Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier: 5Ba8QMvCYf5R8xnBwGw9SFrm75exJXJsBb4cTDmAWpk=
Subject key identifier: 07:B7:55:87:D4:C7:72:25:5D:62:A1:E1:ED:D7:D4:71:19:95:E8:87
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 019D28BB7172BE46F0B9AAD05945CF30BC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number: 14AA
Signing time: Thu 26 Mar 2026 06:01:05 +0000
Manifest this update: Thu 26 Mar 2026 06:01:05 +0000
Manifest next update: Fri 27 Mar 2026 06:01:05 +0000
Files and hashes: 1: 7dNSDdB7_w97DhUoDrNZCXrX7E0.roa (hash: RIHs9Q0Oo6t9P10Krf7jjUML9y+2LWdE7MwzxZ7TTvM=)
2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: WF8kYttuatqoyDQLThNnv2h7GU8HKaTAWv4Xb4zkKco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:71:72:be:46:f0:b9:aa:d0:59:45:cf:30:bc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Mar 26 06:01:05 2026 GMT
Not After : Mar 27 06:01:05 2026 GMT
Subject: CN=07b75587d4c772255d62a1e1edd7d4711995e887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:5e:46:d2:b9:3f:61:a3:40:e9:e7:59:6c:
92:da:4e:3b:e5:f7:9f:44:a5:80:ab:9a:c9:d6:44:
af:47:af:d5:ba:57:ce:68:b6:ae:de:8c:6b:83:77:
d5:08:3d:6c:bc:70:4a:b6:27:92:e8:3a:aa:dd:73:
20:8d:25:49:15:e6:ec:ff:51:34:8e:7c:dd:09:e2:
5f:43:62:9c:39:80:ff:73:ac:2b:e0:7e:7e:a8:f6:
48:d4:ff:4c:eb:d1:48:0e:1c:bb:41:47:1c:de:ff:
48:d5:e0:bf:9a:9f:8c:7c:68:4b:52:d0:aa:b7:ca:
19:44:d8:a0:d9:d4:de:76:c6:09:8d:bd:80:79:19:
f4:4b:c3:0d:d3:94:de:2a:6e:97:11:13:8b:1a:db:
d6:bf:07:d2:20:83:17:ca:d6:de:2b:e3:79:d3:ee:
fc:2c:37:a6:65:b7:8d:ae:13:15:9e:2d:a5:94:e8:
9a:65:40:a7:58:90:5f:2c:c8:f1:9b:ca:80:b4:07:
08:2d:03:92:0c:ac:d4:6a:d0:fc:4a:4f:92:80:b9:
5a:f3:d6:a7:61:fc:92:ca:1c:8d:6f:12:27:0c:16:
c7:96:a9:f0:43:d0:61:91:4b:87:80:13:86:3d:05:
d5:26:06:1a:a3:fd:fa:80:18:79:19:2a:2c:65:c6:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:55:87:D4:C7:72:25:5D:62:A1:E1:ED:D7:D4:71:19:95:E8:87
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e0:de:b7:fb:14:ab:2b:e7:71:44:a6:ba:57:ee:2d:eb:c9:
65:6c:17:cc:9a:62:c2:1f:66:9c:1d:07:82:0c:bb:95:7e:3a:
f1:5a:61:30:a3:46:db:45:ec:22:1f:15:c0:89:f7:34:dc:64:
19:27:7d:89:ad:eb:f8:3c:64:7a:2f:92:78:63:54:c3:40:83:
04:dd:d0:1a:63:ff:4d:f2:7c:de:54:d7:cb:b6:0e:51:bb:ed:
6d:08:a3:69:af:66:f0:be:f0:d5:c7:4b:f3:84:84:d9:7d:e5:
ff:09:d3:f1:82:64:da:d5:2f:56:8b:86:94:f4:0c:ba:8f:f6:
59:2d:62:9e:e0:67:3a:04:4c:46:33:cc:71:e1:be:de:01:a1:
bf:eb:fe:3c:a8:ea:bf:8d:a9:f1:d9:b3:ac:20:90:af:e1:54:
dc:4c:07:a3:1f:c3:53:8d:c9:bd:4e:b0:41:61:3d:61:09:c3:
06:c9:0d:89:58:18:5f:81:b0:3c:31:e1:a8:2a:aa:5f:a7:98:
a7:be:01:35:91:b4:f5:ad:c5:57:68:89:56:66:0f:3e:1e:2b:
78:ea:05:bd:fc:69:87:c9:c4:11:56:8e:2a:68:ce:91:43:06:
b4:b2:b7:9f:75:41:49:61:2c:0b:92:f0:b6:88:27:df:3c:9f:
86:ce:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:09 2026 by rpki-client