Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json)
Hash identifier: Bpkis8ebFXNbr+D5bbQig836QTOvZeelj2PvptNYgCs=
Subject key identifier: 43:1F:28:B1:DB:EF:BB:39:4E:C3:30:C6:A7:59:D3:A6:56:DB:F8:EB
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 019D389C04B53189C172323AB69353D3CA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
Manifest number: 10BF
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: ToyMMix21nCcY91pdxsH8mwE3lZFaRy93I1aHMfP4Yg=)
2: _INJbAc8J1GlVJj3H9NgFo3whMQ.roa (hash: EaYDZF2jCqkSbziQmnKumCHsSxNiwX5pOfKhIg/jyd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:04:b5:31:89:c1:72:32:3a:b6:93:53:d3:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=431f28b1dbefbb394ec330c6a759d3a656dbf8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:a9:d4:0c:26:f1:60:70:84:fe:60:ce:fe:
1c:1d:7a:65:eb:dd:7a:33:05:95:20:ae:5c:1b:d4:
6f:14:39:e3:22:32:eb:d4:71:60:32:39:6e:4d:d4:
2b:93:f5:66:bc:c7:c5:c9:45:8e:7e:eb:32:b8:1a:
ee:c8:0e:a8:f7:15:47:42:d3:57:b0:0d:fa:40:d4:
d2:29:64:c1:1d:80:b0:fd:c5:52:a0:11:49:b7:21:
79:54:41:90:03:8f:f4:85:b5:a5:11:c7:82:33:70:
88:36:71:b6:16:a6:65:eb:23:25:c5:f5:55:fa:72:
05:5b:75:2d:6e:e7:10:5e:85:17:4a:9d:f9:10:c7:
c2:a4:ea:3f:a7:f6:41:68:bf:68:74:77:3c:17:b1:
d0:41:65:2e:5a:50:2e:89:ef:ab:6b:9b:30:97:34:
bc:ff:d9:0c:96:12:40:bd:aa:0e:a1:22:d4:ba:70:
3b:53:c6:f5:15:ba:5e:f0:3b:e7:33:12:81:a1:73:
c1:b4:a7:cb:8e:ce:7d:e9:1e:63:aa:d9:cc:b1:da:
de:a7:b1:3e:cf:5a:bd:9f:59:0e:92:6c:46:86:5a:
06:df:95:d1:98:54:23:f9:b6:c4:32:75:1e:7e:c3:
b0:62:91:0e:ca:55:f6:5a:da:ef:22:b7:4c:2f:51:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:28:B1:DB:EF:BB:39:4E:C3:30:C6:A7:59:D3:A6:56:DB:F8:EB
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:de:fc:a5:3b:1f:ea:e6:e9:f8:54:b2:f9:dd:7c:94:3d:dc:
d7:b5:72:b0:49:dd:ba:67:b8:94:36:13:ee:a7:ef:9e:c1:2b:
cd:d2:ec:9c:68:f8:42:bf:32:c2:22:37:38:73:b7:82:25:62:
e1:e8:6d:43:bb:a7:93:c7:06:da:1d:47:dc:bc:fb:c7:f4:c6:
74:d8:80:b3:7c:fa:8c:9f:41:bd:08:4d:37:7d:3f:88:47:e6:
1a:84:7c:6b:fe:56:80:c3:76:8f:e2:de:d5:a2:f9:7b:5a:af:
83:4f:33:e0:1c:a7:f3:9c:f4:90:f2:58:1d:e2:9d:13:92:f8:
71:dc:68:84:af:9c:d4:6a:a9:d8:da:44:dc:d4:c2:f4:e4:b7:
ed:68:16:fc:57:fb:48:8d:da:a2:18:fd:75:2c:ad:33:19:72:
ab:a9:79:95:b1:94:34:ee:2d:e4:ac:24:42:b8:4b:8a:e2:fc:
31:e2:a5:0d:be:82:18:96:8c:32:9c:63:32:65:f0:01:29:7e:
1e:ef:1f:82:58:f2:18:b0:d0:12:81:4d:b2:af:3f:ad:f7:c8:
e8:13:54:a0:c8:f1:ed:de:46:e4:68:5d:18:61:4d:1d:9d:46:
30:0f:64:c0:b7:dc:1e:8f:2a:d7:33:3b:a2:74:cd:cb:0f:f5:
d8:a1:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:19 2026 by rpki-client