Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: 9xOJIOxFqb2U1JmOv60ry+OyEuxU62nkaMasoe7wDzs=
Subject key identifier: DB:F4:62:0D:F2:6D:59:F3:04:CC:1E:56:C4:6A:2C:3D:BC:A1:5B:DA
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 019F921130B3B81C9017EF97D8571C52FC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 150C
Signing time: Fri 24 Jul 2026 03:00:27 +0000
Manifest this update: Fri 24 Jul 2026 03:00:27 +0000
Manifest next update: Sat 25 Jul 2026 03:00:27 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: 3vFVo5S+HgIYt0PJb8myyb2e3b0Nb0la0bcDrJHXsgo=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:30:b3:b8:1c:90:17:ef:97:d8:57:1c:52:fc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Jul 24 03:00:27 2026 GMT
Not After : Jul 25 03:00:27 2026 GMT
Subject: CN=dbf4620df26d59f304cc1e56c46a2c3dbca15bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:5a:21:14:a8:31:e3:d2:03:4a:26:e7:96:
81:ff:6c:24:d6:68:48:12:1c:7b:ec:66:18:13:75:
d6:07:8b:95:c2:27:30:ef:15:be:68:bb:4b:b7:6e:
7d:3e:55:ac:f6:a1:5a:cd:e2:05:3e:69:9f:9e:71:
94:b8:21:1a:84:32:00:ff:6d:78:b4:fc:bd:5e:29:
c1:87:4f:9b:c8:27:3c:7d:9f:0f:0c:cd:56:9e:ae:
d7:fc:9e:d0:3f:48:b2:de:04:d8:b0:b7:48:f5:1f:
06:ce:32:ec:8f:be:27:83:dd:c9:37:9b:dc:d1:65:
99:fe:6d:50:cb:f5:8f:76:9d:75:6b:72:ae:c9:34:
0c:40:5d:25:a2:55:1f:f7:82:a0:32:75:a6:6e:89:
2d:4b:13:91:30:af:ee:6b:a0:59:fc:82:d7:0d:b6:
fe:7f:51:aa:69:04:31:05:47:c3:f2:d7:e9:ea:2e:
20:5c:71:c3:a6:c3:c0:d6:53:f9:16:10:fc:2b:b5:
bb:1b:9a:84:d1:99:05:a8:78:41:e8:15:3b:67:89:
a1:b4:1f:cb:3f:af:e4:50:89:07:b2:77:fb:81:7b:
38:64:dd:55:9c:7f:22:bb:59:bb:e3:09:62:37:c5:
6e:95:4d:dc:a6:18:37:90:97:1e:83:82:40:b6:bd:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:62:0D:F2:6D:59:F3:04:CC:1E:56:C4:6A:2C:3D:BC:A1:5B:DA
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e3:ad:21:c8:3d:e8:9f:fb:71:86:b9:e6:db:b7:e9:08:17:
5c:72:18:bd:8a:5e:2a:50:d0:9b:d8:83:3c:8d:4d:4a:f7:91:
ed:84:3b:3c:46:d4:ca:99:78:ec:f4:48:ef:ea:e4:10:8f:af:
ad:f8:cf:e8:4e:ef:e5:07:c2:67:50:24:36:db:19:6a:32:96:
0a:c9:15:16:8d:58:1f:dc:02:1a:47:a0:33:17:01:20:bd:a3:
08:de:38:90:93:51:b0:bb:ae:f2:90:88:eb:8b:7c:83:22:f9:
f2:95:fe:c3:2e:8d:ff:d9:c6:b7:88:96:1e:ac:8a:ed:c6:a6:
0c:83:1d:11:77:ed:a1:c4:09:a4:6d:d2:95:e8:a2:c9:b8:70:
c5:71:ca:50:bf:47:81:9c:1a:3c:dc:da:04:8a:b5:d7:78:5d:
8c:44:c4:6e:06:ed:45:66:19:9f:63:e4:26:26:c2:4f:30:be:
6d:78:2e:34:bf:d9:f1:84:f2:3f:53:1a:6d:82:6e:32:0e:26:
ba:44:9d:61:bb:2e:5a:50:c5:03:a1:cb:30:d9:31:bf:0f:df:
db:cf:ed:bf:c3:7b:17:32:0a:a1:27:b9:a9:df:ab:93:0d:d8:
c2:47:eb:46:82:d6:16:b6:2f:a7:99:80:80:b2:aa:88:98:55:
a6:20:08:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:53 2026 by rpki-client