Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: co4CyGIcnsq6gM9sSe/GaiS5r1I/8wEtrEpTiNgX3Rk=
Subject key identifier: 74:A7:A9:66:C7:BD:29:05:DE:1D:9E:D4:5B:A3:6B:07:69:E8:B1:88
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 01A08B688EE43B0493DFFA4C95E6361D1D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 11A3
Signing time: Thu 10 Sep 2026 13:01:20 +0000
Manifest this update: Thu 10 Sep 2026 13:01:20 +0000
Manifest next update: Fri 11 Sep 2026 13:01:20 +0000
Files and hashes: 1: SgMIjUcR2c12DzERn5Ts_2Ui6dU.roa (hash: GYGPZLvxKXca2OxhVOyvlt9mnOVKXNEirW2JBi+fWL4=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: O5/XXsPz4OlCoG1l94BUsNwshXf9sEyf3oMZPg5eYoo=)
3: XIThFyPTW5lXLvwW5lsLjLVEtsw.roa (hash: zsPoZ1kKOA5gCoYw0cog9xPEs778Ebzg1Uy38hXQLVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:8e:e4:3b:04:93:df:fa:4c:95:e6:36:1d:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Sep 10 13:01:20 2026 GMT
Not After : Sep 11 13:01:20 2026 GMT
Subject: CN=74a7a966c7bd2905de1d9ed45ba36b0769e8b188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:13:ca:64:98:04:d3:b9:98:53:75:28:f4:
7d:be:73:1a:51:44:e2:7e:9c:4a:b4:07:15:43:b0:
7f:6c:1f:96:60:77:3d:96:3c:be:8e:80:d6:21:f5:
98:68:46:07:07:ba:69:48:c8:c6:33:87:6c:a2:91:
48:dd:aa:45:c3:f2:9f:39:c7:a5:a1:e4:0d:2d:f9:
49:cf:b7:7a:4d:99:76:28:9d:19:17:a4:3f:57:37:
cf:18:18:48:fc:72:03:b1:33:17:9f:27:cd:73:88:
20:d5:81:7d:ae:b7:f1:55:26:d2:a5:54:59:69:51:
ad:fb:2a:92:58:d5:a2:b4:b9:4b:27:67:a3:50:1b:
a0:67:d2:4d:66:06:d6:c9:78:72:e8:f0:25:22:b7:
d6:17:49:9f:b9:87:1c:ab:ba:a1:22:8f:13:a2:02:
b8:ba:74:73:ab:c4:30:83:d3:65:6a:18:6b:c6:7c:
a1:e2:08:a2:06:fe:40:b7:0c:c6:d1:d1:06:e0:1f:
d7:fa:10:dd:38:1f:04:fe:43:e4:ae:39:81:ac:8f:
91:30:6e:8d:45:07:89:c8:fc:4f:0c:ee:fe:70:fe:
35:77:59:0f:c7:c8:9c:1b:70:ff:66:be:2a:88:71:
39:41:30:0e:32:67:c2:ca:a9:9f:b4:46:fa:1f:a7:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:A9:66:C7:BD:29:05:DE:1D:9E:D4:5B:A3:6B:07:69:E8:B1:88
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f0:c6:9d:de:31:9c:9f:66:dc:c4:1d:d8:a2:a1:c8:df:82:
0b:0a:88:21:d1:65:ee:cb:bc:bd:fe:8d:6f:77:f1:73:c4:70:
0e:03:68:1e:8e:ad:eb:2d:7f:28:98:6a:c9:3a:32:6c:34:d7:
4f:f3:34:3b:5f:3a:06:9f:2d:4a:8b:76:d6:96:42:7d:40:46:
89:8b:f2:2a:de:a3:cd:00:aa:46:0b:e2:63:bc:c6:3e:d3:60:
e4:1e:81:82:f5:20:0e:0a:a9:23:de:c6:de:a6:af:3f:d7:41:
c2:da:ab:73:c5:96:ba:b9:4c:16:c5:f6:07:55:ab:a2:2b:f8:
b8:2a:68:b8:97:88:28:37:6a:40:4d:1b:0d:7a:66:c4:28:88:
e2:f9:d9:29:c5:f8:3c:97:19:b6:3e:01:3f:cb:80:e8:cd:95:
9b:35:83:06:59:0e:f5:91:9a:f0:98:22:cc:10:09:be:be:c1:
5b:89:45:b9:be:cb:ba:1b:7a:38:5f:41:4a:4c:0c:d2:2f:24:
5a:ff:4c:47:a4:1a:a1:c1:79:de:47:5b:e7:da:4a:a0:24:85:
52:4b:8c:98:a4:eb:71:43:ce:d0:a4:43:e4:cf:96:8f:f1:bc:
b4:be:73:e3:16:de:2d:79:52:a9:03:74:11:04:21:66:b4:5c:
29:58:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:08 2026 by rpki-client