Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier: bIohqtxWXCYVS8/KHXR7VxVMKyA/smVEB4n64PWES/0=
Subject key identifier: 98:EC:32:41:18:72:6A:EE:93:BC:86:E3:3C:D0:54:A7:3D:A4:D2:BE
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial: 01A1746F8F84E4DC6A6D657BFEFDF1494E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number: 1ABC
Signing time: Sun 25 Oct 2026 19:00:30 +0000
Manifest this update: Sun 25 Oct 2026 19:00:30 +0000
Manifest next update: Mon 26 Oct 2026 19:00:30 +0000
Files and hashes: 1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: BtE2ptmfJJlSR2HZ420yuRcbb7XieIUow16D9Uc8I+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:6f:8f:84:e4:dc:6a:6d:65:7b:fe:fd:f1:49:4e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
Validity
Not Before: Oct 25 19:00:30 2026 GMT
Not After : Oct 26 19:00:30 2026 GMT
Subject: CN=98ec324118726aee93bc86e33cd054a73da4d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:72:01:bd:36:4b:ab:12:87:b8:5a:cc:8d:
41:e0:5a:39:93:a3:55:8e:da:3e:9a:64:95:fc:c6:
d6:ec:9e:03:76:53:ce:13:f6:46:41:87:07:ce:a7:
0d:9e:a8:32:08:2a:f5:d1:7a:46:fb:8a:4d:5c:a7:
bc:ba:19:d0:b2:41:28:bc:0f:19:7e:5e:d8:0b:97:
92:28:87:37:95:d5:c5:bc:cb:9a:60:a6:d8:8c:fb:
ee:99:35:09:c0:ef:fd:5d:96:62:e7:9e:c3:d8:17:
89:ac:4f:2a:ed:1b:00:91:7d:a4:a3:e0:76:94:e6:
18:83:d7:39:cb:0e:71:43:94:f2:f2:33:77:1c:d9:
26:00:41:e7:6d:29:c7:ee:95:8d:8b:fd:fa:35:0c:
78:62:28:8d:88:7a:aa:3b:e3:9f:56:4c:bd:82:e1:
3f:4d:4b:b5:6d:c6:22:81:f6:89:73:c3:20:b6:c2:
60:36:c9:78:59:b4:a4:cf:47:30:4e:e8:d1:c1:8a:
1a:08:65:6f:92:4e:28:2e:0e:35:e0:2c:49:40:c0:
3e:d2:59:8b:d5:16:0f:49:81:c6:34:f4:e7:42:ee:
00:c3:73:d2:93:73:9f:6f:6e:41:6f:69:da:c4:a6:
08:6a:40:a3:e3:8e:2b:5c:e5:9e:af:d4:bd:35:e5:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EC:32:41:18:72:6A:EE:93:BC:86:E3:3C:D0:54:A7:3D:A4:D2:BE
X509v3 Authority Key Identifier:
keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cc:84:67:df:f9:93:72:b0:6b:4c:51:ae:7a:31:b3:58:a1:
67:25:80:68:5a:ee:20:6f:d4:12:7c:87:a5:b4:bd:00:a9:07:
fc:f6:18:45:33:1b:c5:ad:99:cd:e2:bd:ad:5e:df:b0:23:11:
17:31:92:23:88:84:01:f0:92:fb:c9:be:8a:b4:d8:ce:dd:18:
91:e2:ab:89:36:63:a9:b8:e0:e0:e0:4d:c9:60:77:97:86:be:
ba:81:48:d3:58:0c:52:fb:84:6c:01:4f:02:de:53:f1:6a:06:
22:49:d3:7e:c5:78:36:d1:f5:f5:d9:23:b3:7d:00:49:58:e9:
de:01:90:d5:f5:b6:e0:97:15:77:c1:b1:f9:9f:d1:72:c6:fe:
00:77:2c:d5:2a:38:4f:b8:a4:1a:57:ec:aa:26:1b:cc:0e:9f:
1f:4c:0f:69:71:82:c7:a5:31:57:c9:98:97:c2:77:db:49:10:
a7:65:a2:f3:c0:1b:5f:8b:ba:5c:a6:40:5e:8e:a7:23:d9:91:
b3:07:6d:d4:43:3a:e5:4c:4a:1e:c5:1d:da:f1:01:b5:3b:22:
33:db:da:57:43:5b:5b:56:a5:50:22:1e:e6:48:db:1c:cb:b6:
92:b2:77:0a:36:a9:d5:be:ed:5b:6c:a3:dc:4e:67:0a:37:2e:
fe:8c:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:00 2026 by rpki-client