Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier: gOGjRAZ5Dpioc4WES/jmcAxzKYhZNHjeOOETBzTF/m0=
Subject key identifier: A3:B2:CC:E4:D7:62:85:68:9C:72:98:DF:3D:C5:90:28:77:1D:9E:F5
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial: 019D389BB6EBB0C88CAD48A892E845559DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number: 10FE
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: U838CZ3tP-SqpmS_2UEPBZ3tGac.roa (hash: 0MbyurR/tw2t4cWUzKHipnxJH0cpvpDBnD2yvgzDDAc=)
2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: ZAJbAs49XTlHvgmE47SJn0Wz6O0LMQ2Zw3vqKP/9NMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b6:eb:b0:c8:8c:ad:48:a8:92:e8:45:55:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=a3b2cce4d76285689c7298df3dc59028771d9ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:6c:cb:aa:43:c4:5a:53:aa:08:c2:f6:4b:
83:dd:6a:64:98:7b:a3:08:97:d9:47:54:81:81:ae:
4c:ef:88:9f:9b:74:f5:cc:f9:85:8a:14:42:eb:11:
eb:7a:74:3c:11:20:d6:00:b3:c6:b9:f5:ad:9c:58:
2d:93:3b:d3:9e:4c:15:92:f1:e1:8a:72:ed:aa:eb:
20:31:63:c6:6e:a5:81:03:82:44:5c:58:6d:bd:13:
ce:22:e3:b4:b1:1e:80:44:77:4b:4b:58:d3:ee:b3:
00:de:87:a9:a7:8d:95:91:52:1d:3b:9b:cf:7b:95:
32:48:23:25:2e:c1:7d:f8:2e:a9:ef:e9:d4:c8:98:
db:86:ff:b7:a7:1b:a9:07:33:48:02:f2:68:e4:ad:
c4:97:10:6b:dc:7e:2d:55:66:af:cb:16:de:7f:e3:
02:e8:d9:c1:5e:1e:7c:9f:3c:ba:10:70:eb:ca:76:
31:9d:b3:85:60:09:ad:4b:4e:a4:89:6c:81:91:94:
82:ef:dc:4f:64:14:b3:f5:03:e3:10:94:26:96:7f:
25:24:65:d1:c9:9f:9b:b9:20:41:d7:8c:0d:ee:69:
a2:86:ba:b5:8f:35:f6:15:b3:bc:62:5e:b3:96:81:
07:b2:d7:f6:61:57:77:14:05:a9:3b:a9:26:02:f8:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:CC:E4:D7:62:85:68:9C:72:98:DF:3D:C5:90:28:77:1D:9E:F5
X509v3 Authority Key Identifier:
keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2f:f3:f2:03:6f:63:e5:15:8e:f5:09:54:a5:92:fb:65:10:
c1:03:87:6c:14:8e:7b:d5:d2:bd:94:b0:5e:2d:a6:12:62:e9:
3f:48:7d:fa:51:e0:be:25:51:02:01:21:fb:10:d5:a4:28:cd:
32:1f:6f:11:1e:1f:2a:df:d2:68:0a:b2:48:61:cf:f7:52:1b:
f0:b8:b0:8c:ed:36:28:06:f1:a7:ba:96:69:36:7a:e9:b1:e2:
63:5a:82:a8:94:d5:bb:6c:7b:a1:4a:c0:c2:93:aa:f1:fb:8a:
27:5f:29:3e:06:d7:80:97:53:4c:43:fb:60:3d:0d:c1:d2:7c:
6d:a1:7c:7a:a2:7c:53:e2:c3:1a:f3:97:4b:1d:29:a3:fd:ee:
ea:aa:cd:ee:a3:52:9d:f8:f6:3f:ef:6b:41:91:c9:5e:7a:64:
f9:ce:e9:39:04:30:e1:4a:d8:cd:7b:9b:9b:f3:62:37:1d:09:
77:7e:41:ad:d0:73:1f:66:d9:92:bf:2a:f3:12:a0:a2:0f:72:
98:45:09:e1:fb:79:4e:48:fe:63:f8:36:d4:bc:33:f4:0b:92:
67:21:85:3e:d8:35:c5:e3:f6:d9:42:4a:7c:8c:ed:f3:a8:aa:
8a:4a:e0:9e:fe:2b:19:f1:d4:1e:71:e0:26:87:ff:fa:a0:f1:
18:1f:99:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:37 2026 by rpki-client