Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: R5J+iLcofMMnfIXMJf6fKd1YoJ5hjbx/zmTBE3D35JU=
Subject key identifier: D0:E6:15:A6:42:6C:3D:41:09:21:35:79:85:9D:CF:33:AD:CD:2A:80
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 019D2695D5F51D59D89337B54775BF76BD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 07F5
Signing time: Wed 25 Mar 2026 20:00:46 +0000
Manifest this update: Wed 25 Mar 2026 20:00:46 +0000
Manifest next update: Thu 26 Mar 2026 20:00:46 +0000
Files and hashes: 1: 2wk8UskQOSnxqw7Oo7NOQFVMdPk.roa (hash: wAiBLEjJ/qsnMqj9/B2glZy/BgEewLbuD+HKTaBdnNM=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: J2PNOwudwKDfkXCnqlPVbP1UlQ8zEt1ocR/jlY1ds4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d5:f5:1d:59:d8:93:37:b5:47:75:bf:76:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Mar 25 20:00:46 2026 GMT
Not After : Mar 26 20:00:46 2026 GMT
Subject: CN=d0e615a6426c3d4109213579859dcf33adcd2a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:0a:d0:41:5e:53:73:8f:4b:9f:b1:ec:ca:
cb:3a:ff:48:59:d7:b2:d9:8d:93:ba:d6:84:02:d3:
49:97:4c:6c:17:d1:d4:23:f2:81:d8:70:ae:bf:97:
7c:9b:97:a1:e4:c2:7a:77:d2:f6:59:f8:65:4b:59:
62:36:f5:c9:32:51:b2:a9:49:85:3a:43:05:e1:4e:
03:7b:24:87:1d:a3:e8:d2:76:0d:93:5f:c5:b3:61:
2a:e8:56:b3:fc:33:4a:17:1c:24:df:69:2c:28:f6:
d9:b7:22:0c:6a:c9:f6:12:34:e4:e2:cd:c0:ff:bd:
50:05:80:02:92:ea:00:a4:a5:b7:64:16:dc:07:c2:
cb:c1:ca:48:e5:21:0f:96:d0:8b:95:bc:96:80:ea:
d2:cf:78:9d:18:f7:35:70:e7:93:08:3b:04:5f:d5:
03:b7:73:25:2d:89:7d:0a:19:a4:09:7c:f5:29:2c:
0d:90:00:75:88:06:c6:7e:5d:5e:99:53:48:22:27:
af:e9:ec:33:b4:73:b3:d6:87:1e:60:26:6c:f6:72:
75:26:e8:02:3e:b1:2a:48:21:d4:56:cd:5c:cf:f7:
04:d8:d3:e6:a7:43:c6:db:22:b7:f6:1f:87:13:c1:
4a:b0:0d:64:40:ea:d8:29:7b:7a:89:8b:d4:9c:52:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:15:A6:42:6C:3D:41:09:21:35:79:85:9D:CF:33:AD:CD:2A:80
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ac:f8:84:ec:a1:e0:23:50:1c:20:be:58:4f:00:fc:04:1f:
1f:10:07:f9:e8:2c:df:ff:63:f9:5a:3a:95:b5:fd:a6:53:c4:
92:40:a7:c7:35:cf:19:db:d8:a3:6b:3b:57:10:a2:49:f2:99:
e4:74:06:80:c2:45:fe:f5:74:b3:73:63:19:a0:b7:3d:d3:2e:
64:de:65:24:ed:53:bf:ae:c1:7a:59:aa:1f:57:ef:46:44:b0:
33:91:ae:d4:84:41:52:ee:36:04:e4:e5:d9:5d:b3:61:26:c8:
0c:a8:83:fc:be:6e:08:63:da:2f:f1:45:26:b9:aa:3b:03:bc:
15:55:73:42:ca:45:d9:3d:3e:15:93:86:06:fc:8a:b7:37:4f:
1a:84:23:10:17:22:e5:ac:9d:78:a6:cf:d8:db:12:17:21:2a:
eb:a6:30:18:58:d5:e0:58:fb:39:b3:eb:f0:42:52:17:48:ed:
13:8c:f3:91:aa:d6:8f:dd:90:f7:29:66:65:e3:c8:5f:65:54:
8e:81:8b:2d:30:16:3f:3c:16:e6:fc:c7:95:fe:3a:27:a1:1a:
cf:38:fe:83:18:a5:69:22:61:37:b9:93:73:43:01:22:d8:c2:
55:cb:9e:44:e6:9a:81:76:84:73:25:d5:9c:ee:54:71:b2:d7:
32:7a:ba:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mldX1HVnYkze1R3W/dr19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYmY4MWFiOTUwYTE4MDM0NjMwYzI1ODMwNzQ5ZTY1MGVi
NGU2MzQwHhcNMjYwMzI1MjAwMDQ2WhcNMjYwMzI2MjAwMDQ2WjAzMTEwLwYDVQQD
EyhkMGU2MTVhNjQyNmMzZDQxMDkyMTM1Nzk4NTlkY2YzM2FkY2QyYTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28cK0EFeU3OPS5+x7MrLOv9IWdey
2Y2TutaEAtNJl0xsF9HUI/KB2HCuv5d8m5eh5MJ6d9L2WfhlS1liNvXJMlGyqUmF
OkMF4U4DeySHHaPo0nYNk1/Fs2Eq6Faz/DNKFxwk32ksKPbZtyIMasn2EjTk4s3A
/71QBYACkuoApKW3ZBbcB8LLwcpI5SEPltCLlbyWgOrSz3idGPc1cOeTCDsEX9UD
t3MlLYl9ChmkCXz1KSwNkAB1iAbGfl1emVNIIiev6ewztHOz1oceYCZs9nJ1JugC
PrEqSCHUVs1cz/cE2NPmp0PG2yK39h+HE8FKsA1kQOrYKXt6iYvUnFIjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDmFaZCbD1BCSE1eYWdzzOtzSqAMB8GA1UdIwQY
MBaAFMK/gauVChgDRjDCWDB0nmUOtOY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zOGI1MTEtNzU0Ny00YTQ4LThiYWYt
Nzc2NDU4NDY3MGZkLzEvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zOGI1MTEtNzU0Ny00YTQ4LThiYWYtNzc2NDU4NDY3MGZk
LzEvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaz4hOyh
4CNQHCC+WE8A/AQfHxAH+egs3/9j+Vo6lbX9plPEkkCnxzXPGdvYo2s7VxCiSfKZ
5HQGgMJF/vV0s3NjGaC3PdMuZN5lJO1Tv67BelmqH1fvRkSwM5Gu1IRBUu42BOTl
2V2zYSbIDKiD/L5uCGPaL/FFJrmqOwO8FVVzQspF2T0+FZOGBvyKtzdPGoQjEBci
5aydeKbP2NsSFyEq66YwGFjV4Fj7ObPr8EJSF0jtE4zzkarWj92Q9ylmZePIX2VU
joGLLTAWPzwW5vzHlf46J6Eazzj+gxilaSJhN7mTc0MBItjCVcueROaagXaEcyXV
nO5UcbLXMnq6Ng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:20 2026 by rpki-client