Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: CeBoxMs1K/4yhGiFNCZ5CLUuh+Yo6fqgNtKqqizBSYk=
Subject key identifier: F9:72:44:06:5D:D5:B6:7E:B4:D1:72:8D:9F:6E:3A:B5:63:7B:0C:EE
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 019D389BA722F08E94B6931980FBD859BDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 1317
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: TjeA0h__0K75m-Lz_8rsQK-1bSA.roa (hash: L2lPrSJTEdmpDG2xtyfaKRlJ8hxi9q1HTQ4jAfyHzCs=)
2: i_5uaEC74F4fkQ9w0VTjAAVZ7ek.roa (hash: EmaFrrCeMCRKCrjyOiqjJjxN5S8IqzhYZkELnG6BX0g=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: 0+kqMVncjCXs7D2I4kFhcyMw2asKbCCD6WR1KEi0fCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a7:22:f0:8e:94:b6:93:19:80:fb:d8:59:bd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=f97244065dd5b67eb4d1728d9f6e3ab5637b0cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:4a:f8:fd:09:4a:57:12:fb:5a:86:34:0d:
b2:4b:87:89:5c:38:e4:a3:a3:67:dd:c8:be:4a:13:
32:a5:42:a0:1f:12:f0:1f:82:72:5a:5d:ee:06:41:
01:94:0c:09:6c:39:b7:03:ca:34:f5:36:7e:07:5a:
0e:06:02:54:d1:ee:53:94:a7:97:ed:02:48:21:80:
15:c0:f3:e3:7a:fd:e1:68:30:30:a1:75:99:eb:10:
c3:5a:0d:b4:b3:24:0b:b7:dd:ee:2a:62:be:55:1a:
ec:29:aa:8e:a1:e7:18:6f:42:e0:38:7f:ad:4d:d7:
04:71:4f:85:75:17:82:fb:cc:31:87:ae:12:05:b9:
b3:57:35:bb:c1:d9:62:25:10:9a:14:43:76:47:63:
1f:35:1d:49:6d:50:17:56:33:27:f7:85:5c:c3:48:
55:5c:ff:2e:ef:76:be:bc:d0:bd:46:91:bf:80:25:
f2:93:ea:08:17:ee:6c:24:24:73:75:75:d1:31:41:
92:15:eb:66:d7:e7:2e:77:34:44:08:65:03:fc:69:
8a:35:9e:0a:0b:e6:15:85:60:c3:3a:fc:f6:aa:52:
37:4f:80:b1:fb:7a:0f:5f:3e:52:a8:67:36:0a:69:
8e:4d:c3:96:77:c3:ba:99:bb:1b:e3:5b:40:39:93:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:44:06:5D:D5:B6:7E:B4:D1:72:8D:9F:6E:3A:B5:63:7B:0C:EE
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:95:ad:05:bc:e0:ba:b7:69:c1:93:36:71:58:39:51:8e:1b:
80:44:b7:39:2f:37:72:50:3f:fc:04:49:15:34:e4:0e:9b:89:
f8:1f:b4:a7:e3:4a:2c:41:24:38:bb:22:ab:f5:8e:8a:df:a9:
4d:e3:44:d3:96:80:21:7b:4b:fd:70:da:d8:dd:71:c9:50:5b:
66:3e:d7:99:ef:e5:56:04:f4:e7:aa:da:a0:8e:25:0f:80:cf:
56:98:d4:a9:73:00:52:13:92:be:bd:96:54:47:3e:bf:da:79:
de:2e:39:3e:07:1e:76:0d:67:ca:82:cf:f9:80:d2:05:29:d6:
57:4f:96:a4:6f:02:42:20:48:df:58:ff:a0:a3:d0:4c:e9:a9:
59:08:8b:0a:c0:8c:5f:44:e0:c4:28:96:a1:83:69:87:34:4c:
fc:e3:f9:b5:95:18:6d:9d:5d:98:36:e0:ef:ba:ea:e2:e1:b4:
93:68:ef:fc:4f:38:41:6f:3d:1f:74:3f:06:23:fc:27:7a:a9:
13:d6:ce:63:76:43:65:cf:18:f3:da:e4:66:ff:94:59:b8:b6:
c3:f8:b6:e3:fc:be:8a:75:c4:d6:98:e2:7a:ee:45:0f:aa:36:
08:52:46:f0:98:c9:97:da:f3:a0:63:a3:64:aa:8a:43:68:f5:
78:8b:c5:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6ci8I6UtpMZgPvYWb3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk
ZmNlNWQwHhcNMjYwMzI5MDgwMDE4WhcNMjYwMzMwMDgwMDE4WjAzMTEwLwYDVQQD
EyhmOTcyNDQwNjVkZDViNjdlYjRkMTcyOGQ5ZjZlM2FiNTYzN2IwY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjFK+P0JSlcS+1qGNA2yS4eJXDjk
o6Nn3ci+ShMypUKgHxLwH4JyWl3uBkEBlAwJbDm3A8o09TZ+B1oOBgJU0e5TlKeX
7QJIIYAVwPPjev3haDAwoXWZ6xDDWg20syQLt93uKmK+VRrsKaqOoecYb0LgOH+t
TdcEcU+FdReC+8wxh64SBbmzVzW7wdliJRCaFEN2R2MfNR1JbVAXVjMn94Vcw0hV
XP8u73a+vNC9RpG/gCXyk+oIF+5sJCRzdXXRMUGSFetm1+cudzRECGUD/GmKNZ4K
C+YVhWDDOvz2qlI3T4Cx+3oPXz5SqGc2CmmOTcOWd8O6mbsb41tAOZNZrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlyRAZd1bZ+tNFyjZ9uOrVjewzuMB8GA1UdIwQY
MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It
N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3
LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJWtBbzg
urdpwZM2cVg5UY4bgES3OS83clA//ARJFTTkDpuJ+B+0p+NKLEEkOLsiq/WOit+p
TeNE05aAIXtL/XDa2N1xyVBbZj7Xme/lVgT056raoI4lD4DPVpjUqXMAUhOSvr2W
VEc+v9p53i45Pgcedg1nyoLP+YDSBSnWV0+WpG8CQiBI31j/oKPQTOmpWQiLCsCM
X0TgxCiWoYNphzRM/OP5tZUYbZ1dmDbg77rq4uG0k2jv/E84QW89H3Q/BiP8J3qp
E9bOY3ZDZc8Y89rkZv+UWbi2w/i24/y+inXE1pjieu5FD6o2CFJG8JjJl9rzoGOj
ZKqKQ2j1eIvFRw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:20 2026 by rpki-client