Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
File: wGWeHdFAebUh2SsfUsvE_TI-GNM.mft (raw, json)
Hash identifier: Iz15dvD4r8xrszYkaDOK0n97XlbOcb4nrFHO8fsjEHU=
Subject key identifier: 05:13:14:1E:CD:D9:0D:E8:37:CE:17:43:79:FD:66:B5:96:A4:DE:AF
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial: 019D386635CB0EA706CB3F438DBD5BB585D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
Manifest number: 05A1
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: CBU14gZu_1qsi75R7hrvSmuj54o.roa (hash: 9hAgFc1Ht8EZP3iYR8ynDcxgH4YhjqI6F0AQHVc/49w=)
2: wGWeHdFAebUh2SsfUsvE_TI-GNM.crl (hash: YNN5HrBU39mh+pu5YGVw3MHnq3QRPc0lPEsONlvUlRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:35:cb:0e:a7:06:cb:3f:43:8d:bd:5b:b5:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=0513141ecdd90de837ce174379fd66b596a4deaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:33:3d:0a:d4:d6:5c:23:9b:f9:55:d1:73:
8c:28:74:5a:94:9f:23:01:ec:90:f2:3d:08:4d:37:
34:86:03:51:3a:df:cc:c9:98:f0:13:be:79:b7:68:
b7:a1:7a:f3:0b:49:ea:9d:63:aa:98:a9:a2:61:ee:
8f:d8:d1:50:3c:00:3c:56:14:77:7a:3e:0b:b8:51:
10:76:c4:b7:a3:b6:96:2d:27:61:db:31:11:46:84:
e7:d2:58:88:0e:49:20:31:17:c7:e9:89:45:d1:a2:
1e:88:71:af:c2:33:61:60:de:8a:24:85:da:cd:ed:
53:cf:b8:65:93:32:4d:82:fc:f6:83:83:90:2d:4c:
5d:e6:ad:0b:09:97:38:6b:98:38:a0:36:65:78:d0:
ec:1d:d0:15:fa:22:94:65:95:70:4b:d5:fc:4c:b5:
5e:51:8f:1b:5f:44:d4:93:9d:25:19:d1:2d:27:f8:
0f:61:7c:15:5c:ed:b8:e7:2d:1f:c5:06:cb:6d:b1:
8e:df:55:ea:26:f5:87:ff:1c:54:31:d0:0d:5f:c5:
01:b8:95:9c:bd:8c:76:a6:90:65:b7:a2:9f:88:e7:
a7:92:1f:69:36:d4:50:8f:d9:8e:a7:c7:0d:59:a3:
d1:52:e9:3a:db:af:12:9f:6a:09:5a:48:71:ec:cf:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:14:1E:CD:D9:0D:E8:37:CE:17:43:79:FD:66:B5:96:A4:DE:AF
X509v3 Authority Key Identifier:
keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8f:8a:9d:22:8a:d6:d8:1c:c6:58:58:94:95:7d:a0:bd:86:
55:4e:52:73:3c:0f:77:a6:33:4e:5d:45:9a:44:ac:80:3e:b6:
8a:a0:91:4e:4e:89:1f:c2:45:93:06:8e:82:08:0f:6b:4f:51:
22:1a:ca:9f:d4:bb:2a:b6:b4:93:7e:b9:1c:2d:43:81:42:1f:
cf:1a:56:68:4c:89:a6:09:55:35:54:be:0a:02:c4:8f:7a:21:
ec:f4:e0:52:5c:00:ce:f3:ea:83:f6:09:f4:15:e0:ba:cb:b9:
e9:c7:e9:e5:39:28:4b:6a:0d:62:69:16:78:96:53:2d:3b:d3:
7d:85:82:ff:86:54:00:fd:40:ce:8a:56:a0:35:17:4d:6a:87:
c3:85:5d:b9:96:dc:d8:27:63:9e:52:7c:fc:26:f5:bb:d6:ab:
d9:55:c2:50:3b:aa:16:57:c7:85:c5:22:7a:47:f8:9b:32:d2:
2b:34:f0:bb:7f:65:76:25:57:79:ef:c0:41:72:02:05:91:ac:
3c:28:b7:58:58:ac:74:61:d3:c1:7e:33:3b:42:42:d3:f3:2e:
b9:8a:0a:0c:0d:f7:fd:62:35:26:e7:a2:6c:5c:af:eb:74:3e:
9a:90:8e:c9:9b:08:e7:db:05:63:69:38:06:44:a2:55:86:b4:
8d:dd:29:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:08 2026 by rpki-client