
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: Mdu0d1JF72g4KoBYG31l5V0lA6IEkf4cMEXLBK4ZMyY=
Subject key identifier: 7B:0B:56:1C:83:3D:FA:72:A1:E2:8F:34:E1:61:59:97:15:B0:E4:54
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 019F1B683F19B0A13585D371E38B3D0E8EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 1411
Signing time: Wed 01 Jul 2026 02:00:44 +0000
Manifest this update: Wed 01 Jul 2026 02:00:44 +0000
Manifest next update: Thu 02 Jul 2026 02:00:44 +0000
Files and hashes: 1: TjeA0h__0K75m-Lz_8rsQK-1bSA.roa (hash: L2lPrSJTEdmpDG2xtyfaKRlJ8hxi9q1HTQ4jAfyHzCs=)
2: i_5uaEC74F4fkQ9w0VTjAAVZ7ek.roa (hash: EmaFrrCeMCRKCrjyOiqjJjxN5S8IqzhYZkELnG6BX0g=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: TXlJ0CNYezqQOMPVZiLtbkvmGKsbZ84D8U4sVIq7yc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:68:3f:19:b0:a1:35:85:d3:71:e3:8b:3d:0e:8e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Jul 1 02:00:44 2026 GMT
Not After : Jul 2 02:00:44 2026 GMT
Subject: CN=7b0b561c833dfa72a1e28f34e161599715b0e454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:1e:66:9b:69:fc:46:e7:b9:4f:96:0d:85:
18:c1:d9:c1:28:04:eb:ed:3e:e7:df:21:df:91:80:
77:9a:53:fc:8c:49:de:7f:82:80:6e:7d:35:d1:2d:
4b:f9:fc:a7:b9:19:4e:d2:04:bf:e9:1d:35:83:29:
38:1b:1e:b6:52:fa:ff:dc:08:1d:56:d1:4a:ef:46:
d4:d2:cb:ef:12:ae:56:77:39:80:f2:6c:03:a9:b4:
06:52:df:ee:98:27:90:e1:62:39:8a:93:12:51:cd:
81:16:b7:8a:ba:81:ce:37:60:61:88:71:44:24:b0:
1a:2f:8c:59:14:b0:7e:4e:4d:3c:f5:b2:32:a9:71:
1c:b4:a1:35:f5:36:74:8e:3e:f8:f5:40:41:38:aa:
f4:14:3e:1d:a0:81:ec:f3:df:13:59:ac:61:e3:9f:
01:fb:64:ce:95:62:e4:74:fd:aa:17:6a:d9:a6:04:
a3:6b:e1:e0:1b:46:34:ca:04:90:24:b8:20:e4:ad:
f9:81:78:e0:4f:b0:91:0a:39:d6:ff:9a:1d:12:1e:
0d:4c:85:4b:54:61:73:ab:7e:2d:63:d2:0f:a0:e7:
1d:a0:5c:cf:64:f4:64:4d:e8:63:88:02:23:a9:ea:
6a:1f:4a:f3:cd:2b:36:5e:65:b5:ea:f8:10:c6:9a:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0B:56:1C:83:3D:FA:72:A1:E2:8F:34:E1:61:59:97:15:B0:E4:54
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:87:78:1c:79:54:c2:69:ed:cf:31:c9:23:a2:4f:f1:9a:be:
7d:37:08:67:25:6e:2d:5a:0e:61:f8:81:f2:00:3e:a7:29:41:
ee:cd:dd:de:6a:a8:50:d3:fe:04:47:bc:43:78:6c:9f:67:ee:
8c:58:77:f4:04:06:94:6c:80:bc:20:8e:f9:85:cd:fc:d5:7a:
5c:b6:14:4d:de:d8:37:f1:33:87:3a:17:2b:b1:78:41:bf:07:
96:d6:34:83:58:bb:c2:9e:1f:4a:12:ad:5f:a5:e8:6e:64:b4:
75:08:26:85:c5:84:1a:2b:4c:43:39:a6:6d:be:99:e1:06:9c:
85:ba:e9:3c:d4:22:f7:2d:5d:29:3f:04:33:4e:4c:de:10:8a:
0a:56:a9:5a:9b:fa:e6:e1:76:9d:0a:81:9a:b2:7e:6d:30:5c:
c5:eb:94:91:94:ef:f1:47:1b:de:00:a6:61:7d:24:4b:30:81:
fa:8d:0e:71:45:f8:70:b8:a1:09:0f:56:0d:ec:a3:1f:37:2f:
3a:0c:14:c3:ce:51:97:e8:cb:c4:84:87:0c:3f:d9:fc:3a:28:
9e:c2:86:f2:36:f6:f2:6b:a1:1c:4b:55:3e:5b:3b:a6:03:e4:
14:58:5b:f0:a8:7a:7c:6c:6a:a7:6e:5a:ce:eb:dd:f3:65:82:
79:55:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:37:59 2026 by rpki-client