Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
File: WzgltIs1me_6oLyBqN3bmPHYAsQ.mft (raw, json)
Hash identifier: jNZYeTH/wVemid0cSBi8nYBCu4vIIpZOZq670Q16z68=
Subject key identifier: C5:5A:EA:88:DE:98:7D:9C:45:53:DA:09:E7:1F:76:0B:87:85:EF:2B
Authority key identifier: 5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
Certificate issuer: /CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Certificate serial: 019D281704B9A2222388C6A918804D328CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 03:01:30 +0000
Manifest this update: Thu 26 Mar 2026 03:01:30 +0000
Manifest next update: Fri 27 Mar 2026 03:01:30 +0000
Files and hashes: 1: UbNuRFOVHUUJwDDzscbPhmRX1j8.roa (hash: UiS0VJNajfmsH4Zi8nv03I0mVu/mkamsiis7n5jG0Oo=)
2: WzgltIs1me_6oLyBqN3bmPHYAsQ.crl (hash: aXzO7obHrzqWDk2tkrFVubsu4YlY+VRT4BTDpDvPQM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:04:b9:a2:22:23:88:c6:a9:18:80:4d:32:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Validity
Not Before: Mar 26 03:01:30 2026 GMT
Not After : Mar 27 03:01:30 2026 GMT
Subject: CN=c55aea88de987d9c4553da09e71f760b8785ef2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:9f:7c:56:31:5d:9a:51:61:7a:fe:1d:32:
5b:6a:5b:06:b8:86:2b:00:b6:76:09:4f:23:61:6c:
33:07:61:5d:d0:f2:e9:09:ac:f3:78:21:7f:74:ed:
5e:0d:a1:ad:69:b1:2e:93:e1:a8:b7:a5:e6:79:68:
b9:e6:88:b5:c3:b3:bb:96:fa:88:5c:52:24:fd:35:
8e:cc:c1:e9:d2:04:df:51:8d:7b:f5:4b:7a:a3:76:
96:7e:42:8e:92:e5:46:d6:47:64:5c:1d:83:18:40:
25:5a:20:cc:c8:77:03:97:9d:ab:ea:8c:ea:a9:fd:
91:26:6f:27:01:b9:e1:8b:ec:ce:4f:df:8d:38:bd:
fb:1a:49:0f:19:02:6f:e9:b8:8f:56:49:fa:4c:d1:
50:60:f9:81:34:3e:a4:c4:8b:80:d1:cf:55:4c:66:
72:46:72:cd:4d:7e:9a:9d:3b:5f:a5:f8:1d:0a:0e:
c5:da:cb:31:d9:c4:f2:1d:e3:99:76:1e:3f:d7:77:
4e:15:51:c2:eb:3f:4e:bb:78:2e:bc:6c:1f:b9:2a:
c8:4a:71:6e:a0:4f:8f:9a:35:88:b3:6b:3e:20:d4:
88:da:20:39:95:6b:8e:75:36:2a:4d:d6:f4:62:ed:
ec:90:85:6a:85:7b:80:3a:a9:1d:14:98:cb:d0:52:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5A:EA:88:DE:98:7D:9C:45:53:DA:09:E7:1F:76:0B:87:85:EF:2B
X509v3 Authority Key Identifier:
keyid:5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c4:ae:cf:3c:19:7d:0b:db:1a:8f:8c:f8:70:ce:37:54:f2:
cc:74:16:15:ba:e5:f4:db:eb:43:a4:09:97:79:29:04:f0:79:
60:c7:52:8c:d5:ec:82:80:7a:6f:96:85:f3:9c:fb:c3:a7:31:
df:5f:95:d7:4a:c9:9d:f1:ba:a9:03:8a:ef:13:48:b4:df:3c:
2d:ef:48:1b:c7:28:12:63:b7:c9:7b:b9:85:0c:26:d5:73:f1:
34:90:8c:54:09:a6:fe:e7:b0:62:1a:e3:22:87:be:6f:3f:51:
8e:63:d6:24:0a:55:7e:c4:57:5d:9c:9c:17:e0:a8:4f:93:50:
5c:8a:a5:bc:43:b4:a1:74:33:45:ae:3b:ba:cd:2b:9c:ad:3a:
fb:25:f7:b5:bf:7a:b2:0c:0a:d2:44:b0:39:3b:9f:31:36:b3:
97:18:c9:e7:a1:0b:f1:e6:a9:89:a0:71:d4:f3:04:56:12:7d:
30:cd:e5:81:d1:e4:bb:81:b7:00:d2:5e:0d:ba:45:7e:03:42:
6f:3a:c3:38:13:d7:31:87:d8:83:88:d0:97:15:25:d6:7a:58:
d5:94:26:84:df:91:ad:6e:10:8b:ee:5e:2f:f5:a7:00:37:2d:
82:bc:69:7b:51:50:a0:04:55:2e:b4:6c:e7:6f:ff:39:c4:3c:
21:aa:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:53 2026 by rpki-client