Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: TkSWR+OM4Lv+2XwFLRjUG1TS/ownly9vEB0P3J/WlFM=
Subject key identifier: 94:C7:D2:B7:BA:6E:88:E7:A8:DE:21:C1:33:0A:37:BE:F3:9D:A8:A8
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 01A17EBCD94F30E78FDD90210581DBC44CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 1221
Signing time: Tue 27 Oct 2026 19:01:07 +0000
Manifest this update: Tue 27 Oct 2026 19:01:07 +0000
Manifest next update: Wed 28 Oct 2026 19:01:07 +0000
Files and hashes: 1: SgMIjUcR2c12DzERn5Ts_2Ui6dU.roa (hash: GYGPZLvxKXca2OxhVOyvlt9mnOVKXNEirW2JBi+fWL4=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: l4uJc4SGBd6vGiG3KORA9s7hr9l7XR/iWuXpn0EyKMQ=)
3: XIThFyPTW5lXLvwW5lsLjLVEtsw.roa (hash: zsPoZ1kKOA5gCoYw0cog9xPEs778Ebzg1Uy38hXQLVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:d9:4f:30:e7:8f:dd:90:21:05:81:db:c4:4c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Oct 27 19:01:07 2026 GMT
Not After : Oct 28 19:01:07 2026 GMT
Subject: CN=94c7d2b7ba6e88e7a8de21c1330a37bef39da8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:7f:a4:9d:2b:04:cc:60:6b:37:a9:85:dd:
9a:f0:e3:44:a0:eb:e7:16:26:84:ec:95:fd:6e:f8:
43:ce:6c:7f:c9:b1:e4:11:ce:36:42:fa:f1:f9:58:
b9:92:1a:a0:a3:21:ee:c4:90:5b:13:ab:88:f4:5a:
2f:2e:29:d0:33:3d:b4:d2:c8:c4:30:94:61:12:e3:
a4:7c:3c:a9:96:c9:3c:fa:40:5f:aa:df:bb:46:39:
44:3c:95:af:79:17:c1:95:3f:92:77:c6:a2:1d:ca:
1b:3b:de:78:ab:85:a3:8d:6a:40:8f:b4:22:26:1c:
98:64:46:3b:fd:3f:55:6f:9e:35:1c:bf:02:81:21:
db:7a:42:4f:f3:2b:f5:aa:0f:56:30:67:25:ef:e7:
7f:06:29:d9:94:fe:80:c2:79:ea:db:67:d4:55:33:
fe:47:30:ab:1b:11:56:92:4e:78:4f:af:11:82:d3:
72:93:1a:5a:54:a2:2b:75:80:21:42:65:69:54:47:
70:08:2b:27:54:7e:e9:88:c2:80:41:8c:06:65:02:
34:8c:0e:3b:a7:3b:68:bb:e3:77:ff:87:47:73:14:
14:c8:85:c8:2f:fb:ee:23:e1:e1:10:b6:15:94:83:
3d:ec:cd:71:dc:b0:89:95:df:01:c8:63:88:0a:df:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:D2:B7:BA:6E:88:E7:A8:DE:21:C1:33:0A:37:BE:F3:9D:A8:A8
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d5:9f:22:4b:43:29:cd:d7:ed:ac:9c:bc:12:c5:05:dd:e1:
35:40:0b:49:b4:50:73:ea:b9:98:f2:8e:0a:2b:70:1f:9f:55:
e3:1b:9f:35:d1:76:cc:df:71:d5:94:7a:63:27:a2:ff:7d:d5:
bc:4c:00:31:af:a2:c9:11:ae:e4:74:d1:7f:fa:ef:f1:62:08:
9d:7f:0a:fa:35:72:90:26:da:2b:e0:70:f9:b9:91:8b:25:7b:
ac:6c:33:15:61:cd:68:ec:2f:88:8b:e4:0e:58:39:96:12:bd:
d0:82:e1:b1:c5:b2:e7:c8:02:1d:d5:5e:5f:24:e7:4d:38:f9:
b1:7e:a2:6a:71:58:47:2f:97:72:2a:33:aa:0c:38:4b:59:fb:
27:26:cb:74:a7:36:c1:cc:58:43:dd:ab:66:d2:71:90:de:3b:
2c:b1:3d:ee:33:51:b8:7b:0e:34:0c:bf:f1:26:fc:88:e1:83:
3b:96:3e:48:d9:6f:1e:b6:7b:85:01:06:48:06:92:a5:73:94:
b5:0f:c7:42:7b:31:05:59:49:e7:b4:e1:67:95:43:3b:88:b6:
19:b8:96:83:83:0e:cf:3e:5e:2a:d3:6e:87:f3:5b:61:2d:42:
e9:1f:dc:af:7f:47:fc:ce:f9:41:ff:4d:98:aa:52:f3:e3:50:
db:5d:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:00:57 2026 by rpki-client