Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: /ZIYGkY0k5U3grrR7uWX8jATLYacBGa+93t6mYqp6A4=
Subject key identifier: 5F:D4:67:C6:37:2E:38:88:B5:E7:3E:BB:AE:DA:23:41:28:C2:7E:20
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019F954A38B4B91A1692F22C1537E9A3683F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 17D5
Signing time: Fri 24 Jul 2026 18:01:37 +0000
Manifest this update: Fri 24 Jul 2026 18:01:37 +0000
Manifest next update: Sat 25 Jul 2026 18:01:37 +0000
Files and hashes: 1: ADQVGcYHAdNJ-hAqMH1xbjoKE3Y.roa (hash: E2qNo46hGoFoU5ZO78LMzpzOObOhyrGlki4B54417Bk=)
2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: cx0xAyMdqIKxNwgbi4ulMkF1CjEAfAFKMjl6k4cPAcA=)
3: uI2p_St8xu7ZpT8GRSPeHacoPgQ.roa (hash: 51lmLo3rTUt/J6o4QmvUuq3au5ZbWynApTSh9gVcCfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:38:b4:b9:1a:16:92:f2:2c:15:37:e9:a3:68:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jul 24 18:01:37 2026 GMT
Not After : Jul 25 18:01:37 2026 GMT
Subject: CN=5fd467c6372e3888b5e73ebbaeda234128c27e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:76:0d:9c:63:4e:bf:48:8c:f4:03:ac:00:
d9:b3:c6:da:d3:af:e9:a9:72:3a:f8:cc:3f:58:b6:
3d:6b:e8:b0:19:89:ae:21:33:e1:19:47:7b:0d:27:
76:d0:b0:df:8e:de:68:7b:7d:ef:64:08:f9:cb:1f:
98:02:b2:cd:43:60:98:50:71:80:bb:2e:af:ae:f4:
5c:2c:e4:8c:b9:5c:f7:c7:de:ed:dc:4d:b2:25:a3:
70:97:46:b7:d9:f6:c4:30:77:ff:4d:f1:2d:f7:57:
99:67:69:69:fa:f7:34:3a:f1:e1:87:48:9c:0b:31:
40:18:12:25:72:be:d0:cd:b2:13:de:ab:89:a5:79:
ad:18:94:11:32:76:90:a2:04:77:9d:c6:e4:a8:e5:
f8:d0:90:41:d3:3e:0a:35:77:c3:ce:35:43:2f:36:
35:5c:88:48:9a:bb:22:39:b1:47:f3:ea:9b:7a:5f:
df:24:ff:46:1d:66:95:a2:8e:2f:ac:37:b0:74:a0:
5e:41:86:3e:3b:a6:ce:4a:f2:11:82:17:b1:17:0b:
23:6d:33:0e:36:21:30:67:a1:39:2e:71:f1:48:8f:
6c:45:28:dd:7c:df:a7:92:2c:25:25:51:0c:1e:e4:
c4:3e:73:d7:ad:ce:fa:1b:9f:5f:22:87:07:b2:27:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D4:67:C6:37:2E:38:88:B5:E7:3E:BB:AE:DA:23:41:28:C2:7E:20
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6e:4a:ac:df:d2:8e:d0:d9:97:24:8e:a0:5b:ce:ae:d1:31:
21:de:89:13:3f:07:a6:f1:6e:f2:e6:e2:bf:69:a9:6b:5b:8a:
96:c0:90:9d:37:60:6d:a7:0d:c5:71:28:42:18:fc:82:c1:32:
0f:fb:88:c5:43:ea:29:eb:2d:b2:c4:77:c3:8c:a4:57:50:0f:
0e:ec:34:5e:ea:a9:e3:a1:77:99:31:28:a7:06:cb:e7:e9:0d:
87:db:88:e7:5d:60:57:09:9b:ef:3b:44:37:35:80:36:c3:27:
fd:ea:68:ac:40:ad:61:67:6e:1f:d0:7d:82:8c:47:0e:2c:46:
9a:79:9e:32:07:53:a4:89:7d:74:1e:d9:11:c1:e4:ed:b1:d5:
c0:da:96:70:a7:0e:43:06:ca:8a:d2:98:f4:fb:6a:97:25:db:
7a:b7:ce:19:92:97:6e:9a:cc:56:2a:6d:c4:a7:3e:c0:f3:21:
ad:b5:ee:18:f2:7c:49:8e:86:fa:42:d2:70:58:c4:33:0c:a5:
3e:0b:ee:42:bc:83:47:f1:f7:d2:e8:0c:f7:52:66:30:a3:3e:
ca:4b:d3:78:c8:46:91:2e:0c:55:1c:f2:b3:c1:93:6e:39:d9:
26:7a:a5:96:09:3c:e6:92:ad:cc:d7:f9:be:ab:43:c6:6f:e2:
46:c9:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:56:57 2026 by rpki-client