:77:fa:8b:a3:
b9:be:d0:8c:85:88:27:9f:10:5e:48:c2:4d:f4:28:14:fa:a5:
fe:8a:71:fc:08:16:35:6d:2b:00:02:09:f1:61:86:d7:34:ea:
b9:b2:8e:16:a6:0b:7a:aa:aa:3f:23:e3:4b:2f:99:ab:73:7c:
2b:96:ae:5c:00:38:af:7d:e5:d6:3f:4f:60:d1:a1:8f:2d:05:
93:c8:f7:3b:45:99:1d:07:05:1a:ab:99:e0:d4:a8:45:a3:da:
5d:63:31:70:08:5a:6c:60:b7:da:73:93:cc:5c:1a:51:c3:5a:
22:46:e7:18:09:45:11:3d:81:9e:dc:c8:e4:cb:a7:6c:e0:6b:
7a:2b:22:79:76:5e:cd:7d:29:84:f2:bc:31:e2:33:03:df:81:
b6:ad:58:d4:b0:17:05:cc:c7:47:07:b9:e3:a8:bd:9c:13:99:
d3:87:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:57:11 2026 by rpki-client