Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: 7KmemG8RIzdO/eUgCKzgijX2ESfU75dgLyO47jAaTQE=
Subject key identifier: 4E:27:2F:D8:7A:0E:E0:4F:8A:BE:EC:F1:30:88:26:74:AE:A2:3C:51
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 01A0D98422B07840DBE8955BE4F82ED73FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 14F8
Signing time: Fri 25 Sep 2026 17:01:50 +0000
Manifest this update: Fri 25 Sep 2026 17:01:50 +0000
Manifest next update: Sat 26 Sep 2026 17:01:50 +0000
Files and hashes: 1: TjeA0h__0K75m-Lz_8rsQK-1bSA.roa (hash: L2lPrSJTEdmpDG2xtyfaKRlJ8hxi9q1HTQ4jAfyHzCs=)
2: i_5uaEC74F4fkQ9w0VTjAAVZ7ek.roa (hash: EmaFrrCeMCRKCrjyOiqjJjxN5S8IqzhYZkELnG6BX0g=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: 64jUK5Re1+xrjiFBMzzqw7NRCQFkKMcyXfzi7kPBbaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:22:b0:78:40:db:e8:95:5b:e4:f8:2e:d7:3f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Sep 25 17:01:50 2026 GMT
Not After : Sep 26 17:01:50 2026 GMT
Subject: CN=4e272fd87a0ee04f8abeecf130882674aea23c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:26:7b:f0:89:6b:1c:ed:84:5f:dc:f8:6e:
a7:65:a2:0c:87:80:c5:92:1b:61:44:94:1c:bf:e6:
80:d2:d1:a8:5d:e4:e8:d7:ef:d0:a6:b3:ce:5a:85:
75:c0:98:80:17:c5:ab:8d:55:93:70:e7:6a:7f:c8:
87:94:50:22:28:6c:51:f2:aa:6c:33:6b:f9:16:24:
7e:94:d7:f4:80:4c:52:83:aa:93:32:12:ce:83:e8:
4c:31:11:71:fc:77:8f:9d:11:f9:54:d3:2d:b8:85:
85:f8:2b:77:22:6c:96:ae:95:92:77:81:77:44:d3:
e1:a2:3a:cb:53:37:0a:08:f4:28:8b:00:33:ed:af:
3a:08:f4:dc:e8:69:e5:11:c3:4e:b3:f4:5d:60:52:
67:d1:d5:c9:67:f9:c4:36:bf:49:1c:9e:6f:c0:c1:
ca:08:2f:20:1d:51:15:67:1d:6a:0a:93:ca:0b:a5:
ed:aa:a9:c1:da:31:1b:48:da:41:5e:0d:f9:d9:f5:
d1:88:b7:2d:6d:9c:54:38:31:1d:46:c7:01:0e:7e:
22:7a:59:5c:df:c0:ea:de:8f:c8:9e:2c:fc:fc:22:
d7:0d:19:96:60:6b:27:7c:17:5f:5f:38:f6:55:12:
d3:fb:00:8c:3f:bc:24:6b:8c:d5:f0:e6:b3:56:c5:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:27:2F:D8:7A:0E:E0:4F:8A:BE:EC:F1:30:88:26:74:AE:A2:3C:51
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5a:64:b6:02:c9:43:a0:fe:cc:df:96:b5:db:da:3b:d4:77:
0c:13:12:af:5b:6f:2d:29:7d:7d:63:e6:a1:ff:00:94:6a:ad:
b6:7e:48:38:e8:7c:28:e6:3f:c2:71:9c:bb:05:00:79:b8:40:
24:72:b9:d7:1c:20:f8:39:6e:5a:d2:fa:27:3f:91:7e:0b:ad:
22:8c:09:71:db:61:9b:c0:89:1b:8d:e5:e3:b2:8a:c7:80:e8:
e5:55:99:9c:4a:1a:cc:74:57:ae:d8:d4:a8:19:9f:7c:cf:13:
28:1a:cf:23:09:4e:82:e3:e6:40:ca:50:dd:80:2d:ef:51:dc:
29:85:ca:cf:c1:8b:a2:90:e7:c6:ab:44:5e:d0:63:1d:2e:01:
31:43:ef:e6:24:cf:38:fb:b0:5d:45:6f:28:e9:40:e8:bf:b0:
82:1f:46:20:ab:15:2d:ad:f0:6e:ed:f7:5e:16:b2:55:c4:65:
e1:4d:e1:8f:df:b4:7b:98:b9:be:b2:94:1c:78:a7:c4:a5:eb:
66:24:d4:5f:a6:89:bf:a4:7c:ce:61:71:3d:15:5e:11:d3:d6:
ba:53:b8:56:e1:8e:98:92:77:04:1c:37:29:3e:e7:18:38:d8:
f1:83:a6:a0:8a:5f:ee:75:3a:77:1e:5a:52:2d:13:13:04:85:
d2:80:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:16:25 2026 by rpki-client