Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: TbE/+FIgdZMoC+1AFGLAWTeZqbJ0j5czMruhTC4+PMU=
Subject key identifier: 89:27:27:65:FB:0B:2D:8C:43:D7:AD:E4:12:60:1F:CB:53:C5:CB:7A
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 01A0D2A638037F39D00EBB42EAAAD1348BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 15B2
Signing time: Thu 24 Sep 2026 09:01:43 +0000
Manifest this update: Thu 24 Sep 2026 09:01:43 +0000
Manifest next update: Fri 25 Sep 2026 09:01:43 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: rr31Z1aXZW6o8M7L+i+Cw7TB0Vyy3NDYB2DyyKGNF5U=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:38:03:7f:39:d0:0e:bb:42:ea:aa:d1:34:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Sep 24 09:01:43 2026 GMT
Not After : Sep 25 09:01:43 2026 GMT
Subject: CN=89272765fb0b2d8c43d7ade412601fcb53c5cb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:d3:af:fd:91:be:f6:a8:4c:f7:b7:63:5f:
01:e2:38:f6:d6:48:ae:3f:35:8f:27:30:38:40:33:
34:06:16:e0:c3:e3:42:36:d6:75:49:70:0c:da:01:
2b:f6:cf:8e:c2:69:f2:b9:38:b3:c0:26:79:84:b5:
9b:1b:5c:23:5f:b1:a6:b8:0a:fc:ea:e3:c2:ee:ae:
ee:f7:ad:54:85:09:d7:61:4f:bd:da:5d:1d:50:f7:
65:ea:40:af:19:ed:fe:6d:ec:20:b9:31:86:8e:52:
ee:33:d3:dc:e1:d0:4b:43:42:78:ed:5e:a5:19:63:
ab:ee:3b:fb:00:d6:4d:5d:8c:ec:d3:57:48:3c:d5:
55:c2:f8:94:07:b4:00:b8:90:bb:77:20:ef:6a:6f:
76:53:0f:e3:5a:45:e3:f7:65:41:ac:89:dc:69:66:
ff:ac:da:6a:37:d8:31:e6:52:e2:7e:87:35:ac:ff:
3e:03:01:09:0b:65:0f:4b:5d:38:e7:4a:49:a4:a2:
16:49:45:19:77:a0:78:95:19:4e:57:1d:b3:de:89:
10:6b:51:21:73:30:12:07:d5:89:cf:c5:fa:77:16:
3a:5a:64:3e:3b:cc:bf:18:2a:13:61:19:5e:8d:e9:
c0:1b:b2:bc:b8:44:67:7c:e8:0b:af:cb:06:81:f5:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:27:65:FB:0B:2D:8C:43:D7:AD:E4:12:60:1F:CB:53:C5:CB:7A
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:63:78:75:b8:1e:43:35:d1:f9:b9:83:bb:e0:07:29:3c:5f:
67:19:72:c8:56:93:9f:8c:d4:4b:3e:08:4d:e2:e3:19:d2:49:
af:e3:b4:5e:f0:0b:ab:40:be:b6:4a:12:8f:51:55:fe:91:20:
b8:f9:59:e6:e4:82:71:00:43:cd:ec:15:c6:b6:9a:e5:64:80:
91:d5:78:0c:14:3f:28:d2:ba:2c:12:c4:1f:fe:ef:4f:7d:bd:
6e:f2:21:97:07:de:bd:e1:5d:ff:db:84:31:bf:8c:80:ee:ab:
d3:c2:d6:c5:8c:ab:f6:41:fc:cc:a9:8a:97:47:db:04:e9:b1:
65:d9:58:07:0b:34:1d:31:6f:d1:ee:95:d9:c0:44:74:7a:e5:
83:4a:b3:38:20:e1:bb:e6:2e:e2:d0:09:37:bf:08:8d:bb:e3:
50:a1:51:b8:12:c7:96:20:04:c3:13:8d:db:e7:cd:33:52:10:
0b:c8:80:e7:96:cd:bf:31:e9:13:80:7a:ce:39:af:25:83:6e:
b2:2c:4f:84:b4:bb:c6:70:e7:28:cb:17:0e:e9:11:ff:47:2b:
c9:31:1b:c2:47:db:a2:71:76:5a:4a:5c:b5:1f:6a:07:d4:3d:
0f:3a:df:4d:cb:c9:ce:85:26:2b:9d:4a:aa:fd:bc:f3:f9:9d:
da:8d:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:43:26 2026 by rpki-client