
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier: PJx48a7yTA+qucua3Gmg+0ypxB41OQB/6N2UwmBTs34=
Subject key identifier: 06:E1:8A:70:CD:98:65:F8:20:AB:BE:76:B4:AE:20:43:AD:B8:2B:09
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 019DCED0A906D56E64415B19A5483D1710C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number: 0BAE
Signing time: Mon 27 Apr 2026 12:01:14 +0000
Manifest this update: Mon 27 Apr 2026 12:01:14 +0000
Manifest next update: Tue 28 Apr 2026 12:01:14 +0000
Files and hashes: 1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: QZvu2DywSQmwJychcj0vD2jYc77HhlUbffrYuglnDJM=)
2: rzSZWBGG1mILDZWq_ejHiNaagug.roa (hash: E4TzWT1DdcBtP+Tvjygnl6VcTwVaPGsD2eWFKuV7qQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:a9:06:d5:6e:64:41:5b:19:a5:48:3d:17:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Apr 27 12:01:14 2026 GMT
Not After : Apr 28 12:01:14 2026 GMT
Subject: CN=06e18a70cd9865f820abbe76b4ae2043adb82b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:22:8c:cd:cf:15:1d:53:b7:ad:31:28:ed:
6b:45:0a:b8:3c:8c:40:17:59:a7:4a:91:f0:57:69:
92:dd:2f:d2:5f:fd:a0:b6:2a:52:4b:e0:98:db:a8:
ed:2b:73:3a:fc:cf:f8:98:65:d9:57:91:c6:86:bf:
14:45:db:f6:11:ab:49:10:17:77:d6:cf:b0:0d:b8:
90:c2:b2:b0:6a:79:f3:e0:cd:d1:a9:ea:48:2b:de:
ab:69:f4:c9:cc:27:bf:dc:23:ab:b4:06:6b:83:49:
93:01:3c:59:f5:8e:35:26:04:a0:0c:62:7d:49:4c:
a9:78:cd:3f:f8:5b:d1:b4:65:9f:d9:46:77:97:49:
8b:ca:17:46:2c:08:a7:65:2f:26:2f:21:a7:3a:b5:
eb:2a:7c:fc:87:02:84:e9:2a:95:2b:3d:ef:1a:9e:
2b:36:2c:91:85:61:b2:c0:c6:b2:66:34:57:74:52:
a4:b9:5e:ec:2c:0f:26:f8:6b:8a:65:78:01:44:65:
70:f2:9e:34:01:da:f0:ee:66:ac:41:37:de:4f:0c:
9a:de:99:73:27:9a:85:06:2c:82:b6:a0:72:70:87:
fe:1c:f6:89:7c:43:0e:c5:a4:bb:59:1d:0d:85:df:
a9:09:fd:ec:fb:c1:f8:b4:d1:fb:0f:d4:92:55:19:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E1:8A:70:CD:98:65:F8:20:AB:BE:76:B4:AE:20:43:AD:B8:2B:09
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5e:0b:fa:8f:56:0a:6e:83:95:f5:7a:d8:8f:e4:17:3c:dc:
d9:ed:8e:e1:bb:fc:ca:6c:60:c8:78:5d:af:c5:61:d8:4f:7f:
70:b5:31:fb:f8:f8:df:2d:cd:7a:aa:45:37:57:5b:f3:54:bf:
dc:12:3a:be:47:da:26:eb:20:fc:94:e6:31:a0:b4:81:60:07:
94:2a:70:f1:7e:f1:a0:e1:54:7f:32:83:db:07:9a:f1:e3:a0:
05:dd:a8:f8:44:e6:28:fd:90:61:71:d1:2c:5d:e3:2c:dd:49:
bf:d6:df:93:a5:f6:d0:5a:cf:1f:4c:70:51:b0:ad:9f:75:aa:
c9:e9:ce:ca:6b:77:e6:b5:97:cd:9a:81:40:f9:29:03:7c:63:
af:c7:98:84:83:bc:31:da:e5:8f:db:dd:53:68:ff:4e:9c:98:
19:0e:b6:27:6d:65:57:03:17:17:71:d9:c4:02:ea:fd:44:6c:
62:2f:0a:5a:b4:94:7c:a0:57:97:51:64:d1:70:21:0e:15:98:
f2:99:fd:d2:b1:02:23:d5:ea:e2:41:8f:d6:8c:29:37:34:57:
6e:cd:c6:76:a5:42:0f:2c:26:c9:77:83:0d:5b:38:b5:84:cc:
b7:fe:c5:cf:01:06:2a:98:88:32:5d:f1:c6:c9:93:05:07:a3:
c4:ec:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:56 2026 by rpki-client