Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
File: WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft (raw, json)
Hash identifier: Jx9ZI5UZwtMA7r5UPQuQ8/GWjB2o0A/t3pN6iN7txZ4=
Subject key identifier: A4:DD:8E:35:D5:37:1E:2E:22:29:62:64:4C:C7:F3:D9:4F:1E:35:4F
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 019D0E56D0E96148C6B876AE141BB1240095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
Manifest number: 15C7
Signing time: Sat 21 Mar 2026 03:01:03 +0000
Manifest this update: Sat 21 Mar 2026 03:01:03 +0000
Manifest next update: Sun 22 Mar 2026 03:01:03 +0000
Files and hashes: 1: WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl (hash: GbwXsk+6fdeRzOO/y6Ptx/zRZZBEfPRk1fxXVwVx74I=)
2: gsMc5yTQ5yB7hNQuR1OBuIkGkVE.roa (hash: fl4OaMl7eU6Alv7KmsWSIeUrTO2NMP6tD6HDIBxbcMQ=)
3: n6aTPqlGJJGfkw2ndfd9kElHIUE.roa (hash: eTwfqmOJCDHZnlmX4vz/z/iYHX8NIjRLHjRN1ZBjk40=)
4: sB0mmb0YWSbMF3E1k6_T_zsN2sM.roa (hash: YB4mz8FheQ84EqAJDNB1pXt2M2JuLI6viCvso+bTBuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:56:d0:e9:61:48:c6:b8:76:ae:14:1b:b1:24:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Mar 21 03:01:03 2026 GMT
Not After : Mar 22 03:01:03 2026 GMT
Subject: CN=a4dd8e35d5371e2e222962644cc7f3d94f1e354f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:45:82:b4:be:f6:02:90:65:58:62:59:20:
bd:d8:af:46:c7:59:f1:db:ce:d9:43:96:06:ca:d8:
27:59:56:45:8b:1d:f5:86:8a:6f:10:ba:2c:84:33:
02:bc:d5:e7:04:8c:f1:41:4f:2a:1c:54:0d:39:62:
c3:65:fc:4d:21:a6:e1:cd:d3:6c:22:6a:da:94:14:
97:20:89:e6:87:8d:d0:fe:8e:db:1d:cb:8f:8c:29:
32:55:d0:42:2f:73:9d:1f:c5:be:73:49:de:ca:3e:
6b:3f:76:d4:95:94:af:7e:8d:f1:8f:ad:d4:54:0d:
83:10:cc:b6:5b:86:07:9c:07:49:a6:9e:b2:b5:01:
28:75:e1:3c:54:0c:97:0c:e8:c7:d3:48:c2:ff:a8:
ed:e2:bd:22:f7:63:a1:06:26:7d:95:a2:1a:42:de:
a8:5f:68:e4:ac:6e:b8:40:ff:43:9f:01:9b:84:53:
a7:cd:32:ba:c5:55:da:b0:4e:04:7d:9c:db:11:11:
f5:b3:63:4b:73:84:08:f5:3a:79:09:46:f4:79:5d:
65:b0:b2:50:c5:a7:e6:91:ce:b6:99:79:26:1d:d2:
b2:32:fb:f4:88:4f:1e:9d:5d:0d:ca:f3:e6:77:22:
b4:e0:da:8f:98:9a:2f:3f:78:bc:90:1d:aa:a1:94:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:8E:35:D5:37:1E:2E:22:29:62:64:4C:C7:F3:D9:4F:1E:35:4F
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:aa:45:8a:40:e7:31:78:6b:38:c2:24:1c:96:8e:4a:9b:22:
1e:ac:ff:6c:77:6d:3f:29:19:7e:4e:fb:3c:89:ce:cc:7a:f1:
2b:4c:3a:eb:aa:af:95:b3:a3:dc:57:bf:7f:6a:fb:89:5a:14:
56:a7:ab:7a:52:26:64:38:c5:32:fe:0a:12:3b:3a:88:71:b7:
0d:10:a7:1e:07:82:39:79:2e:e9:02:12:29:17:47:f1:26:fe:
29:10:d5:a8:1d:bc:97:75:4f:1d:a8:87:f1:60:62:a8:e2:a1:
74:5b:df:01:7f:3c:10:5d:b7:a9:74:53:8e:ea:8c:00:33:d0:
3f:bb:6b:aa:c2:76:e4:00:a2:29:78:8a:c9:26:60:4a:f6:54:
fb:eb:8c:df:77:7b:0d:34:7b:37:09:1c:39:fa:8d:94:99:f2:
71:af:c3:ad:7f:ce:42:49:9e:be:e8:18:46:51:76:f1:ef:f8:
1f:5e:e5:0c:59:a4:99:5c:e0:96:93:c0:11:14:8d:54:76:eb:
0a:fb:a5:11:57:3a:05:50:fc:78:de:ce:34:24:98:e9:fc:f4:
fd:e9:86:50:ed:10:66:75:6e:60:28:be:45:db:b5:ae:f3:e1:
da:28:af:c6:8b:e0:b1:d1:64:ce:ea:82:4e:5f:3f:d7:0c:0a:
11:79:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 13:36:51 2026 by rpki-client