Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: TXDV3LodxsBPOh9BNVljwp20CZxG85oxFgTlfkPJ+ho=
Subject key identifier: 2E:97:DD:71:EE:38:8D:27:73:83:10:EB:E4:43:20:1B:01:39:EB:CF
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 019D37F747820D6F3AC423A16F335E34BCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 07FE
Signing time: Sun 29 Mar 2026 05:00:45 +0000
Manifest this update: Sun 29 Mar 2026 05:00:45 +0000
Manifest next update: Mon 30 Mar 2026 05:00:45 +0000
Files and hashes: 1: 2wk8UskQOSnxqw7Oo7NOQFVMdPk.roa (hash: wAiBLEjJ/qsnMqj9/B2glZy/BgEewLbuD+HKTaBdnNM=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: ABrwsutxsUTe+BrUT0DLYAAICLp1e4jMTW806Q6wcAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:47:82:0d:6f:3a:c4:23:a1:6f:33:5e:34:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Mar 29 05:00:45 2026 GMT
Not After : Mar 30 05:00:45 2026 GMT
Subject: CN=2e97dd71ee388d27738310ebe443201b0139ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:2a:89:b8:08:5c:67:af:25:ed:91:16:79:
27:84:27:36:dc:65:20:7c:76:65:0e:a2:74:30:9c:
6c:e7:a2:d5:53:51:aa:ff:ca:34:16:83:d0:ac:f0:
1f:53:ab:9a:2a:fc:60:79:c3:0d:5d:53:2f:f2:9f:
fd:9d:bb:c1:ae:42:e3:37:33:62:54:84:3e:14:69:
a0:64:0a:e6:25:10:8e:29:3c:35:6e:41:0f:55:65:
f6:89:de:72:3c:3b:ce:5f:72:c2:55:5e:62:fb:c8:
02:92:73:bc:43:8e:69:cf:cc:b6:d9:48:eb:e8:af:
14:39:db:96:65:55:00:d2:96:4b:60:25:95:69:3a:
22:51:91:86:12:16:c1:4c:18:e1:64:aa:96:4d:d6:
d0:ad:36:20:f7:1d:14:f6:10:ac:df:a6:2c:47:f2:
b0:b0:49:61:51:1d:23:cb:b1:e6:e0:61:c4:70:83:
a6:39:24:09:db:f1:30:7e:d3:59:b8:47:47:fb:55:
0d:fe:19:b7:eb:24:f1:bd:bd:c4:b6:98:b1:20:f3:
f0:87:2e:db:6a:09:72:d5:e5:fc:6a:08:8e:78:4c:
54:e8:4f:6f:a3:1d:3e:27:47:f7:00:e6:c8:b9:15:
b7:a2:17:77:07:d4:f2:f4:df:86:0e:ca:23:ed:c5:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:97:DD:71:EE:38:8D:27:73:83:10:EB:E4:43:20:1B:01:39:EB:CF
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:1c:d0:b0:e4:e6:04:ab:e6:12:5b:92:01:4f:f6:fb:10:
13:80:5e:cc:13:2e:95:1a:b6:53:84:15:34:b5:fe:69:8a:60:
76:54:e2:a8:39:e0:1f:35:f9:25:52:84:1b:a9:23:12:20:c9:
ce:59:ba:d3:96:ce:0e:0f:98:37:e3:5f:40:84:61:2e:8d:75:
1a:ff:fe:6a:03:97:cd:36:89:59:8f:91:d3:86:8d:17:67:c1:
80:c8:d2:ae:de:ce:12:d0:b6:63:14:69:7a:92:5f:1e:68:a6:
34:14:48:3c:bd:a7:70:91:c5:0f:a3:25:50:b2:ca:5f:97:28:
ba:1e:57:22:40:41:5e:df:ab:49:a8:95:76:35:d5:5b:2f:e8:
28:8f:37:e0:15:09:49:69:9d:f7:e8:c2:c4:44:a2:04:f6:d2:
a0:a2:08:84:ba:3b:79:11:85:f2:63:cf:22:2d:ab:91:c7:28:
ee:63:b9:30:60:39:de:6e:ed:f0:e6:80:c1:b3:e9:db:0e:2d:
a6:bc:65:e9:b0:e1:55:46:d9:4a:5a:18:b8:51:98:7d:a5:04:
7e:72:4f:78:c6:8e:e1:09:90:83:34:de:a7:5d:51:f2:03:9d:
71:b1:27:8c:99:53:b9:e0:f6:74:31:6f:bc:73:41:35:b3:d5:
85:b1:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:01 2026 by rpki-client