
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier: /VC506n6xjEhfRxxoxqlAHSLOcycl1SJLHHrAl89IDw=
Subject key identifier: C7:86:9D:B6:43:F6:C2:E2:F6:AA:72:07:20:3E:64:A1:95:BA:54:BC
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 019D39E53CA0A6644CECED5EAC9C00E89694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number: 12FE
Signing time: Sun 29 Mar 2026 14:00:17 +0000
Manifest this update: Sun 29 Mar 2026 14:00:17 +0000
Manifest next update: Mon 30 Mar 2026 14:00:17 +0000
Files and hashes: 1: DghlG5g8kh3BeIC870myqIarxAw.roa (hash: jDUL776SurMFsX7IAknzdET8gzAlypgO2s6eGi65foY=)
2: RDq50lH1bmkT8vqHJA8F-7f2nmQ.roa (hash: IWGFsdcNHT1pJQgqJ040THMUt7oZlhEWCHXEnZys69k=)
3: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: n6Gb4jj8CvdHisXFPkkyDHsDH1yrtINDM66BalcPadw=)
4: um-Lorhk6tusr5ZZhejZsnrGt8I.roa (hash: DrlD6P/FnEJtBBpWVV2J3o/4TxhGlcEWI7wpBpxOr+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:3c:a0:a6:64:4c:ec:ed:5e:ac:9c:00:e8:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Mar 29 14:00:17 2026 GMT
Not After : Mar 30 14:00:17 2026 GMT
Subject: CN=c7869db643f6c2e2f6aa7207203e64a195ba54bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:d1:65:58:33:85:ca:83:cf:bf:6a:41:78:
bc:57:2e:34:ba:49:1e:52:45:10:ba:90:80:99:75:
5c:75:67:83:db:b6:1c:da:9a:db:d3:ea:12:4a:6c:
b6:f2:8b:97:21:55:2c:5d:4a:4b:62:d5:f8:b2:d7:
5e:2b:d5:2e:09:9e:4a:d7:28:a8:39:f9:f8:ca:ae:
2b:a6:93:02:79:53:9d:b7:78:9d:a8:39:ad:fb:dd:
da:24:0a:6f:94:ed:8e:d9:c2:98:7b:69:3b:de:58:
c2:a3:8c:4a:ca:84:eb:c6:bf:55:8e:e2:16:23:6e:
4f:b9:f1:f6:6d:aa:49:99:eb:50:42:51:7e:94:71:
5d:0d:09:47:8c:30:70:37:ce:38:d6:06:cc:3e:40:
a5:ac:bb:03:46:4e:ea:e2:9e:52:04:4f:34:5e:7e:
bb:89:b2:36:05:53:5a:b8:23:d6:2d:c9:26:74:6c:
a4:17:ce:a8:90:1c:cc:db:86:22:0d:ff:78:53:18:
7c:df:32:4f:66:c2:73:51:c9:c5:14:a6:33:c0:d6:
7d:d4:fe:91:f5:05:47:f9:93:64:67:3b:6e:17:26:
a5:39:8f:d2:4a:29:ad:80:05:b1:87:3e:db:0f:9a:
9a:fb:21:2d:83:dd:a7:eb:45:b8:04:d7:eb:28:47:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:9D:B6:43:F6:C2:E2:F6:AA:72:07:20:3E:64:A1:95:BA:54:BC
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:db:b2:e7:94:98:b0:78:04:3f:3e:ae:8e:c3:77:ff:f8:b8:
6f:87:44:24:07:7a:7b:22:a4:aa:88:46:30:95:7a:6b:13:55:
63:64:00:e7:da:ce:d9:7d:cc:38:18:a0:4e:cd:0d:c3:1a:e8:
38:87:38:01:45:dd:82:fd:09:ee:4a:ca:b6:e8:da:4d:09:ae:
86:bd:0e:83:72:51:b8:e4:72:42:07:27:1e:e8:62:84:6d:31:
de:fa:12:b2:6e:36:b6:48:3d:74:1d:4d:13:ab:d5:23:4d:ba:
d4:bc:91:33:f2:5a:05:3f:68:5d:ba:5f:ec:98:29:7e:da:18:
03:59:a7:38:33:3e:14:62:3e:82:b7:83:a3:68:d1:34:77:1c:
1a:aa:e3:a6:47:e9:15:2e:4c:d7:70:77:69:f8:34:13:d3:40:
86:9d:d9:2f:1a:ab:4f:da:90:83:c4:07:2d:df:ff:18:53:64:
f4:50:fc:2a:ad:8f:ef:7f:71:e0:23:97:da:0b:e1:ae:ff:4b:
96:36:5f:ab:42:33:04:ff:ae:49:62:24:9e:38:fa:de:87:27:
a1:84:5a:bf:a1:8b:6c:77:e9:30:9e:bc:0c:d4:03:af:1c:7b:
97:7c:03:6e:3a:02:e1:6c:db:91:c4:e6:06:05:6e:5e:6f:7e:
fc:b0:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:50 2026 by rpki-client