
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier: 3EqsYwPdJhKB0O+9cDXLT/uiff/1Oj3lb75JRrlZ7LE=
Subject key identifier: B5:8B:5E:5D:12:C0:A6:84:C6:F4:CF:9D:66:18:64:83:2D:AE:64:4D
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial: 01A17BBB6CAB7DFF77B17955DCE278CD34C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 05:00:42 +0000
Manifest this update: Tue 27 Oct 2026 05:00:42 +0000
Manifest next update: Wed 28 Oct 2026 05:00:42 +0000
Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: Lei2XsnHjjD7FhkSIEkqMiLlfC3gOn9DQxqP1WzXp9I=)
2: qTJkke2DmFNJyiG7jfJcZx_vW34.roa (hash: vKcHwa2tV+EZb/fHgrN6A1horjD1vZRSzMun772SEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:6c:ab:7d:ff:77:b1:79:55:dc:e2:78:cd:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Validity
Not Before: Oct 27 05:00:42 2026 GMT
Not After : Oct 28 05:00:42 2026 GMT
Subject: CN=b58b5e5d12c0a684c6f4cf9d661864832dae644d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:bd:8b:8d:50:6a:d2:42:42:48:f0:36:92:
b3:a8:93:2f:1a:32:1a:c1:84:04:c8:2e:92:58:76:
5e:86:d1:7c:4c:86:f5:56:47:68:6d:23:d0:36:ee:
60:38:d9:d3:79:b0:12:d9:2f:1d:52:50:c3:5d:92:
cc:5e:d6:97:0a:74:25:58:23:61:e4:02:46:35:eb:
85:5f:58:92:a3:84:0e:aa:17:72:ac:16:52:0a:6f:
fa:7b:37:fc:9e:60:ed:52:c6:cb:ca:28:e5:20:4d:
f3:6f:a1:8a:a9:ce:8f:09:f0:19:ae:eb:c5:81:da:
b5:ea:73:d1:64:f8:e3:0b:c8:58:be:fe:ae:f6:7f:
50:ff:c9:bb:54:16:de:cc:53:6c:ea:c7:53:e7:cf:
83:13:9a:8e:02:b1:2b:13:f6:20:8c:bb:9d:c2:fc:
a2:cd:ff:cd:51:d1:3f:cf:44:ec:7e:bd:4e:f1:62:
1d:dc:91:21:54:a4:6f:93:06:20:0c:45:ca:b5:7e:
e2:f4:9a:99:60:d5:fe:a7:e1:29:ad:15:ce:40:74:
87:8e:8c:13:39:d7:88:10:7f:59:12:ac:8d:e9:df:
23:e5:94:c8:60:73:01:af:2e:15:bf:4d:9d:b2:c8:
98:a0:79:ed:31:f9:6a:9c:cf:af:78:b7:5c:56:b7:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8B:5E:5D:12:C0:A6:84:C6:F4:CF:9D:66:18:64:83:2D:AE:64:4D
X509v3 Authority Key Identifier:
keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5e:0d:50:f9:4a:a6:d7:f1:d0:bb:64:b7:a3:ac:f3:f5:cc:
e3:65:56:6e:03:11:fa:6f:bf:0c:06:bb:10:fd:e4:9d:ea:94:
b9:d4:1a:37:f9:d7:77:cc:6c:20:a7:90:7a:f5:4c:1f:ea:68:
46:60:c2:5e:89:29:17:46:69:11:6f:f3:50:22:49:32:3c:00:
f0:de:0f:7e:5a:f2:71:4d:11:dd:4a:cf:46:50:d5:48:80:43:
d5:e2:45:1a:4e:1e:87:ec:62:d5:b3:94:7c:1d:f0:af:e5:53:
55:42:f9:1b:7e:ea:ad:15:20:14:99:01:3c:13:aa:81:cd:6f:
ec:77:fa:05:72:e5:bd:6d:9b:8d:37:a6:2a:6d:07:f5:2f:21:
fa:08:0b:d5:09:42:33:23:21:41:fb:dc:26:7c:02:6a:30:58:
21:2e:16:61:52:ec:b3:27:19:de:f0:32:19:fb:7f:0c:a1:e0:
af:7e:9a:b7:88:e2:74:df:af:db:7b:fd:90:73:46:38:d3:a4:
c4:33:76:8a:24:45:89:e3:02:c9:ae:a1:dc:56:c8:28:33:c5:
4e:ee:12:61:63:77:8a:83:20:9b:e1:ae:67:45:d0:f4:e3:ab:
fd:33:99:62:fd:87:87:39:72:74:8b:8b:3d:ea:8c:56:d2:99:
a2:86:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:17:34 2026 by rpki-client