Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: OcJXQtnt3XwOmOM6lBjEB80FLZ7sCB5tZR+sU1LiBas=
Subject key identifier: 17:97:09:1C:8F:AC:D9:ED:D7:F8:5A:80:05:04:53:CB:A7:4F:03:07
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 01A043BD36CF70C0996CE99F60EBEE4A88DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 1568
Signing time: Thu 27 Aug 2026 15:01:08 +0000
Manifest this update: Thu 27 Aug 2026 15:01:08 +0000
Manifest next update: Fri 28 Aug 2026 15:01:08 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: ku820taWKX5N/WpAdpq05kW/j7MZZz3FYR8LSgZYuxE=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:bd:36:cf:70:c0:99:6c:e9:9f:60:eb:ee:4a:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Aug 27 15:01:08 2026 GMT
Not After : Aug 28 15:01:08 2026 GMT
Subject: CN=1797091c8facd9edd7f85a80050453cba74f0307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:70:96:8e:71:30:9c:96:05:1c:ba:1f:51:
3c:f8:2d:64:89:43:95:bf:f0:2b:f6:38:83:be:bd:
9e:06:46:0c:0d:10:0f:39:8a:35:4b:2f:2c:38:90:
63:0f:7c:61:e7:dd:b0:2b:89:59:58:87:fc:4a:71:
b1:6b:fe:af:d2:ef:93:0c:c5:c4:c6:0d:81:39:b7:
d3:5d:21:5f:bf:91:61:f3:25:69:49:0c:bb:80:d7:
ee:fa:e9:99:bb:65:90:56:7d:5a:53:d1:af:5c:b4:
a5:cc:5b:30:b1:e8:4c:6c:22:7b:7c:c9:7a:96:eb:
59:4f:34:ed:17:03:d3:c8:99:5e:ca:0a:13:29:9d:
60:a0:1f:c1:28:5d:11:a4:f6:3d:49:b7:0b:55:70:
09:4e:39:1c:b3:54:4e:36:cb:10:f7:63:d6:09:48:
da:ca:36:d0:ee:07:b7:b1:24:c1:4b:2b:18:1e:21:
61:9f:da:5b:c3:48:28:21:f2:84:5a:76:fc:f5:a5:
64:0d:d5:46:f9:fb:d4:81:33:ea:1a:82:32:0e:6a:
ed:7d:58:a6:98:2d:98:5b:03:27:ad:ba:4f:76:bb:
1c:bc:8c:83:1c:86:38:04:b1:2d:62:ea:1a:75:af:
b9:61:41:ce:d5:09:e4:c8:dd:7b:42:7c:31:c7:b9:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:97:09:1C:8F:AC:D9:ED:D7:F8:5A:80:05:04:53:CB:A7:4F:03:07
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:84:f1:e2:0e:7f:b8:b0:9b:a6:db:2f:82:48:4e:a1:f1:30:
e2:43:d5:39:7d:79:2f:e1:29:9d:29:6a:8d:af:60:85:92:49:
d8:ac:3d:06:e5:37:e1:51:ca:38:14:82:1a:d1:0d:a3:ec:36:
17:9a:5d:80:10:77:42:1a:33:86:2e:87:6c:de:3e:12:a5:71:
38:7a:2b:96:56:47:c7:99:dc:5b:2b:e0:2e:f8:c2:ec:bd:ae:
f7:63:48:bd:84:b5:f7:5b:b5:cb:3e:a0:e9:a2:04:e9:6f:ed:
34:48:19:5f:58:e9:36:40:f8:9e:64:8f:14:3f:09:0a:bd:d1:
72:15:b4:23:36:ea:49:d7:1f:96:2e:8a:7b:ca:f1:37:3f:55:
b6:b1:b0:b8:02:66:17:bb:46:15:43:1f:43:53:09:de:c2:bd:
0f:09:98:d3:36:98:5c:74:67:bb:aa:e8:d2:0c:27:a5:48:66:
5d:52:95:53:bf:02:58:0a:57:81:51:2c:d8:fa:0c:34:aa:d2:
36:3f:f4:3b:cd:ef:fa:35:6c:b4:7b:8b:ab:60:b8:67:34:75:
75:aa:3a:9c:d7:6a:6e:19:da:8f:24:9c:2f:dc:8d:0b:d9:b0:
19:ff:15:d6:77:54:ce:49:e6:23:96:43:9b:4a:e2:a7:0c:56:
ed:10:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:56:26 2026 by rpki-client