Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier: M7XkK3VayJ09vrYpzvA6A251c4kzJccPwD6bUjNeL9A=
Subject key identifier: 7D:A1:F8:28:0A:1B:9B:2E:6C:CF:2C:3F:E2:60:42:08:C6:F0:D3:FD
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial: 019D3865D41E1DA20F2F011E26D879F712C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number: 04A5
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: beQGH6eHgRgdt5zWa2EhKn5FmNDhFwZ5SknWzqZbJOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d4:1e:1d:a2:0f:2f:01:1e:26:d8:79:f7:12:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=7da1f8280a1b9b2e6ccf2c3fe2604208c6f0d3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:93:a1:27:43:2e:57:01:9c:88:31:11:34:
8d:e4:b8:b3:c6:31:b6:67:ed:7f:ab:32:bf:19:5e:
a8:2c:63:b6:65:c1:43:f1:37:11:44:8c:a1:57:6e:
f3:44:f3:b5:4a:32:a2:1b:a6:97:f5:44:ce:00:97:
5d:87:c0:4a:5e:48:b0:23:5a:9d:a8:93:7c:04:cf:
a0:09:e5:b9:5c:62:23:e2:42:cf:8f:92:9e:11:20:
4e:e2:a3:f0:4f:ca:b8:27:4d:4b:49:5f:37:3c:a9:
bc:e0:b9:25:ac:c0:03:b2:a7:34:17:d4:69:dd:99:
fd:e9:a3:a7:db:6c:bc:9e:08:43:52:a6:85:72:5f:
d8:a2:ec:58:ef:04:a0:30:c3:40:ac:7d:15:ba:bd:
51:6a:65:24:ff:b1:cc:e5:a9:02:0a:41:8a:8d:bc:
36:9a:25:2c:fd:ab:4b:8e:c4:2e:79:a6:6a:13:06:
1a:91:9b:c6:58:d3:bb:dd:75:05:98:32:0e:f0:cc:
cc:9d:70:96:d1:89:c8:bb:d7:d4:ba:f2:c9:e2:ee:
95:0a:8f:8c:53:5d:92:0e:2f:07:7c:4a:a9:f2:17:
3c:6c:3a:a9:73:9b:59:01:e6:54:e0:3f:5c:59:6b:
cb:97:95:e9:d6:4a:d0:5e:31:09:e2:6d:be:7a:a4:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:F8:28:0A:1B:9B:2E:6C:CF:2C:3F:E2:60:42:08:C6:F0:D3:FD
X509v3 Authority Key Identifier:
keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:13:32:79:ff:bc:e5:dd:81:dd:f5:9e:46:2e:47:1d:25:e4:
c3:3b:56:05:fa:c9:a9:74:02:bd:d4:fc:15:60:2e:ca:66:d9:
8e:d1:a8:de:e9:62:79:3f:fc:d0:be:2f:72:20:be:0c:02:10:
8f:a4:c2:53:24:9b:f9:02:a6:a9:ee:6d:49:bd:df:5d:04:bb:
27:cf:eb:8e:bd:b8:61:40:1a:00:af:dc:b1:d2:13:a2:15:0f:
32:fe:e4:78:4a:c2:59:40:98:f5:72:fe:e5:76:81:20:b2:29:
cd:1b:65:74:ff:9b:af:29:5a:d2:d3:22:16:a3:19:81:e7:5b:
d0:04:6a:25:8e:85:fb:43:14:94:9a:9e:56:ff:95:4d:35:5a:
70:a9:82:a5:91:e7:ee:96:c0:84:79:57:67:f5:36:45:9c:c1:
3d:e2:9b:4f:78:97:dd:38:13:47:60:ec:77:8b:b3:41:5e:58:
73:5a:85:8d:54:25:ec:97:e1:2d:95:c1:e5:29:49:b1:99:fb:
25:0c:ed:7a:bd:25:03:00:56:72:96:dd:20:b7:6c:0d:4f:f2:
c3:ce:db:a6:dd:dd:27:08:30:89:60:cf:86:dc:8c:f2:6d:db:
26:b6:94:5e:d7:ea:34:ae:1a:29:34:1e:5d:7b:e7:0e:18:01:
a8:b4:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:25 2026 by rpki-client