Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: vl9Mulkeh1bG5GBs8mKjYd9vJOdDuSPb/kJelOD+BE4=
Subject key identifier: D1:4A:F7:C1:E6:A8:31:4F:AA:B0:ED:6F:05:C7:82:FC:62:1D:00:34
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019D389C08D1C3D3CB3B251EDE5B291523E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 07CD
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (hash: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM=)
2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: 0HNPTh6mWXqZRdMpdZTP7TXl70iI2cOyVtwAdF/TyIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:08:d1:c3:d3:cb:3b:25:1e:de:5b:29:15:23:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=d14af7c1e6a8314faab0ed6f05c782fc621d0034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:aa:4a:17:56:10:e1:86:97:da:b1:15:c4:
ad:53:11:83:82:ea:92:b8:cc:07:25:ec:4a:8b:97:
38:7f:32:42:ab:95:84:12:9c:2d:63:94:36:57:bb:
57:55:e2:59:d8:9a:44:cd:a5:f3:d7:f0:87:b9:06:
cf:9c:9f:bb:30:bc:74:d0:75:9f:a9:ae:c3:53:fa:
95:8b:a2:a4:b9:46:19:d3:5f:fb:b2:2a:c7:0a:80:
f9:97:4b:49:5c:bf:f7:6c:16:25:55:af:9a:e6:8b:
13:94:25:20:ef:30:2c:ea:75:d9:68:ae:12:63:06:
b8:4c:74:d1:ee:e9:bf:bb:4b:cb:6e:c8:43:73:fb:
16:65:d7:00:a3:14:89:1f:f7:e6:fe:c4:94:8c:04:
fd:58:96:20:81:50:83:19:b3:c8:73:39:b4:29:db:
d3:52:47:c8:1c:8d:54:25:de:2f:7d:96:d8:18:8d:
3e:5a:34:b2:4e:a4:4a:8f:77:47:ee:b5:8d:d8:ac:
89:ae:27:95:ba:fa:21:d5:80:49:4b:d6:e8:e5:15:
01:12:19:d5:57:62:7a:31:95:89:5d:2d:37:0d:28:
45:18:80:40:01:87:2a:f2:6c:b8:1b:8d:05:0c:5c:
4f:03:45:26:a4:39:25:c7:b8:5d:f6:7d:8c:4d:bc:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:F7:C1:E6:A8:31:4F:AA:B0:ED:6F:05:C7:82:FC:62:1D:00:34
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:be:50:44:26:d3:b2:fe:43:dd:cd:39:f8:73:7b:ab:8e:15:
88:15:6a:3b:50:ca:0c:bd:da:b2:ea:1f:d8:57:e5:8d:b0:96:
78:d5:06:91:b8:72:68:68:ac:b7:2a:59:58:b4:02:a3:aa:31:
b9:da:7a:33:c5:20:9a:30:7c:5c:6d:95:3f:01:df:aa:da:48:
76:09:8d:13:da:af:5c:be:cd:42:18:ad:29:16:b3:e3:b8:3b:
45:1d:81:7f:da:fb:a0:5c:89:f0:32:6d:04:07:c0:76:2a:c6:
f4:70:35:15:f5:0c:f0:2c:a8:0e:e9:c6:9b:d2:98:82:53:07:
f2:24:cf:f7:3b:21:91:c6:88:86:a0:32:97:48:c0:85:9a:5a:
ae:25:2c:08:66:3a:12:06:a2:e3:ee:66:92:b5:8d:b8:08:a0:
d7:cd:c1:82:ab:ec:3f:14:cc:2f:15:d1:df:7b:a8:c3:24:21:
e0:be:69:81:09:a0:6c:cc:7f:f1:d1:d2:f6:87:33:c0:85:c1:
17:ef:82:62:f6:64:f4:83:f2:32:03:6e:9c:f1:01:51:47:a6:
9d:68:c3:f1:ac:62:13:c5:44:a4:98:77:fb:85:27:a4:b0:75:
3a:ca:e7:98:87:22:9a:e0:1c:58:0c:73:17:7d:b1:e2:c9:70:
0f:3e:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:09 2026 by rpki-client