Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: dqjV3MqG2CzlmN8Q+AW+Rt2VUO5hUy9fUJuS5N+3ubA=
Subject key identifier: 4F:47:79:FE:21:AD:62:9D:6B:C1:6F:B1:94:97:39:B4:58:29:C9:F1
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 019D262846CC209BE65589E8EF9DAAFB48B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 13CB
Signing time: Wed 25 Mar 2026 18:01:06 +0000
Manifest this update: Wed 25 Mar 2026 18:01:06 +0000
Manifest next update: Thu 26 Mar 2026 18:01:06 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: v79Gda8FIS5ROoSbgBhyVRD40Qay5HnYsGJIZziTRKY=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:46:cc:20:9b:e6:55:89:e8:ef:9d:aa:fb:48:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Mar 25 18:01:06 2026 GMT
Not After : Mar 26 18:01:06 2026 GMT
Subject: CN=4f4779fe21ad629d6bc16fb1949739b45829c9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:fd:53:41:e8:ae:97:e8:40:80:45:2c:3b:
0b:72:69:96:d2:c3:d0:9d:03:49:04:1c:e0:50:5e:
38:51:5a:e1:b7:f0:27:e6:a5:f8:fc:92:95:35:40:
4e:e1:cb:60:08:f6:ef:dd:3d:ff:2f:9b:a4:b5:bb:
d6:38:8e:52:e0:fe:fa:c4:41:b8:bd:40:06:7b:61:
ce:59:f8:25:da:9e:1e:9c:63:9e:02:3a:f0:76:2c:
80:69:32:41:2a:9d:89:4d:7a:a1:e5:3a:11:fe:48:
d3:3d:e6:6d:57:38:f4:f8:bb:cd:ff:8b:32:81:16:
ff:39:17:fa:68:a6:61:4a:c7:ab:2b:f2:c8:b2:81:
41:db:0a:96:6b:df:51:ae:42:f8:b5:bf:96:d9:e9:
35:f7:e3:55:27:7d:48:60:ac:f1:18:f9:07:22:bc:
8d:b1:b4:1b:05:ca:ec:8e:2a:40:7a:47:c8:db:03:
66:5b:62:c3:53:04:d8:c4:93:71:27:1c:bb:23:da:
a5:99:2b:c2:82:dd:5f:9c:08:b7:a0:79:c2:61:e6:
8c:90:cd:23:f0:ee:59:ce:6b:0d:0f:0f:6b:0e:35:
d3:90:48:35:d7:fe:d9:a5:ad:40:81:93:d8:07:e1:
87:81:7c:54:4b:c3:4c:e7:b1:b8:5d:cc:cb:4d:f2:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:79:FE:21:AD:62:9D:6B:C1:6F:B1:94:97:39:B4:58:29:C9:F1
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:47:23:0b:bd:b5:2c:aa:f0:a2:6d:52:08:64:c1:80:ff:e8:
bc:cf:b4:fc:60:53:cd:ff:0a:85:72:12:8d:5d:f2:18:ab:c8:
3e:c9:78:34:07:7e:91:bf:a0:66:ab:4d:05:08:aa:26:4b:dc:
d0:45:4c:af:49:3c:ac:81:34:21:ab:5f:56:91:e6:57:6c:57:
9b:f0:d9:cc:ec:a4:a7:af:a4:b2:eb:5e:c4:f8:41:f9:e4:73:
e3:46:0d:b6:db:8b:be:88:54:2a:a5:f9:fc:36:42:64:22:27:
a5:3d:cb:42:56:dd:df:b5:22:04:b6:a8:8f:25:a4:b9:53:25:
36:10:64:a2:51:1a:aa:30:8a:b6:78:32:33:09:a1:d8:e6:bd:
91:68:cd:f7:f2:bc:c5:3b:82:fa:8e:52:d4:cf:32:14:74:9c:
0b:be:67:15:34:f9:a3:aa:95:85:d1:0d:5a:72:7f:31:d2:42:
75:a8:8a:b8:61:77:69:3a:aa:55:07:88:93:4b:d2:4b:98:6b:
86:db:5b:68:b2:87:75:83:8f:28:43:34:8b:6f:25:15:2d:b1:
dc:4f:dd:d9:ad:31:da:df:aa:53:0b:16:4e:d6:23:6e:50:a4:
d3:07:a4:d5:eb:00:97:8e:35:bc:2e:e9:21:1a:ab:3c:05:6f:
6e:b0:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:40 2026 by rpki-client