Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: G8l7J5V4ru1j0B1Pv/cecOYoBY1an45WgSt+W9tYwxw=
Subject key identifier: 46:C2:E5:C6:8C:37:80:58:D4:24:08:90:43:47:3C:CD:90:19:48:5A
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019D273AB57988267EAE9703DB9CF554A855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 07C4
Signing time: Wed 25 Mar 2026 23:00:52 +0000
Manifest this update: Wed 25 Mar 2026 23:00:52 +0000
Manifest next update: Thu 26 Mar 2026 23:00:52 +0000
Files and hashes: 1: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (hash: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM=)
2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: SpcYfrc+XKBy4I+H7sBCUsXc40vRVsBQYlkihhyt9YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b5:79:88:26:7e:ae:97:03:db:9c:f5:54:a8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Mar 25 23:00:52 2026 GMT
Not After : Mar 26 23:00:52 2026 GMT
Subject: CN=46c2e5c68c378058d424089043473ccd9019485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:95:39:86:85:bd:80:cd:5c:e8:fd:bd:5d:
47:ba:70:f3:bf:78:7d:8d:78:25:00:58:78:3f:0e:
ba:d6:72:0a:e0:a8:56:aa:61:15:52:a7:de:e5:5e:
4c:45:3b:b1:d1:43:d6:b6:9e:52:bf:3a:31:b3:c9:
7f:55:28:7b:38:2e:73:a4:6b:61:d8:ac:7a:c4:51:
c4:8b:d6:3f:19:74:eb:33:1f:a3:ec:31:5a:3a:f5:
f9:b4:ed:8c:a5:46:70:6e:e9:eb:7a:16:4a:ce:d9:
93:79:7d:a2:b9:c3:82:ac:58:e0:29:6e:a9:9b:70:
03:bf:9c:da:c5:c8:ec:30:93:55:b3:00:b2:ee:33:
8f:ac:93:ca:09:7a:2d:13:d4:c1:86:71:c6:4f:82:
da:43:f6:cb:d6:e6:16:24:97:55:92:bd:75:33:24:
f2:88:56:cf:f6:d1:51:7e:8f:2c:bd:91:61:6f:b0:
b1:47:d6:12:f2:77:ef:3d:54:59:d6:7d:d2:b8:99:
78:a5:2f:a3:af:af:c0:2e:2c:98:8f:0d:22:0b:b8:
7a:7a:16:a8:a0:48:34:50:87:84:8c:00:d8:15:5e:
ba:39:90:8a:2c:68:00:a1:91:0f:b5:d3:2f:1e:a8:
f6:bc:d9:60:c2:89:69:5f:b2:3d:07:45:ce:af:d1:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C2:E5:C6:8C:37:80:58:D4:24:08:90:43:47:3C:CD:90:19:48:5A
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f0:6c:15:a6:c5:9f:79:ae:e6:ce:c8:44:53:03:17:45:c8:
45:33:6c:d2:26:b3:26:d1:95:6b:9d:55:87:c4:01:67:c7:5c:
16:70:ab:c6:7c:1d:c6:d6:51:cc:1d:13:6e:fc:57:dc:cb:c7:
3a:a4:a6:78:0a:f1:d6:93:72:e9:1b:6e:96:d4:be:f3:87:e6:
68:cd:2c:18:c7:dc:9b:6b:ba:e7:7b:bd:63:3d:3e:16:b8:37:
89:98:74:40:53:6b:b1:37:db:0b:81:8b:48:16:07:80:9f:2f:
39:04:f2:c0:32:c5:c3:42:6e:b8:78:00:e6:54:59:31:9a:fa:
69:e5:e8:f2:51:6e:31:c4:8e:c7:da:7a:3a:43:f5:09:7d:a4:
b5:c6:b9:03:02:ab:5a:44:7f:22:2a:a7:c1:01:64:92:a9:a1:
4e:36:ef:d9:5d:4d:fc:c5:ce:85:9d:fc:2b:1e:4d:3b:ac:42:
98:ba:b8:94:c8:42:68:df:a1:b2:13:85:9c:fe:03:11:b7:e9:
dc:5e:cf:fa:55:3a:97:a6:e0:9e:c1:e3:87:b5:35:31:08:0c:
b4:8e:21:6f:19:e1:6a:a6:81:04:43:6a:85:43:5a:27:f4:db:
1a:5a:f1:a0:f6:23:9d:a9:bf:ad:eb:c6:81:7b:87:be:ee:0e:
b7:7f:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:25 2026 by rpki-client