Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: cSh3KVI9NqyRlHk/lq6Ch6isnCOqcFuPE84awwYX0m4=
Subject key identifier: 2B:99:A2:19:83:D0:3C:B5:0E:EB:38:27:88:B6:08:C5:94:C2:7F:4B
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 019E31BBC0BCA5643270C03640986D9997F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 1919
Signing time: Sat 16 May 2026 17:00:48 +0000
Manifest this update: Sat 16 May 2026 17:00:48 +0000
Manifest next update: Sun 17 May 2026 17:00:48 +0000
Files and hashes: 1: W914McBBRKGYiuiAzeka3FO9x30.roa (hash: 5Lk0OVwYK6830fr40ALXftDbodH5B8wykwfgKJE/pDw=)
2: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: HppzRU4qZdn2GDjH8hN+DcV2kfoDYgVsOLSOqTXBlCI=)
3: wOPuSlGHZknBwng9AaQby1LZ-H0.roa (hash: Q+S9ZlbYg+bQ3XKYyWRImpf38zXJV8CXnrG6mOMblsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:c0:bc:a5:64:32:70:c0:36:40:98:6d:99:97:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: May 16 17:00:48 2026 GMT
Not After : May 17 17:00:48 2026 GMT
Subject: CN=2b99a21983d03cb50eeb382788b608c594c27f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:ac:07:0e:93:5b:e7:78:8d:1d:55:b8:93:
a9:9e:ef:f6:27:da:8c:e4:fd:cf:b8:57:4a:30:ed:
ad:9a:11:31:65:54:b0:52:98:66:db:d4:99:ba:5c:
df:c8:c9:61:d8:2c:a5:b6:09:31:ca:38:29:96:32:
e8:7c:bf:c2:68:7e:b0:c8:76:2f:6b:91:d6:5e:07:
b5:d5:fe:20:8c:76:6c:2e:08:34:9e:3c:19:ea:72:
50:bb:a7:a4:08:6d:4e:85:2f:50:77:98:79:c1:56:
0e:ed:f0:db:ef:50:fd:14:23:44:85:5e:8a:a8:6c:
dd:bf:26:79:6b:33:4f:ec:b1:ed:ca:57:d0:d4:d2:
28:93:88:aa:7a:eb:3f:8d:32:3a:61:02:97:3d:05:
45:0a:72:0a:3b:71:25:ad:4e:4a:10:e2:0b:25:f3:
9c:0a:bc:17:2d:44:e7:0f:49:6b:df:f1:ab:5a:18:
cf:cf:34:f3:c3:6f:87:10:d4:3f:a7:e8:3c:b1:ed:
67:3c:87:04:c2:10:2b:80:11:d9:b5:5c:51:7f:ed:
c4:87:10:84:77:27:90:48:4d:0e:db:f3:a3:77:99:
c0:25:f2:58:5f:d9:44:e4:03:4f:27:cb:68:76:04:
6b:05:aa:2e:84:91:aa:8c:e5:5f:0a:4c:4c:b4:83:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:A2:19:83:D0:3C:B5:0E:EB:38:27:88:B6:08:C5:94:C2:7F:4B
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:76:90:23:53:ae:18:56:6f:ad:6b:d0:31:7e:cb:ed:f9:3b:
e2:bd:a8:9a:22:24:71:91:e7:59:f5:f7:ac:24:89:63:be:88:
39:cf:55:0d:3c:a4:7e:bc:c7:e6:c9:ce:0f:e4:76:01:9d:95:
50:cc:1e:be:a7:77:b0:38:19:d1:52:64:67:63:fb:74:9a:60:
a8:a2:87:01:46:aa:36:4b:63:07:ea:26:8d:e7:87:7d:b5:17:
cc:7b:29:dd:b5:f4:f3:fa:3b:5e:2d:b7:01:9c:c7:00:81:d3:
89:63:30:66:36:04:0e:59:8e:54:c1:f5:a0:6b:76:26:8c:67:
71:63:76:9b:d5:87:f2:bb:13:fb:4b:f6:1a:da:25:8c:87:6c:
f8:53:e5:85:39:d7:18:20:6f:c2:c3:e9:31:db:d3:55:cd:29:
10:ec:ef:65:1d:43:e0:37:b8:f0:84:1c:68:68:f0:6d:13:17:
4e:c8:81:00:8c:ac:2d:72:9b:8d:51:4d:c2:fc:42:0d:ab:79:
ed:2c:d0:95:0c:99:d3:9c:ab:af:87:fa:74:d3:4e:ab:3a:0b:
00:9c:2c:10:e6:b6:c5:0c:30:7f:5a:54:4a:bf:37:60:3d:7d:
6e:70:fd:07:6c:7f:5d:5c:24:33:57:c4:9a:f8:f6:59:c7:5f:
f8:bf:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:35 2026 by rpki-client