Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: ftSt0wQ35SbaFgNY3vPAjIDTT/P06jcnmocjv4Fto4o=
Subject key identifier: 83:A9:D8:61:7B:BD:13:1E:C5:FF:4E:03:F9:56:37:BB:9A:A6:C7:6A
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 019D2A04C125785DD57C275022D39E7AB7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 033D
Signing time: Thu 26 Mar 2026 12:00:47 +0000
Manifest this update: Thu 26 Mar 2026 12:00:47 +0000
Manifest next update: Fri 27 Mar 2026 12:00:47 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: 6uca8Y3F2drsMJUF8GMW/PZL99NYTunKKd5UT+acf0A=)
2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c1:25:78:5d:d5:7c:27:50:22:d3:9e:7a:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Mar 26 12:00:47 2026 GMT
Not After : Mar 27 12:00:47 2026 GMT
Subject: CN=83a9d8617bbd131ec5ff4e03f95637bb9aa6c76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:a5:d1:cc:83:b4:aa:0d:46:6c:2c:bd:56:
6d:88:1d:67:16:39:5d:e0:8e:c2:a0:f0:50:69:d9:
1e:05:44:5d:b6:c7:5c:4f:89:56:70:cf:c6:90:43:
8b:1f:1a:ec:9c:4f:e4:8e:bb:cc:8f:54:71:89:9e:
b6:d1:5a:cf:32:7a:93:82:40:0e:e1:b3:e5:07:f8:
49:ac:b3:31:a2:4c:00:57:14:4e:5c:8a:ce:f6:62:
66:cd:37:7b:11:7c:b4:ae:75:89:ba:55:f2:dc:bf:
02:67:85:37:48:0d:7c:5e:41:c2:1b:5f:85:ed:9f:
8f:5c:db:84:d9:96:c4:cb:fa:ab:e8:ed:04:7b:52:
9c:43:51:de:20:26:44:01:fe:33:42:20:7b:33:27:
6c:ad:15:7c:c2:1d:84:fd:be:c1:cc:25:52:3e:ec:
10:fa:0e:96:62:62:a3:5f:a4:fa:db:66:4b:cf:50:
c1:25:3a:61:36:7a:98:6c:d9:ef:24:40:01:21:ca:
a6:bf:13:c4:de:ce:27:6b:77:6c:6c:ec:62:23:e6:
d1:68:21:ab:30:72:90:56:fa:1a:3f:9d:58:05:9c:
03:4d:d0:ff:b1:4b:f6:1f:bf:93:e2:f1:f8:24:b5:
5a:47:73:c3:e1:bc:e7:eb:47:bd:71:63:52:eb:ce:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:D8:61:7B:BD:13:1E:C5:FF:4E:03:F9:56:37:BB:9A:A6:C7:6A
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5a:3e:42:e0:83:2f:48:23:3b:39:86:85:d1:99:55:53:ea:
36:bb:23:de:22:d6:c7:a9:a0:04:01:38:10:b5:16:12:8b:98:
a7:05:6e:b2:cd:a8:7c:ad:7f:95:63:cc:f5:65:ee:53:16:10:
2f:64:3a:17:7b:75:f7:dc:3b:4b:7e:5b:ee:8e:8d:1b:f2:ef:
af:0a:06:01:cf:29:00:c6:b0:ce:e2:4b:cc:4e:33:a1:f9:00:
1e:ce:f7:0b:d5:23:8a:5d:25:d7:c8:92:6c:9c:ac:e3:ce:ba:
68:c1:c4:d7:01:01:d5:e3:1f:58:b8:d0:7c:53:e6:36:0e:dc:
13:d7:28:7c:73:9f:9a:07:cc:d3:2d:f3:e6:54:6d:5b:08:b5:
6a:77:d6:23:c4:ce:e1:7f:13:d0:3c:62:91:4d:b5:cf:08:1b:
ea:93:c0:ec:ae:96:86:37:cf:08:b5:60:11:0e:57:8b:80:b1:
37:cf:e5:95:b0:72:8a:11:79:a2:ed:61:7c:62:b5:f7:5f:92:
90:bf:c2:19:52:0c:35:e0:e9:42:cb:b7:fd:0f:4c:dc:31:3f:
da:df:da:89:58:1e:e5:6b:70:b0:53:18:a9:6a:0b:ec:c4:81:
29:64:4a:6a:f1:c8:71:9d:b3:6a:d5:d9:31:63:7d:64:9a:21:
de:4d:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:12 2026 by rpki-client