
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier: FJZb+cpbFWb8X0YrlO9OmmHVyWcTO962pqI/tIjppwo=
Subject key identifier: 68:A7:B7:40:A5:3E:18:41:10:49:E5:7C:17:A3:90:C2:4B:96:67:9B
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 019E284B04F8E9A120FFFFFBB773CFA96EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number: 14B9
Signing time: Thu 14 May 2026 21:01:05 +0000
Manifest this update: Thu 14 May 2026 21:01:05 +0000
Manifest next update: Fri 15 May 2026 21:01:05 +0000
Files and hashes: 1: IokgSudl3AkR5yh01t-OFzPg4qE.roa (hash: KcJVO/wfX/Xcbn1mfQvmOj8I+t/hByN+WDPLWTnqUfw=)
2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: Vs3ervLecrMdSUgc1Cjiq5k7y1+ElMtEhQiMU9QNxPw=)
3: xh82RKrJE90vliurJaEcvJUJUgA.asa (hash: +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:04:f8:e9:a1:20:ff:ff:fb:b7:73:cf:a9:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: May 14 21:01:05 2026 GMT
Not After : May 15 21:01:05 2026 GMT
Subject: CN=68a7b740a53e18411049e57c17a390c24b96679b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:f0:80:66:a2:33:49:fb:ae:ea:9e:d4:b2:
5e:da:07:c9:6a:f0:82:ba:5e:9e:9c:8d:f6:b0:0e:
9f:2e:b3:44:cf:03:ab:b1:95:a8:71:09:61:8f:31:
4a:8b:a9:19:fb:9c:66:56:a9:49:55:ad:c7:52:5f:
f3:2f:dd:d1:67:09:f4:ab:35:23:99:e3:df:fe:93:
b6:3c:b6:2a:a5:26:d1:b1:c5:34:14:3e:a1:94:c2:
9d:16:7c:73:23:9a:cc:a9:99:7b:3f:38:07:17:bc:
9f:0a:34:8c:00:d6:33:ba:52:22:43:b8:c4:cd:2f:
af:be:cc:90:fd:08:a8:c9:60:fa:3b:2e:62:ab:1d:
f1:44:56:79:72:a1:67:3c:6a:32:04:f6:96:b6:c0:
5a:88:a0:ac:a8:ae:6e:3e:fa:54:56:f9:0e:19:26:
b5:3d:27:fe:b7:94:20:c8:d6:ca:94:a8:0c:67:c1:
1f:2f:f5:3c:6e:04:c8:91:21:ae:70:1c:6e:ff:d5:
fa:d1:2d:eb:74:d9:92:ea:37:c9:cb:74:b2:8d:fb:
b3:b8:94:48:c0:de:0c:b5:2f:b4:a2:0d:17:6b:81:
92:5e:84:07:c3:3e:a0:af:2c:21:cc:35:bd:6f:dd:
d3:a0:e5:6f:57:26:3c:5c:cb:58:23:48:e1:d1:74:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:B7:40:A5:3E:18:41:10:49:E5:7C:17:A3:90:C2:4B:96:67:9B
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:44:e1:44:93:b7:95:a6:9f:c0:1d:39:10:d3:05:10:e3:b8:
3f:58:c5:cc:5d:b2:28:22:ea:bb:cb:5f:4a:8a:55:39:64:e7:
41:5f:4e:59:6d:54:c2:84:5c:ea:18:af:cb:f6:9a:f3:6d:8b:
80:3f:26:16:4e:97:d9:47:f8:77:0d:7a:12:ce:8d:9f:3b:3d:
1b:53:57:cc:df:b8:9a:a8:b5:ce:37:93:05:c7:7e:3a:85:0b:
83:2e:c5:3b:70:4e:7c:e7:c1:e7:d5:14:fa:f3:1e:da:6c:7d:
d1:f4:37:44:c0:e0:37:dc:9b:ff:fe:08:07:d4:24:65:12:a2:
5f:0e:a1:5e:a2:12:a2:64:e0:7a:6e:63:80:2c:c8:33:3e:a0:
63:b5:40:df:3e:33:7a:73:79:1a:44:5c:e1:fa:d6:d0:3a:14:
03:06:30:c1:9f:7e:3d:c6:3a:46:15:f3:5b:eb:6a:7b:c2:d2:
e7:37:b0:36:b1:7b:87:bf:9b:50:04:d4:4d:d3:c7:4f:70:eb:
8f:59:71:4b:66:82:dd:18:24:15:91:7a:9b:f0:70:b1:2b:be:
6a:1c:bb:49:eb:11:b0:36:30:df:43:dd:90:21:ee:2c:2c:97:
d6:06:ba:1a:54:db:90:e3:41:52:4d:07:c3:5c:62:b8:50:33:
ba:0c:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:30 2026 by rpki-client