Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier: yNXt2O/GNeDAX2AV67ymhS9BTbKs6KcRc2J/TwUdJts=
Subject key identifier: 28:FA:57:33:1F:41:F8:4F:E7:E9:E6:05:81:1A:29:6F:55:1D:DA:4E
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 01A17BBAFEC4E1A1CC9978BA7CAFA894A9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number: 0D97
Signing time: Tue 27 Oct 2026 05:00:14 +0000
Manifest this update: Tue 27 Oct 2026 05:00:14 +0000
Manifest next update: Wed 28 Oct 2026 05:00:14 +0000
Files and hashes: 1: RM9gch6fF6dTUga4Bj7c-ZQoUtM.roa (hash: aQYj/VaPaTrTWbQj2KnQY8a0Wb0mkyzzVVekX0QBd2M=)
2: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: imcPi3NQFnMCovSqmjCJUN3NHVq8aVyFZArInR1Dqlo=)
3: uveeP90Ng8fiZXlzX-6ojy0jIqY.roa (hash: PfDd8d708uz6aVMC87b2047YaQ4t2uLKA5Y0H9BA2Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:ba:fe:c4:e1:a1:cc:99:78:ba:7c:af:a8:94:a9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Oct 27 05:00:14 2026 GMT
Not After : Oct 28 05:00:14 2026 GMT
Subject: CN=28fa57331f41f84fe7e9e605811a296f551dda4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:05:ab:2c:06:7e:ae:90:6c:9b:97:70:2e:
5d:67:4e:1c:48:04:c1:ad:46:cc:e4:b5:51:f2:c9:
5d:cf:e4:9b:ba:05:6d:88:f0:6b:4f:70:3d:7d:34:
18:2e:6b:16:57:3b:6c:e5:b0:e3:37:21:55:cb:9e:
6c:a8:54:88:87:08:19:4e:ab:3e:10:6e:a3:e1:96:
76:ff:cd:fb:c0:b4:c2:2c:f2:52:f4:38:df:ba:40:
14:98:b8:8a:b5:75:c7:b7:5d:d8:42:61:57:7b:8b:
87:47:26:d4:27:f5:b0:f4:c9:8a:74:83:34:51:28:
4d:39:53:8b:82:5c:5b:d7:8b:b2:6c:83:78:26:fe:
12:e3:5e:88:88:a8:4b:0c:c5:8a:b5:0c:c8:9c:2a:
87:69:af:9f:52:a2:b5:b7:22:6e:af:dc:46:d3:4f:
f9:96:b5:45:65:58:2e:73:16:a6:3a:1f:73:9e:81:
03:9d:ac:94:b5:44:14:a9:76:4f:06:31:f4:31:ff:
00:90:67:60:32:5d:18:03:1b:d3:5d:ec:2e:e5:cb:
da:d1:ea:ac:ca:05:00:bb:9d:19:e9:76:9d:d2:e0:
86:d6:b3:d7:70:44:05:06:24:19:f3:d4:e1:29:fc:
a6:fe:ce:9e:97:4f:2c:d1:e5:71:9b:04:9f:34:a3:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FA:57:33:1F:41:F8:4F:E7:E9:E6:05:81:1A:29:6F:55:1D:DA:4E
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8b:72:a0:bd:e4:26:7e:a3:b4:59:ed:ec:f4:b9:00:6d:97:
20:3d:1b:a6:9d:f1:74:05:b6:71:23:bd:54:0f:b5:6c:38:5d:
6e:e4:de:7c:8f:2b:1f:92:b8:2c:33:c7:45:9f:00:f1:a2:7f:
5f:83:e6:80:93:7f:5d:15:86:94:83:82:9b:b0:d9:f5:45:1f:
2c:38:8d:48:f0:42:ad:e6:e4:88:d5:1b:17:69:1d:1f:b0:7e:
5f:d2:2a:9b:c1:8c:9e:bb:51:00:64:c0:77:9c:2a:49:29:1c:
fb:a9:6a:72:72:fd:19:b4:b6:ae:06:40:35:61:60:ca:db:bf:
08:af:e0:00:01:71:0a:9b:45:98:27:f4:af:bb:68:f1:7f:1b:
70:ba:06:a5:58:2e:70:bd:b5:a4:73:64:96:24:0b:82:6a:d1:
99:48:8b:27:4e:14:5f:64:18:79:70:61:b6:3d:4d:f1:7d:71:
29:a8:5f:fd:bb:f6:88:b8:21:d2:eb:e3:56:d3:f1:10:b7:c6:
a1:76:e9:70:b0:95:ee:21:44:39:b0:df:2f:cd:40:88:18:51:
6e:93:ec:8d:98:0a:3d:3d:8a:54:3b:f5:36:ca:e3:cd:e4:9c:
51:8f:3a:cc:97:5e:40:89:4c:56:18:9f:20:f4:b6:10:e3:78:
ff:62:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:20:09 2026 by rpki-client