Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: F7nFWXoBCqrzEmriYFCGVHRVN28kZQ2zo5sSNgAmclQ=
Subject key identifier: 71:30:0D:B6:68:2B:71:B1:75:91:43:45:D1:5E:8C:B3:28:AD:F1:83
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019F95124A87664E5AC823AFD71D5AF35B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 0906
Signing time: Fri 24 Jul 2026 17:00:31 +0000
Manifest this update: Fri 24 Jul 2026 17:00:31 +0000
Manifest next update: Sat 25 Jul 2026 17:00:31 +0000
Files and hashes: 1: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (hash: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM=)
2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: 4aX6flMKf2VQYuOp0uLZFdqtgJanUa5k3vXfAC4/7TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:4a:87:66:4e:5a:c8:23:af:d7:1d:5a:f3:5b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Jul 24 17:00:31 2026 GMT
Not After : Jul 25 17:00:31 2026 GMT
Subject: CN=71300db6682b71b175914345d15e8cb328adf183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:da:ac:3d:50:72:9c:0f:e9:5e:5b:d8:ca:
c1:36:d0:32:29:8f:cb:d2:46:14:36:d8:86:df:b1:
73:d1:3a:27:da:f4:7c:cf:33:53:f0:f6:65:d9:6c:
35:65:18:24:3c:fd:5b:c3:27:13:5c:50:42:ad:39:
af:28:62:6a:a1:23:22:c0:a4:d6:b6:05:54:c8:e5:
32:4a:60:c3:61:28:53:e6:d6:f8:27:93:52:f7:ad:
44:59:36:70:15:a9:10:a2:7d:b8:4a:a1:42:d8:60:
1c:8f:0d:72:cc:1f:60:02:5f:8f:a5:73:cf:9e:b4:
6b:a5:19:7c:da:a6:e8:6f:48:2c:25:5f:eb:e3:85:
df:87:f4:0c:10:6a:91:33:47:38:4d:23:f8:87:a9:
0e:87:b1:d9:54:94:dd:d4:39:30:d3:ce:05:9a:c8:
38:c2:37:f4:10:94:cd:85:51:e6:02:cb:bb:43:9a:
ca:95:9e:b3:7f:47:4e:25:12:8a:32:93:1c:09:98:
24:ac:bf:32:af:25:a8:2b:27:c9:2a:93:3e:30:d4:
89:e3:3b:11:77:8b:af:8d:ea:70:b3:fe:35:cc:74:
88:6d:b6:5c:fe:f4:78:7b:55:05:54:01:2d:ed:cb:
63:69:24:3e:2d:c2:ec:e6:7d:94:29:14:15:d2:a8:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:30:0D:B6:68:2B:71:B1:75:91:43:45:D1:5E:8C:B3:28:AD:F1:83
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:70:20:34:59:db:30:70:8b:50:f7:ce:63:94:49:a2:50:5a:
39:b9:67:ac:cd:a9:1e:9d:c8:6c:43:8d:b7:54:49:e0:ba:a7:
5c:00:56:c7:34:aa:45:a7:e9:3e:76:3b:33:f7:90:03:fe:fd:
71:4e:01:be:68:b2:e9:58:4f:42:cf:80:c6:ad:a5:7d:2b:4d:
2f:ae:33:98:b5:e6:94:65:40:75:0f:db:28:d1:03:21:60:0a:
8c:a0:d3:d0:43:e8:e7:90:c6:10:8b:b2:78:b2:03:88:34:e5:
77:f5:a8:1d:ad:bb:56:8d:73:33:04:72:35:e9:8e:22:42:10:
81:a5:8b:42:5d:1d:48:ff:83:ed:59:8d:8a:bd:32:9c:64:8a:
26:83:31:3f:87:b4:67:0d:f2:84:f9:ea:3a:0b:d6:8d:4c:d7:
74:b7:4c:0e:77:78:b6:03:1c:3c:f1:c3:4e:1d:7a:ca:68:76:
17:8d:29:9a:37:74:a9:a6:8d:7b:35:3c:0c:fc:31:81:ac:51:
3d:65:ce:3c:68:01:94:29:f9:fa:c7:40:0a:10:99:e8:69:f9:
53:d0:0b:97:f6:1c:9f:fe:db:f3:de:47:0e:31:ae:44:0d:67:
aa:df:87:0e:71:6f:38:f8:17:4f:b2:40:8f:44:8c:55:59:18:
51:a8:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:49 2026 by rpki-client