Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier: C8wB26IcO7kRQRlEotQM5QjmzvhmSJy8sWebxsabmIs=
Subject key identifier: 7E:22:18:C9:70:77:A4:E7:5C:02:00:3E:4D:33:9D:21:50:63:8E:5A
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 019DCED054D10C0EB736B2BFD16E220C537F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number: 1500
Signing time: Mon 27 Apr 2026 12:00:52 +0000
Manifest this update: Mon 27 Apr 2026 12:00:52 +0000
Manifest next update: Tue 28 Apr 2026 12:00:52 +0000
Files and hashes: 1: 7dNSDdB7_w97DhUoDrNZCXrX7E0.roa (hash: RIHs9Q0Oo6t9P10Krf7jjUML9y+2LWdE7MwzxZ7TTvM=)
2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: uu/FeFC9BYlYXHD5fvNX9rW/LjzxBy7UwcTFwzSIKmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:54:d1:0c:0e:b7:36:b2:bf:d1:6e:22:0c:53:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Apr 27 12:00:52 2026 GMT
Not After : Apr 28 12:00:52 2026 GMT
Subject: CN=7e2218c97077a4e75c02003e4d339d2150638e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:f2:5a:bf:ff:58:7c:c7:4e:81:f1:22:3d:
25:05:9a:ef:9e:67:f1:4e:8f:b1:ce:3a:17:41:d2:
5d:2e:dd:51:e4:7d:e8:93:b0:67:74:45:ff:8d:52:
c4:a8:4c:db:58:ff:bf:4e:ea:5a:3d:ee:88:81:2f:
50:a2:f1:75:02:56:cf:9a:53:5d:23:b9:27:6a:8c:
90:4d:f2:a0:80:cc:bc:34:32:16:e7:2c:ed:b6:58:
42:0b:a2:f9:2f:ff:75:c7:74:3a:c5:8b:8d:ee:d4:
8f:a5:28:19:9a:e0:1a:8f:99:f6:b2:1b:68:d3:31:
04:6a:fe:ce:3a:27:73:59:88:ab:ca:b0:bc:44:92:
22:24:01:12:1d:be:d7:b2:3d:1f:c4:34:15:48:f0:
fd:be:83:d8:10:e5:23:60:80:fe:1b:f8:d1:d1:16:
36:89:7b:a7:1e:36:7e:4e:3a:52:bd:41:96:37:c5:
83:7e:b7:7d:82:7f:85:1a:85:e6:32:42:4d:a0:0d:
9f:76:98:cd:bb:23:f3:04:d5:45:90:bb:fd:12:42:
6c:0a:e8:d1:fa:23:a8:3a:a6:4f:a9:f9:39:af:8d:
f1:56:19:f7:18:1b:7f:aa:08:da:89:13:1f:48:15:
e8:20:b8:1c:30:25:43:c9:db:1f:21:3a:30:42:d3:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:22:18:C9:70:77:A4:E7:5C:02:00:3E:4D:33:9D:21:50:63:8E:5A
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:73:31:45:71:1c:d0:a6:ae:a3:54:07:b8:08:dd:31:fb:3e:
c5:88:ef:19:2d:57:5d:d4:d6:e5:d3:13:7d:37:68:09:16:e6:
95:6d:4c:0e:f2:e8:57:99:8e:4d:c4:9c:ed:71:07:d7:d4:93:
e2:8b:f3:59:ef:77:a6:27:20:17:0e:23:eb:ea:aa:c4:a1:70:
e6:50:7a:0c:cb:18:58:b1:67:cc:cb:f0:90:86:82:45:c1:51:
de:ff:a9:93:06:3e:cc:69:b0:7d:b7:cf:79:45:15:b3:e6:f8:
31:2d:b3:e0:ef:88:b6:9f:98:6a:1a:40:b6:21:19:29:6e:52:
11:c9:35:82:4c:e2:ca:73:ec:0e:76:70:70:7c:a8:77:e1:3c:
67:db:83:b4:30:a7:76:20:e6:f0:04:28:83:85:1f:40:25:55:
6f:31:e1:7a:bd:90:13:89:f1:8d:ce:74:8b:94:fe:ca:77:09:
20:5e:70:3b:59:5c:70:55:39:c1:b5:79:45:1c:82:14:3c:8b:
8a:24:5e:89:2f:19:84:06:53:e7:0c:e3:de:ab:0d:08:5c:8b:
e4:29:db:32:1f:22:e3:65:ef:83:7c:6f:c8:41:07:bb:af:15:
26:a5:7a:23:28:b6:52:ec:f0:4e:8d:20:b5:7a:cc:cb:a1:b5:
86:65:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:13 2026 by rpki-client