Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: IIPpU/Gqf6sfrzXr82EMj6Sa9bdL8jdUSGwrj7cXHR4=
Subject key identifier: 6F:6C:56:3A:51:08:9B:FE:45:85:AF:1D:9B:29:47:41:21:34:A6:60
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 019CAA900B26B5C4A2040206A183E860C679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 138B
Signing time: Sun 01 Mar 2026 18:01:32 +0000
Manifest this update: Sun 01 Mar 2026 18:01:32 +0000
Manifest next update: Mon 02 Mar 2026 18:01:32 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: JLmct10tAstA7qjrYhyK3QPhmg6BE+XhhCZ4UUk4DMM=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0b:26:b5:c4:a2:04:02:06:a1:83:e8:60:c6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Mar 1 18:01:32 2026 GMT
Not After : Mar 2 18:01:32 2026 GMT
Subject: CN=6f6c563a51089bfe4585af1d9b2947412134a660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:0d:23:f0:80:40:aa:e7:52:9a:c4:3b:65:
1f:1e:43:dc:21:bf:96:4c:bf:8f:74:45:b4:eb:6c:
84:d5:15:55:14:ee:ee:c9:51:00:0a:d3:37:b3:1c:
53:16:de:a9:0c:68:a2:a3:a9:31:c0:c5:a7:35:71:
0b:4f:d3:69:73:73:05:4f:21:b6:5b:63:aa:a3:1d:
8e:bb:14:a3:fd:76:2c:21:94:f6:d3:67:63:35:2f:
34:88:95:c6:24:e9:d5:20:76:9e:03:f2:66:56:19:
f0:e3:87:c1:b0:4f:33:9d:ab:b9:a4:d7:13:a5:6d:
37:09:ef:a5:cd:73:b8:a6:39:2f:c0:52:a0:a6:7b:
0e:13:82:bc:88:24:90:c2:1c:01:89:00:a3:46:c2:
bf:51:3e:91:40:9f:da:7b:fd:9d:a6:ac:95:77:96:
83:97:e3:cb:41:c1:ad:86:61:38:8b:20:45:31:5d:
56:fe:98:cf:f1:81:99:a1:26:f5:69:12:20:b9:0d:
cf:aa:2b:4d:ba:c6:fa:84:68:61:df:fc:23:f6:ab:
79:51:b4:cc:35:35:aa:4a:29:d4:20:c0:a0:7a:0e:
01:53:75:98:96:c0:a8:7f:01:49:02:9b:81:ff:1a:
bd:e6:c0:00:8c:49:33:25:3d:03:90:d2:59:ae:e2:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:56:3A:51:08:9B:FE:45:85:AF:1D:9B:29:47:41:21:34:A6:60
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a1:19:0a:ab:fc:80:30:8d:c0:8c:c2:6d:7b:a5:92:9b:eb:
cc:11:2c:e7:d2:f9:1b:2d:39:8c:65:82:35:81:3a:8f:a9:75:
2e:9b:53:87:f9:d6:33:fb:a3:9c:db:c8:dd:fe:75:f0:06:4b:
8e:e7:fd:7a:fe:f9:35:65:9c:ff:6a:49:79:fa:62:cc:f7:c2:
03:dd:ae:6e:39:de:1d:56:5e:b4:bf:ac:a1:13:3b:04:07:12:
bb:3b:99:d0:23:2c:a8:d8:44:9e:40:a3:22:ec:c6:f7:d5:23:
c8:02:c1:bd:af:ce:1c:07:f4:3c:97:08:91:d4:28:92:1a:52:
9e:e0:b9:8a:60:90:41:c1:ac:b3:be:7d:db:11:a1:f9:2c:de:
3c:7b:98:3d:19:78:d7:d5:3c:30:ee:9f:68:db:01:7b:e0:f1:
54:60:8f:66:c5:86:51:6a:95:56:5c:39:51:81:f0:e4:0c:1e:
cc:b7:f9:2d:fb:24:99:d9:c8:13:f8:26:ca:72:04:19:ca:86:
ca:3b:c8:01:1d:1c:b3:ac:a2:2a:d3:3b:09:c1:ef:28:b6:4e:
12:60:d5:ff:03:2d:8b:b7:e1:84:be:60:d3:94:40:0b:90:2d:
53:07:dd:13:f6:35:59:4b:b7:77:39:ab:6f:68:38:4e:5a:2d:
8e:82:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:25 2026 by rpki-client