Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: /rIQeSF+tod5cboTkZe7vFTmbrBzTzIBvmZr5mMPgIY=
Subject key identifier: 40:12:4D:FA:59:37:80:DC:81:28:A9:75:C9:7E:53:59:BA:E3:BE:69
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 019FA74F8864ABBD7FB0EEE17D18D89FCE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 0487
Signing time: Tue 28 Jul 2026 06:00:34 +0000
Manifest this update: Tue 28 Jul 2026 06:00:34 +0000
Manifest next update: Wed 29 Jul 2026 06:00:34 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: 0g7/owYz/jdK0YKu8Pr1aol/dfhuovOAnZY7Y4foark=)
2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:88:64:ab:bd:7f:b0:ee:e1:7d:18:d8:9f:ce:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Jul 28 06:00:34 2026 GMT
Not After : Jul 29 06:00:34 2026 GMT
Subject: CN=40124dfa593780dc8128a975c97e5359bae3be69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:51:21:c7:c3:04:98:62:34:0d:ad:eb:3c:
f5:0d:93:7b:a7:c9:78:71:78:10:86:5b:12:20:f9:
f9:32:c6:96:ed:c0:b6:87:b6:7d:55:5d:b4:fb:f9:
52:bb:f8:6a:95:8e:c6:28:3f:76:91:46:cf:39:6f:
51:a9:b7:c4:36:8d:85:b5:51:7a:85:f0:1a:3b:c3:
ad:36:7f:29:96:d6:16:06:7c:3a:ee:3c:33:f3:c3:
d6:e0:96:c5:77:b4:66:08:73:df:15:8f:c0:a5:79:
a3:c8:3e:67:e8:06:ba:bf:f0:61:3f:f1:2e:a9:43:
88:64:0c:e4:50:16:20:20:fe:35:0d:89:72:32:13:
bf:ae:df:44:d6:5f:b2:2b:a6:54:0b:03:91:3f:cb:
3b:6c:63:4e:ff:f4:c8:33:f2:da:16:dc:0a:6b:c1:
c6:87:7a:e2:24:9a:52:8f:0f:0e:f4:48:fd:13:ab:
fe:ad:b8:82:d6:10:f3:04:58:25:51:f8:f2:76:42:
de:6b:66:dd:27:5d:38:e5:99:61:9b:9e:4e:95:52:
3d:fa:9e:04:11:4d:e7:18:17:25:ed:1e:81:e4:69:
52:74:f6:76:0c:c1:4d:87:70:db:73:f8:ca:d3:ca:
b2:4e:8c:97:73:3a:eb:a7:9e:34:7a:97:1a:bb:10:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:4D:FA:59:37:80:DC:81:28:A9:75:C9:7E:53:59:BA:E3:BE:69
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:46:32:25:44:2a:56:81:da:a0:58:df:27:48:c3:49:8b:
bc:f7:f6:bd:51:ef:d0:1c:12:f5:ad:0b:3e:a6:ae:a2:b2:a7:
0a:18:fd:09:cc:00:ca:02:30:e3:53:c1:00:60:97:b2:90:ba:
31:5f:be:68:d4:e6:78:1c:19:bb:a2:d0:87:4d:24:f0:72:fe:
d9:e0:5e:53:5c:e7:79:3b:60:f6:34:bd:84:49:8e:45:76:70:
ce:4c:0b:45:45:5c:14:3f:fb:73:b7:ac:f1:fb:45:a0:4a:de:
2b:5b:a1:e0:b5:0c:06:5e:a1:95:d7:cd:a3:dc:8a:2a:9e:38:
7e:e9:06:90:ae:75:e7:b3:87:af:f1:1b:35:6c:c8:05:37:ed:
ec:3a:4b:76:2b:e2:65:f1:62:83:8d:34:9f:29:83:73:fe:de:
6b:50:67:60:95:49:2d:8b:2b:55:1d:27:e8:58:77:64:90:20:
14:8b:a7:58:43:e0:83:09:03:69:78:bb:57:3c:27:22:df:81:
bb:fc:62:18:d6:dd:28:b2:a7:7b:a6:9e:b9:98:13:73:99:44:
16:34:59:94:37:76:1f:73:45:71:1a:9d:08:22:d7:c1:39:4c:
47:7e:d7:28:bf:12:fa:e9:a5:81:b1:07:50:c1:c1:8a:ec:ca:
38:39:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:37:46 2026 by rpki-client