Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier: IHRe4L+7yqSAWZhNC7tr84VvsADUh07ysvO4l6p60lc=
Subject key identifier: E8:F6:E1:B9:D0:1E:D5:EA:26:BC:7A:7E:8D:12:71:77:44:C3:C4:74
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 019DD23F00DB57C676E912CB0C938276F77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number: 18DE
Signing time: Tue 28 Apr 2026 04:00:37 +0000
Manifest this update: Tue 28 Apr 2026 04:00:37 +0000
Manifest next update: Wed 29 Apr 2026 04:00:37 +0000
Files and hashes: 1: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: pOWvGpPySdJfA49KGJNCy9sEhMb3EkzA0LaorEDc7SU=)
2: ubDRCyGTNPH280nyPWUjQFlxXwo.roa (hash: aQLrEZhn3B0wMZ5KJdawYUdqKjoKHetb4pEObkiH9xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:3f:00:db:57:c6:76:e9:12:cb:0c:93:82:76:f7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: Apr 28 04:00:37 2026 GMT
Not After : Apr 29 04:00:37 2026 GMT
Subject: CN=e8f6e1b9d01ed5ea26bc7a7e8d12717744c3c474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:39:69:c2:50:bb:1c:bf:8d:8a:e0:a2:c0:
62:08:6c:29:f0:ce:17:ad:6a:c1:ed:a0:79:d6:8d:
0d:ca:7f:25:78:3e:bd:5e:e3:44:72:87:e9:30:fe:
b2:74:0f:26:2f:23:89:49:06:49:01:e2:78:cc:45:
70:09:ee:09:43:c3:24:e8:22:c3:29:84:25:06:3c:
2f:24:27:0d:3c:45:1f:c1:96:51:bc:6e:8d:4d:62:
ad:42:a6:91:2e:a4:2f:a2:33:99:06:69:8d:9d:b8:
13:f2:60:8e:dc:cf:34:c4:6b:14:c8:cd:ee:85:02:
e0:82:b8:c5:4d:91:66:d2:47:37:e0:46:24:0d:93:
af:c7:6b:8c:e5:b6:08:78:ea:db:ac:13:df:2b:55:
e9:9c:07:c0:77:f5:86:d1:76:56:a0:22:e9:24:29:
58:23:43:7d:bd:f6:39:53:13:fc:40:37:5f:26:8c:
a8:e2:bf:8a:04:4c:e7:db:db:fc:0b:be:f3:12:1e:
ff:77:3b:4b:8e:57:2a:b7:96:3f:3f:6e:14:44:42:
c7:ce:be:ac:76:fc:93:68:20:b6:bc:42:e8:ca:ab:
f6:ed:e0:a3:3e:74:89:f7:22:87:9f:29:f9:9d:fc:
59:70:c1:d5:28:cb:e2:02:48:d7:7c:ba:db:27:f0:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:E1:B9:D0:1E:D5:EA:26:BC:7A:7E:8D:12:71:77:44:C3:C4:74
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7e:2d:24:88:8a:8a:b1:12:1f:c4:88:54:d1:8b:4c:bb:80:
3c:90:f9:2c:fc:1d:5b:d3:2d:aa:5b:e1:ff:2f:07:c0:74:60:
d4:89:64:8f:8f:ea:9b:f1:5d:54:31:0e:e0:ef:09:0e:44:0c:
1f:5f:32:8c:b3:f5:14:98:1d:ae:52:65:e7:8a:35:b3:b4:ef:
39:9f:b3:3c:79:2a:00:8c:c0:45:ce:df:50:dc:83:c2:c4:fc:
a3:96:e6:bc:2c:24:3c:aa:7e:93:ec:07:0b:b9:e6:ba:46:ab:
95:03:4a:72:3b:70:d0:73:d0:47:db:1d:ac:ec:94:27:6b:d3:
cb:d7:36:8c:56:d6:f9:bb:6b:49:9d:f0:33:aa:2c:93:74:76:
5f:82:b2:8b:75:55:ec:08:53:d0:17:a5:cf:0e:f1:50:37:31:
f7:cf:fb:18:e2:cb:07:be:fc:7e:4e:f2:93:09:0d:06:19:02:
72:ab:a5:21:93:6a:6d:66:3c:19:67:b3:a8:6d:f9:e1:30:f8:
88:60:2a:79:b2:57:95:3a:18:0c:c9:19:50:d6:ed:21:6f:2e:
ee:94:b1:d8:70:e9:96:fa:ca:d1:a9:2a:90:7f:82:b1:d2:1f:
87:0e:cd:9c:28:e6:9c:06:0a:a1:8e:89:64:eb:70:fb:2e:d2:
09:93:eb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:38:41 2026 by rpki-client