Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier: bT0X+ezFHywTainw0sCJX+DRZOk/wltiM1WfQYRMcOY=
Subject key identifier: 58:7D:10:C9:7C:5B:FC:D1:65:2F:96:A9:86:1D:70:8F:64:81:51:00
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 019DDD30FE84C6A9E4384290A74859384B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number: 0B5D
Signing time: Thu 30 Apr 2026 07:01:08 +0000
Manifest this update: Thu 30 Apr 2026 07:01:08 +0000
Manifest next update: Fri 01 May 2026 07:01:08 +0000
Files and hashes: 1: eQRk02-rqRsoVMzAY3_UPFAuAlo.roa (hash: 7f1oukrkE94Uqo0kLbpw4xRpMp5ggZCo2gEHz8zdJ4w=)
2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: 4rm12uF2HNFGEV2bo4ywI98dLAXX+CTYYuHeOiDW2Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:30:fe:84:c6:a9:e4:38:42:90:a7:48:59:38:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Apr 30 07:01:08 2026 GMT
Not After : May 1 07:01:08 2026 GMT
Subject: CN=587d10c97c5bfcd1652f96a9861d708f64815100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:e7:62:0c:d0:08:4e:94:a6:d7:0c:08:e1:
5e:22:48:68:53:00:9c:c5:2d:74:a3:5c:66:ba:2b:
05:b7:d9:5f:38:13:1c:6b:d0:ed:ae:0f:8b:ae:b8:
be:11:78:45:7d:f0:3f:98:95:7a:9e:56:56:3e:da:
f2:a2:22:68:63:f5:39:aa:0b:ec:c8:10:f1:94:d5:
2f:1d:60:06:25:86:2a:e3:15:39:b0:a9:2b:6a:42:
16:17:45:19:07:18:3b:44:3c:f3:db:2f:74:fd:9d:
6a:d8:f8:3e:84:13:0b:a4:1d:ed:d9:2f:2c:19:49:
13:a7:23:b8:e8:ee:91:93:c8:55:09:75:94:4e:11:
56:7c:69:f2:ca:dd:86:aa:fa:0b:39:d0:d7:dc:e1:
c9:9a:00:ff:e5:da:98:f5:ad:fb:3d:d4:a8:4b:21:
33:89:37:6a:68:68:c7:41:84:ec:ee:9c:78:73:4a:
02:65:b7:3d:51:04:75:64:b9:4b:59:9b:4e:e7:f5:
32:09:cb:b2:54:a4:a3:5f:f5:47:9e:d4:69:92:36:
8b:4c:c0:c1:51:3d:d2:70:35:e9:d9:e9:45:9e:05:
e2:e6:a9:e4:0c:0c:84:d0:65:64:e7:cb:2b:d5:97:
57:7f:b6:fe:c3:d3:6a:0b:ae:57:70:f5:73:33:d8:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:10:C9:7C:5B:FC:D1:65:2F:96:A9:86:1D:70:8F:64:81:51:00
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:26:6d:35:6e:6c:1d:4d:c7:b1:4a:67:c2:69:6a:86:26:10:
33:d7:5c:77:0c:76:0a:0e:84:6b:9d:fa:de:35:16:ba:7c:31:
6a:ae:46:57:a6:3b:b0:54:07:c9:68:f2:75:d0:d5:fe:96:4d:
40:a5:66:fe:d9:53:d4:b5:cb:af:9e:3e:a9:b7:82:42:3f:62:
e8:1a:8c:1c:68:4b:5a:c1:1f:63:14:bc:58:50:58:c2:35:71:
06:2a:2d:65:22:0e:4a:a5:3f:ae:86:7c:51:eb:f0:18:9d:49:
e5:15:e5:ac:83:4f:15:c7:f9:5c:80:3d:5d:5e:60:4b:df:78:
1a:86:02:ac:60:db:6f:da:58:96:ea:3f:3e:ba:bd:dd:10:b5:
40:36:96:a4:77:55:b1:cf:f9:95:43:c7:3b:35:64:b1:c7:19:
25:ca:26:22:6f:c8:fb:9b:41:5c:38:fb:41:28:1e:d7:82:7a:
b7:50:e2:ae:8e:50:df:8b:7e:c7:80:a1:8a:9c:88:47:ee:aa:
99:06:6d:15:6c:48:5a:c2:de:0f:3d:a0:8d:97:ef:90:ee:13:
77:f0:81:ed:70:54:fc:be:f9:de:dd:db:28:97:3e:fc:94:36:
b9:be:8f:4e:d0:66:95:3f:af:ad:ed:91:fe:86:d0:39:11:d3:
a4:53:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:45:56 2026 by rpki-client