Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: xP9psInE9XiUbRNk4ouR0YIEVgjI8d9VBTbdrYpDcmc=
Subject key identifier: 4B:8E:A3:9E:81:C9:BA:11:B2:68:EC:2A:E6:A7:61:28:48:E2:83:FA
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 01A138FF9E0800A583AE7FEB8E86FB032580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 15E7
Signing time: Wed 14 Oct 2026 06:00:38 +0000
Manifest this update: Wed 14 Oct 2026 06:00:38 +0000
Manifest next update: Thu 15 Oct 2026 06:00:38 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: RJ6+ANglDefMIEIXzXkmpPDZL6YiS8MwfUmjWUC+lqo=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:9e:08:00:a5:83:ae:7f:eb:8e:86:fb:03:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Oct 14 06:00:38 2026 GMT
Not After : Oct 15 06:00:38 2026 GMT
Subject: CN=4b8ea39e81c9ba11b268ec2ae6a7612848e283fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:0f:d7:74:bc:4f:ee:1f:01:cd:7c:f5:2a:
1f:01:b0:a9:0e:61:3b:7e:a4:78:ca:e1:7c:14:e5:
2f:2a:9d:08:2a:ca:a7:62:8c:49:f3:55:b2:6f:11:
bc:51:80:a1:dd:44:2c:e7:f9:1d:31:95:3f:68:65:
10:ba:d7:5b:c1:6d:3a:58:d8:ed:d6:b5:36:99:d9:
fd:ef:d6:c2:19:6b:54:1e:12:35:d7:0a:7b:76:f6:
ea:68:02:17:22:d8:33:6a:c5:89:ce:2c:71:e8:b3:
d6:86:da:25:e0:2b:ff:db:63:d6:4f:07:7d:80:9e:
0d:a0:8d:52:da:1c:0b:64:32:f2:5b:36:dd:89:b9:
83:5c:94:a1:64:2f:db:e9:24:06:9a:44:97:8f:81:
38:45:e3:60:af:5b:bc:ac:8e:39:5e:55:46:1d:de:
03:f5:3b:80:9d:f5:3c:f9:68:5b:53:58:7c:d8:0d:
2e:8b:bc:85:59:c4:01:da:3e:bc:ac:2a:7e:90:43:
cb:9d:55:4b:2c:4a:19:f3:29:d6:fb:5c:8a:99:00:
c1:cc:e8:c3:ce:e1:13:87:b4:8a:de:85:c0:ea:bb:
e1:bf:55:4b:37:fb:13:88:02:16:ca:3e:f2:19:cb:
c1:92:be:fe:b3:7c:78:15:fe:04:68:21:71:94:2d:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8E:A3:9E:81:C9:BA:11:B2:68:EC:2A:E6:A7:61:28:48:E2:83:FA
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a7:df:a5:f7:4c:1e:9f:4d:42:45:51:9a:e1:30:ba:02:ed:
ff:dc:17:ce:03:4c:8f:65:15:3e:de:81:a0:f5:d6:32:9e:f4:
b2:4d:91:fc:a5:31:14:51:d9:c0:f7:ff:51:5d:b6:f7:e9:bc:
76:35:32:23:95:d1:d9:45:22:d5:ef:ef:48:81:dd:5c:cc:df:
3c:77:7b:26:5e:08:e0:a9:3e:99:5a:5b:5d:64:5e:07:da:88:
00:6f:d3:e8:b7:c0:88:7a:5f:9b:2c:82:f5:ce:76:fb:fa:ab:
6e:a9:3a:c2:c4:9f:98:99:dd:b6:f3:2b:57:32:a9:01:75:86:
41:a7:03:b1:16:98:78:80:7a:ec:b0:5f:da:bc:cf:13:f9:86:
ae:1f:49:1a:27:e7:b4:46:75:63:95:83:8c:af:3d:ae:89:ab:
92:69:a1:76:2e:af:24:00:3e:bc:cf:a1:a8:01:73:fc:7e:17:
d6:91:39:17:53:3d:0d:47:b1:90:a9:e5:b8:2d:9d:27:65:a7:
1b:23:4a:49:f6:3d:72:1e:93:56:8d:1a:bf:bf:52:e6:4b:03:
bc:97:67:a2:67:38:99:71:65:40:82:c5:a7:a6:95:8d:e2:42:
2f:35:a9:d1:73:a8:0e:bc:82:68:ab:6b:6d:5d:63:b6:74:36:
c5:a0:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:46:40 2026 by rpki-client