Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: CoGMIQcxV42wivF8jSRA9wTUZ5HjaRGQjfwhSqrKCNU=
Subject key identifier: 0A:94:23:67:38:EC:46:2C:0F:AC:B4:D2:E6:8A:09:7B:72:8A:78:51
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 019D2B17A2EF6E69FD1B11F806DE4FAF18AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 1310
Signing time: Thu 26 Mar 2026 17:01:02 +0000
Manifest this update: Thu 26 Mar 2026 17:01:02 +0000
Manifest next update: Fri 27 Mar 2026 17:01:02 +0000
Files and hashes: 1: TjeA0h__0K75m-Lz_8rsQK-1bSA.roa (hash: L2lPrSJTEdmpDG2xtyfaKRlJ8hxi9q1HTQ4jAfyHzCs=)
2: i_5uaEC74F4fkQ9w0VTjAAVZ7ek.roa (hash: EmaFrrCeMCRKCrjyOiqjJjxN5S8IqzhYZkELnG6BX0g=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: Yyu6QUXs1/OrlQWE++rgYvntCs/5xnjs6mmJeEf8me4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:a2:ef:6e:69:fd:1b:11:f8:06:de:4f:af:18:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Mar 26 17:01:02 2026 GMT
Not After : Mar 27 17:01:02 2026 GMT
Subject: CN=0a94236738ec462c0facb4d2e68a097b728a7851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:b3:0d:96:f3:a0:af:aa:38:80:3d:c8:64:
de:23:bb:2e:3f:fa:c8:ac:a0:8a:eb:47:ba:98:84:
ac:c7:80:69:e2:16:22:96:b6:30:82:c0:26:d6:b8:
01:6f:50:f6:83:bd:4a:db:fa:4a:6e:27:81:f2:52:
38:a6:63:28:6a:8d:87:28:1b:d6:73:27:51:a6:29:
2b:de:56:52:e5:18:fa:b4:67:3b:76:0f:20:46:49:
ec:bc:2f:a7:2c:a8:7d:2b:79:26:a0:6b:49:c4:e8:
a4:90:4c:12:e6:52:b7:52:8c:87:bc:33:53:4e:64:
89:90:b5:80:cd:2d:83:b2:5c:1b:42:c2:9e:c1:66:
a0:66:85:1a:b1:8c:05:f5:28:f5:99:fb:8f:26:51:
b5:95:9b:95:4b:48:ff:34:70:31:a7:01:96:26:97:
7f:07:f1:b0:99:42:72:5f:59:40:94:eb:a2:1a:79:
57:43:4e:1b:3c:aa:8d:23:f6:da:13:b1:85:9a:aa:
18:2a:68:5d:b8:cc:5a:db:43:59:74:d1:c6:28:a1:
8d:b8:07:ab:fe:71:1a:8c:98:dc:f4:ae:2b:97:00:
5a:a4:c9:93:0a:e6:62:d5:b9:ae:be:05:a4:25:05:
86:db:bf:8f:7b:d8:6e:fd:5c:80:de:81:50:0e:52:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:23:67:38:EC:46:2C:0F:AC:B4:D2:E6:8A:09:7B:72:8A:78:51
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0c:3c:d7:cd:3b:4e:3e:8d:aa:f9:ad:df:5e:2f:f1:d3:36:
ad:c2:59:08:0d:4f:ea:88:0c:70:ce:77:67:bd:8f:89:54:96:
8f:fc:71:03:db:5c:10:23:10:58:7d:78:61:2d:ec:34:ea:63:
88:73:2f:50:73:48:42:c1:34:d9:a7:1b:78:6f:5d:41:20:02:
26:00:21:51:97:e3:64:b2:96:c9:82:cb:b2:bc:27:ea:49:9c:
d9:dd:2a:58:d1:b6:c3:5a:a0:43:2d:02:f3:fb:2a:c8:13:2d:
7e:47:7c:88:05:20:e7:d6:1f:b2:29:f3:a9:b7:48:fe:f4:d8:
17:f2:16:13:f8:ae:a2:7b:ed:90:12:a8:25:7a:09:f9:21:5c:
c3:ad:a4:c8:d8:c5:da:7a:a9:68:37:7e:2f:47:d5:c5:51:ae:
a6:2c:8d:c9:56:a7:99:ea:6d:0d:78:fd:25:5d:b9:05:c6:55:
b8:de:28:71:17:2d:7f:cb:6c:3b:ff:61:d0:b9:75:5d:20:67:
59:56:a2:84:5c:42:3a:75:ea:9f:cb:ab:94:8a:28:79:04:af:
ea:82:1d:8c:21:32:3a:b4:f8:4d:5b:b1:6c:fd:22:b9:40:52:
ca:60:be:97:0a:af:ad:4d:86:a3:99:99:43:e0:f0:02:e8:08:
50:d4:31:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF6Lvbmn9GxH4Bt5PrxisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk
ZmNlNWQwHhcNMjYwMzI2MTcwMTAyWhcNMjYwMzI3MTcwMTAyWjAzMTEwLwYDVQQD
EygwYTk0MjM2NzM4ZWM0NjJjMGZhY2I0ZDJlNjhhMDk3YjcyOGE3ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04ezDZbzoK+qOIA9yGTeI7suP/rI
rKCK60e6mISsx4Bp4hYilrYwgsAm1rgBb1D2g71K2/pKbieB8lI4pmMoao2HKBvW
cydRpikr3lZS5Rj6tGc7dg8gRknsvC+nLKh9K3kmoGtJxOikkEwS5lK3UoyHvDNT
TmSJkLWAzS2DslwbQsKewWagZoUasYwF9Sj1mfuPJlG1lZuVS0j/NHAxpwGWJpd/
B/GwmUJyX1lAlOuiGnlXQ04bPKqNI/baE7GFmqoYKmhduMxa20NZdNHGKKGNuAer
/nEajJjc9K4rlwBapMmTCuZi1bmuvgWkJQWG27+Pe9hu/VyA3oFQDlJufQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqUI2c47EYsD6y00uaKCXtyinhRMB8GA1UdIwQY
MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It
N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3
LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgw81807
Tj6Nqvmt314v8dM2rcJZCA1P6ogMcM53Z72PiVSWj/xxA9tcECMQWH14YS3sNOpj
iHMvUHNIQsE02acbeG9dQSACJgAhUZfjZLKWyYLLsrwn6kmc2d0qWNG2w1qgQy0C
8/sqyBMtfkd8iAUg59YfsinzqbdI/vTYF/IWE/iuonvtkBKoJXoJ+SFcw62kyNjF
2nqpaDd+L0fVxVGupiyNyVanmeptDXj9JV25BcZVuN4ocRctf8tsO/9h0Ll1XSBn
WVaihFxCOnXqn8urlIooeQSv6oIdjCEyOrT4TVuxbP0iuUBSymC+lwqvrU2Go5mZ
Q+DwAugIUNQx1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:47 2026 by rpki-client