Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
File: WzgltIs1me_6oLyBqN3bmPHYAsQ.mft (raw, json)
Hash identifier: xRmKi2hIZh4oQJG9pJ7bi1aGRf3omTww0Xm1RvZGA9k=
Subject key identifier: 96:74:D0:43:D2:61:CD:1A:52:F6:9D:BF:61:65:21:F4:16:FF:9E:8A
Authority key identifier: 5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
Certificate issuer: /CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Certificate serial: 019D3789CB7A746AD747DFC1C88DC9EE2ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 03:01:10 +0000
Manifest this update: Sun 29 Mar 2026 03:01:10 +0000
Manifest next update: Mon 30 Mar 2026 03:01:10 +0000
Files and hashes: 1: UbNuRFOVHUUJwDDzscbPhmRX1j8.roa (hash: UiS0VJNajfmsH4Zi8nv03I0mVu/mkamsiis7n5jG0Oo=)
2: WzgltIs1me_6oLyBqN3bmPHYAsQ.crl (hash: 9sb89syLq1DybYvd+PeKow7ErjZ+RfhgSwADWtlfusU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:cb:7a:74:6a:d7:47:df:c1:c8:8d:c9:ee:2a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Validity
Not Before: Mar 29 03:01:10 2026 GMT
Not After : Mar 30 03:01:10 2026 GMT
Subject: CN=9674d043d261cd1a52f69dbf616521f416ff9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:f5:0d:bc:24:a2:01:7f:ed:75:cc:05:dd:
75:20:19:51:86:ad:7c:85:74:05:7d:40:b6:05:a3:
2f:9e:ba:c0:24:b2:64:1b:f3:2c:dd:6e:ce:0f:75:
40:23:cb:31:e1:fd:59:f6:ec:81:8d:40:f7:3b:2b:
43:30:db:86:46:95:1a:34:89:7e:a1:4b:72:f8:ac:
2c:91:de:a4:b0:f3:bd:f7:df:04:cf:6c:34:b0:40:
89:8a:de:07:3c:9b:b5:1e:a4:7a:d3:af:31:c5:89:
05:57:8f:30:08:f8:78:22:2d:9d:3e:b3:87:1b:41:
38:58:f4:df:c4:04:af:c9:d4:97:5f:af:ca:ad:eb:
37:96:b1:f5:94:db:58:9b:fa:c9:58:e7:2a:7d:59:
50:43:d0:96:00:1c:5e:9c:73:9f:16:b8:e9:99:d6:
59:df:36:2e:9c:1d:45:f9:28:ec:b1:53:44:7a:bb:
4d:6b:59:36:6c:85:fd:22:ac:58:8f:78:73:76:68:
5e:8a:74:a8:1c:8a:51:dc:f5:db:47:d1:d9:ea:bb:
6c:26:58:06:2e:b4:19:0d:fa:cf:7a:eb:13:98:ec:
2c:19:77:4c:8c:dc:30:d8:c4:e1:d9:5e:d2:98:01:
f8:f4:d2:d4:46:fa:7c:f7:88:11:57:e2:64:0b:23:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:74:D0:43:D2:61:CD:1A:52:F6:9D:BF:61:65:21:F4:16:FF:9E:8A
X509v3 Authority Key Identifier:
keyid:5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2e:56:d9:81:96:54:26:b1:91:dd:59:0f:67:4f:d0:08:ea:
61:67:7b:51:1a:83:94:48:93:5e:4e:c1:ec:0a:e4:55:23:6b:
e3:ed:ad:38:c6:cc:11:7c:d4:c7:7b:75:7c:02:08:72:54:73:
99:b8:c7:28:52:f0:69:a5:63:07:7c:70:bd:ef:08:63:11:9c:
71:03:c6:44:78:c1:96:5b:70:ce:d4:b4:86:29:bc:58:f0:8f:
33:01:0a:c7:e6:f0:39:54:2e:db:41:07:d0:a7:d9:b6:2d:a4:
c7:c2:7d:c5:e4:87:2d:e6:48:b7:2a:c5:86:e3:52:f9:00:40:
ce:e6:8c:72:3f:52:36:21:57:35:25:90:95:ab:d8:e3:6c:d1:
a3:ba:03:27:d7:30:f5:9f:08:98:3b:8c:62:70:fd:36:cc:8b:
00:09:6f:e5:c5:51:82:ce:1d:0c:ea:08:19:97:40:4b:27:ad:
25:4e:2a:0e:d5:93:7b:dc:91:fd:70:93:e9:b6:82:7a:b5:14:
47:e1:df:1a:38:44:93:11:bb:e3:f2:b9:c9:3a:48:1f:07:82:
67:52:6e:c8:de:bd:88:58:29:0f:66:2f:0c:72:14:ea:24:8b:
e1:b7:da:d6:3a:f9:9b:d5:62:1b:dd:b0:d1:3c:df:0d:64:46:
3d:db:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:20 2026 by rpki-client