Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: mPlxAbsFptOM6p7o5KUwQ3r6HnoPspPCwzovr4b0IwI=
Subject key identifier: 77:6C:78:14:1B:DF:C1:B9:86:8B:E0:2E:88:AC:8F:25:B2:9D:F9:A3
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 019D273ABAF0AED330BD37A69DE4EF2A0B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 0A65
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: 3cTL_iAyUdWn1rl2_8NBBfXDXvA.roa (hash: Auq6dYW1IbUZ8oYiw7xCvq9559uK3oeBaCd765WHPJA=)
2: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: 6P4Agkbp+G7BQjmKpPAh8ILa6ZoZRrm8+8eQqVOT/bo=)
3: yuN29w4l_cl-IkkGgslbzfGqDe4.roa (hash: sMZJIkJQSxOhfVvEO/9QeKqeZ75CwlugDT+33MJ4iW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ba:f0:ae:d3:30:bd:37:a6:9d:e4:ef:2a:0b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=776c78141bdfc1b9868be02e88ac8f25b29df9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:19:10:1a:bd:e7:d7:eb:8a:8c:40:51:e4:
81:cb:c2:7b:03:ed:e8:b6:f9:e5:41:44:71:c0:e5:
55:a5:bf:3a:05:62:9c:b8:bd:af:56:59:2f:42:f7:
ee:2d:f6:a6:65:9c:bb:19:54:bf:61:24:a6:29:93:
cb:30:ac:68:b4:4e:46:73:57:1d:b7:b7:d2:20:61:
97:e3:b0:54:8d:0c:03:ab:9a:d0:fe:af:38:00:a3:
af:4f:27:39:68:f9:7c:4b:68:90:d2:e2:01:6c:0e:
9d:99:a6:0d:9b:a8:85:18:03:52:46:da:f6:63:e9:
da:17:35:b6:ba:d7:6e:37:36:59:74:62:14:62:df:
1d:76:50:53:ba:f0:69:b3:31:63:f1:b1:99:8c:f7:
6d:07:ba:b7:3b:5a:43:ea:15:1e:15:90:06:93:6d:
0e:85:26:16:e6:55:ea:05:c4:02:35:c7:7e:67:9e:
fa:e7:4c:55:cd:da:7a:27:de:14:a7:ae:37:c0:f2:
35:df:c5:14:48:88:08:a2:a7:86:6e:9d:3d:05:48:
6d:7f:c9:a9:f1:62:c2:db:68:00:11:80:77:4a:0f:
f3:09:be:b1:95:53:68:bf:15:e1:87:cc:31:3f:e9:
d3:80:f1:d8:00:2a:47:d1:d3:26:3c:2e:3f:90:3c:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:78:14:1B:DF:C1:B9:86:8B:E0:2E:88:AC:8F:25:B2:9D:F9:A3
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:87:f8:95:f8:b7:04:25:13:bd:b0:49:eb:d7:b2:2d:2b:
f0:4f:b2:2e:63:98:3b:b9:cf:18:2a:b6:5c:c6:86:6e:cf:cb:
ec:b9:3a:49:bd:25:f7:36:ac:08:21:99:62:2a:83:57:f3:e9:
41:a6:1f:c6:66:86:bd:e8:de:79:22:11:06:a4:b4:f6:09:81:
7c:bd:b2:27:03:0b:23:cf:22:76:a8:52:f3:76:47:ac:2e:b9:
9e:15:2c:be:c4:7a:87:66:ce:e4:da:91:d3:52:1b:6f:40:15:
ef:b3:03:ff:d8:60:80:d4:ff:12:65:85:69:f6:3e:6d:16:64:
bc:6f:fa:0c:e5:14:de:19:09:65:e2:a5:a9:0b:87:49:be:38:
19:7c:23:11:6c:12:e2:b5:7b:fc:bf:f3:64:fa:1b:d0:aa:20:
df:45:c4:04:02:6b:c6:89:8c:5c:6d:6b:81:2e:b6:b1:67:10:
1f:bb:b5:5b:c7:b9:e3:e7:6a:6f:e4:e5:41:f5:f4:83:3a:d4:
75:a3:bd:ca:64:7d:af:0a:cb:12:1c:a3:0c:98:86:6f:f5:8b:
b3:4a:a3:96:13:22:88:5a:ea:1c:5b:9f:60:ff:96:88:a3:39:
9a:c7:90:c0:48:dc:4c:39:46:7e:6d:29:fe:bd:e3:4d:3f:72:
25:ba:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:18 2026 by rpki-client