Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier: mU0j/xV1H24T6zRYMR4KlNaDURhVVIFFokh20JUD7/Q=
Subject key identifier: 36:72:52:90:E8:D9:18:24:1A:C9:CE:B0:99:B4:67:86:1F:9D:B0:82
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 01A0D3B8369E55307811E3C4DE55E633DB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number: 0D40
Signing time: Thu 24 Sep 2026 14:01:00 +0000
Manifest this update: Thu 24 Sep 2026 14:01:00 +0000
Manifest next update: Fri 25 Sep 2026 14:01:00 +0000
Files and hashes: 1: RM9gch6fF6dTUga4Bj7c-ZQoUtM.roa (hash: aQYj/VaPaTrTWbQj2KnQY8a0Wb0mkyzzVVekX0QBd2M=)
2: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: xXhXht3NHdWJ3+ggBERn/X1tGbi70S3iokboEnels3A=)
3: uveeP90Ng8fiZXlzX-6ojy0jIqY.roa (hash: PfDd8d708uz6aVMC87b2047YaQ4t2uLKA5Y0H9BA2Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:36:9e:55:30:78:11:e3:c4:de:55:e6:33:db:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Sep 24 14:01:00 2026 GMT
Not After : Sep 25 14:01:00 2026 GMT
Subject: CN=36725290e8d918241ac9ceb099b467861f9db082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:82:3f:ad:58:88:32:c2:07:91:9d:4d:c8:
48:46:0e:78:67:12:2b:20:3e:96:33:d2:a5:1f:34:
ce:c6:67:0d:02:b3:47:a3:fa:4d:9d:9e:51:7d:46:
8f:05:37:b9:ac:d6:fe:fe:4d:11:91:e2:64:88:8f:
5d:60:a5:f9:fb:33:26:19:69:50:f3:fa:e2:89:b2:
22:82:35:1f:b6:9f:ac:1a:60:b1:1b:6d:e6:d5:32:
ef:56:54:fa:05:0d:02:36:45:ad:56:bb:02:97:6e:
0c:f2:5d:29:ac:35:ca:5a:42:89:bd:ee:f0:99:fe:
97:64:22:cf:23:a7:ea:6d:1b:e1:e5:f2:d0:ca:cd:
d7:a6:9c:39:5a:3d:54:84:fa:0e:42:32:ee:ec:d8:
c3:ef:72:8d:1a:08:40:f8:7d:f5:7c:d9:55:f8:5b:
07:eb:17:42:5e:9b:0f:b2:d7:4d:b6:3f:74:a9:f7:
d5:78:9d:b1:df:0c:a8:d3:3f:99:9f:98:e7:00:61:
b3:88:a9:17:2e:f5:88:11:25:40:80:fa:21:1b:99:
ad:a1:b3:d7:c5:72:71:d0:61:69:59:8c:a6:e5:ee:
db:25:88:12:b6:ba:d9:6d:26:ed:de:33:e3:6b:f4:
91:61:64:9b:1a:d5:19:39:18:82:0a:c1:cc:01:56:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:72:52:90:E8:D9:18:24:1A:C9:CE:B0:99:B4:67:86:1F:9D:B0:82
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:68:2a:cc:eb:06:09:67:13:d4:64:8e:56:d3:de:eb:93:d3:
4d:2b:03:78:8c:c2:2b:f0:1e:97:98:48:c4:3e:60:ff:93:b4:
7e:24:90:80:31:67:ba:60:54:cc:80:ac:a1:db:8d:69:7d:2b:
9e:0c:e0:5c:44:59:a2:dd:ac:f1:0f:b6:6a:3b:ce:03:03:b8:
04:90:54:e1:59:20:3e:34:b5:f7:72:24:ea:c4:d0:54:f1:03:
a2:1e:5d:6c:6d:56:1d:9f:6f:e7:10:c2:24:0d:c3:0c:06:b5:
14:e3:4c:f0:b6:a2:e0:69:af:0d:ca:c0:f7:44:40:2e:d9:fa:
59:22:17:57:59:97:34:7c:db:31:64:43:0f:a3:77:4c:92:dd:
87:b7:93:d3:d0:fb:9b:68:a4:5a:6c:e4:26:1c:92:75:9c:3a:
8e:60:06:84:bc:28:9d:53:f0:cb:d2:6b:75:bc:9f:25:17:f1:
42:95:b8:a4:b6:ed:88:07:8e:c3:08:4c:65:72:ee:3f:8e:25:
1b:d0:ca:25:0e:4d:cf:49:e7:ac:b2:2d:7f:2a:41:73:a2:59:
e2:45:96:98:1d:16:57:e1:69:7a:e9:96:67:e4:9b:da:d4:d4:
68:35:00:43:fb:a1:d6:4e:12:5a:7b:5b:19:d5:eb:e8:20:e8:
89:27:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:42:36 2026 by rpki-client