Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier: 2HzT4usg6RZ422rB9D1VEskknQ69Hy9s/w2C43KZIxQ=
Subject key identifier: 92:15:43:E0:53:6A:C9:D6:2A:C2:22:CF:51:D3:AC:B5:29:42:E3:7D
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 01A18E3010431D9F564915816DF821391B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number: 1ACD
Signing time: Fri 30 Oct 2026 19:01:16 +0000
Manifest this update: Fri 30 Oct 2026 19:01:16 +0000
Manifest next update: Sat 31 Oct 2026 19:01:16 +0000
Files and hashes: 1: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: vMx/1heE0roL+/FoiEfn3j/Rpw87MMy/G8ySdrVSmyE=)
2: ubDRCyGTNPH280nyPWUjQFlxXwo.roa (hash: aQLrEZhn3B0wMZ5KJdawYUdqKjoKHetb4pEObkiH9xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:30:10:43:1d:9f:56:49:15:81:6d:f8:21:39:1b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: Oct 30 19:01:16 2026 GMT
Not After : Oct 31 19:01:16 2026 GMT
Subject: CN=921543e0536ac9d62ac222cf51d3acb52942e37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:47:07:2e:6f:06:31:25:26:b9:07:94:23:
c2:1f:7e:1b:fb:6b:7b:75:7c:d0:4f:f4:f4:2d:0c:
f7:f2:54:31:93:93:b8:94:d1:c2:1f:b7:93:a9:5b:
ca:35:b7:e0:a5:f4:f8:69:9b:5b:de:49:fb:01:b4:
85:f2:cf:14:cd:6e:f6:86:19:03:7f:e9:05:f8:31:
ca:ae:f1:6c:1b:16:21:8e:86:03:d3:84:96:b4:51:
ef:9c:9a:db:cb:07:05:0a:d1:60:f6:26:d8:99:02:
f5:70:f0:f5:6b:3b:91:27:76:8a:89:f1:a7:3d:cb:
dc:ba:e2:f0:ae:9a:73:dd:3b:3e:c0:b5:ec:75:9d:
07:bc:46:8d:b1:f5:05:5b:b1:f3:87:d5:60:cd:f6:
45:94:d9:fa:74:56:bf:8f:e9:37:e1:96:7d:be:47:
31:97:9a:02:62:66:7f:7a:b8:12:57:35:63:3b:f9:
09:42:32:6f:1c:3e:61:22:a4:16:db:0d:39:d5:90:
21:db:0b:db:5d:d0:16:ce:95:f2:da:3d:8a:eb:a2:
de:f3:04:59:a5:ee:b1:6d:01:a2:79:76:90:22:ff:
c4:03:b7:40:07:26:93:3a:97:4d:1f:22:ec:5b:0b:
05:2f:5f:20:db:e8:50:a5:72:dc:10:5d:b7:43:b8:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:43:E0:53:6A:C9:D6:2A:C2:22:CF:51:D3:AC:B5:29:42:E3:7D
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:58:85:8a:f5:64:bc:7a:9d:06:c2:b8:4f:bb:2b:0f:83:16:
06:cd:34:10:aa:55:1c:ea:d0:63:97:73:fa:c1:55:dc:41:44:
a8:11:3e:ca:28:11:e8:59:ce:fe:ef:08:89:e6:90:f6:ae:9c:
2b:51:a5:ac:70:dc:6b:b3:9c:d3:f9:1d:f2:8c:7c:c5:ba:fc:
85:91:af:52:d5:e5:49:34:82:95:7f:2e:13:4f:c1:73:6d:25:
3a:06:21:68:ae:76:22:82:f7:77:d0:ef:e0:93:76:cb:79:c6:
81:19:69:29:eb:5d:d0:00:8c:8b:3d:da:23:d0:dc:37:dc:18:
3b:c0:f6:e7:79:3b:bf:fe:0c:a8:d2:e9:9c:8f:5a:11:34:bf:
ca:df:40:12:d5:e0:fd:83:05:13:c5:97:b7:74:00:e6:ae:ed:
66:d9:22:ae:08:16:b9:9e:0f:3e:8e:5d:85:3a:92:c6:43:ba:
ac:2b:83:e6:fa:8b:5e:c1:bd:d4:b4:db:df:ed:43:63:29:2d:
2a:06:70:36:6e:74:23:57:99:29:c6:24:47:0d:9f:43:dc:a3:
15:1e:3b:18:c3:41:ad:4a:b0:07:30:63:e9:4c:80:2f:84:79:
0b:f3:9d:cf:fb:81:10:67:73:d5:ef:bd:23:8c:5c:a2:aa:33:
db:c5:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:26:40 2026 by rpki-client