Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier: tfDPs9+nktbcShbPGxf5EJeQgzNisrRlMaWwJ9peqFM=
Subject key identifier: D1:32:64:9B:53:36:54:35:97:84:31:ED:18:94:68:51:FA:FF:19:FA
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 019D333F0EFDDC7FFE490A35ED40AB7F9914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number: 0B05
Signing time: Sat 28 Mar 2026 07:01:03 +0000
Manifest this update: Sat 28 Mar 2026 07:01:03 +0000
Manifest next update: Sun 29 Mar 2026 07:01:03 +0000
Files and hashes: 1: eQRk02-rqRsoVMzAY3_UPFAuAlo.roa (hash: 7f1oukrkE94Uqo0kLbpw4xRpMp5ggZCo2gEHz8zdJ4w=)
2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: jT/l506tomhFe9kEfhGavyuO+6LUP8AsQbKhrLOvVd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:0e:fd:dc:7f:fe:49:0a:35:ed:40:ab:7f:99:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Mar 28 07:01:03 2026 GMT
Not After : Mar 29 07:01:03 2026 GMT
Subject: CN=d132649b53365435978431ed18946851faff19fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:75:77:b5:a2:67:bd:d9:5f:b3:01:49:20:
84:4b:28:1d:d8:d5:55:4c:c7:cb:02:38:55:e0:20:
50:95:2b:95:73:c7:ba:ec:fb:63:f0:fc:4e:38:fb:
a0:d7:f5:22:68:f5:24:96:e3:9d:cd:59:b5:2e:76:
d7:b1:08:ab:2f:ad:aa:5a:33:42:82:35:21:93:92:
8d:cb:aa:9e:2e:13:79:b8:d3:c6:5a:31:72:d1:87:
67:e0:eb:aa:33:56:6f:4b:6e:8f:fc:2c:70:f7:7f:
a0:d1:61:63:07:4d:d0:3a:a3:4f:14:a7:01:73:1b:
ff:bc:45:4f:56:5e:08:73:1c:62:39:1c:dc:90:d7:
58:56:aa:47:f5:34:3f:d5:18:f9:17:a2:f5:61:22:
db:66:78:3c:1d:1a:11:7c:5c:7c:40:85:b4:e4:83:
3b:ce:08:2c:c0:68:f7:86:79:85:fa:72:a2:de:b8:
9c:16:06:b5:a1:20:86:3c:5f:a0:cf:1b:79:62:91:
cd:0e:60:cb:9f:8d:37:a3:d6:0a:ed:6e:c6:63:57:
82:d6:bf:4f:d4:70:b2:53:6f:29:eb:4e:b3:10:7a:
6e:9f:c7:c6:8a:e7:7a:9a:bb:5d:9b:5f:91:c6:3d:
1d:83:18:6a:14:b2:c7:7b:cc:bc:20:bd:0c:d7:19:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:64:9B:53:36:54:35:97:84:31:ED:18:94:68:51:FA:FF:19:FA
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ea:34:d5:55:3b:a7:f5:e9:6c:16:f9:75:17:6c:52:68:2f:
77:47:2f:10:b8:1a:b1:7e:79:3a:b9:1a:fd:5b:31:6a:fc:0c:
25:a0:4f:a6:29:8e:db:2e:1f:f6:12:b9:a6:ee:5e:27:18:01:
61:8e:05:84:ba:ec:98:68:52:77:64:44:d8:71:fa:89:79:fe:
85:dd:c5:29:9b:02:0f:0d:6d:af:0f:a4:90:49:f2:55:fd:c2:
0e:2a:80:d3:93:6e:01:3c:2a:1c:10:5b:7c:24:9d:f0:fa:98:
35:4d:f4:79:66:9c:11:1c:11:12:98:84:97:43:d7:93:0f:f6:
6c:42:21:b5:a1:2d:cc:f0:7e:45:60:47:58:ad:c8:36:dc:05:
8b:21:59:73:bd:da:b8:3b:1d:4d:a9:24:f2:e0:1e:8f:2c:2c:
35:00:92:90:71:ea:62:dd:35:8b:fe:78:94:ad:c0:c0:74:26:
16:64:9b:09:c3:9b:ee:6d:7a:7f:5e:db:a3:aa:a2:61:8b:b1:
35:d3:c2:94:72:f2:64:a3:9b:e4:57:63:59:e6:0c:0e:fa:06:
13:96:22:0e:c1:8a:6d:f8:94:00:a4:7e:bc:e0:f4:bd:6c:06:
3b:c4:f8:d0:b2:b2:1d:b9:9d:78:27:be:04:c7:a0:a7:24:51:
d7:64:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:25 2026 by rpki-client