Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: 9EFnsmbXW+MBkCfS5AttpgIPNNlm2zGlW4m6Pnn6Tk4=
Subject key identifier: DF:89:46:BE:0F:A1:95:FC:F0:6C:E3:38:F2:8B:22:7D:5C:E3:D5:DC
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 01A0C8FCE1514B79203550932CD6F11DFA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 15AD
Signing time: Tue 22 Sep 2026 12:00:11 +0000
Manifest this update: Tue 22 Sep 2026 12:00:11 +0000
Manifest next update: Wed 23 Sep 2026 12:00:11 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: SaOx5CDvMc4JL6H1TeHgm4FotFDmmzwqS3tYYLeJRXk=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:e1:51:4b:79:20:35:50:93:2c:d6:f1:1d:fa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Sep 22 12:00:11 2026 GMT
Not After : Sep 23 12:00:11 2026 GMT
Subject: CN=df8946be0fa195fcf06ce338f28b227d5ce3d5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:f2:81:48:49:33:45:66:85:5e:0d:e6:31:
d9:06:27:0b:35:85:c9:94:c7:de:bf:d9:88:37:08:
8a:fb:e1:62:2f:32:04:ce:cb:74:a7:d2:f6:e0:db:
07:dd:62:b3:4a:9b:2f:86:1e:5a:74:9e:1e:5f:1a:
7c:3a:02:a8:9d:65:e6:00:79:83:bf:5a:61:1e:75:
11:e3:6e:1d:bd:66:90:33:72:5e:78:7f:eb:4f:16:
6f:5b:09:a2:6c:6b:e2:5e:38:0e:5e:87:56:df:18:
29:a6:04:d5:ca:45:ea:64:83:29:b6:cd:89:09:fd:
fb:f9:e1:30:75:a6:3c:a2:a3:6e:21:ab:25:3f:a3:
7e:97:f9:c8:1a:d3:40:52:31:44:cd:86:77:92:15:
63:cc:76:56:0e:b8:a6:f4:ea:f1:b0:d0:cf:b1:ed:
dc:4c:30:5b:f0:96:72:e8:82:3c:83:4b:2c:51:62:
85:96:62:8e:84:39:c1:80:1d:51:83:39:07:d1:77:
b0:ab:e5:33:81:c8:5e:f1:58:86:81:c9:85:65:de:
d1:d4:9e:4b:ab:dc:9c:63:72:15:71:a3:86:ad:cb:
2c:c9:dc:04:d1:b6:2e:8f:55:6c:bc:d6:db:d0:42:
c0:a8:13:97:fb:0b:56:74:53:83:ba:9a:24:24:e0:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:89:46:BE:0F:A1:95:FC:F0:6C:E3:38:F2:8B:22:7D:5C:E3:D5:DC
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bc:b3:f0:97:48:04:b8:41:47:a8:f2:19:f8:3b:2a:72:44:
a9:d6:89:d1:32:af:60:a2:a1:c0:71:d9:b2:14:db:63:b8:81:
ad:db:a2:7b:54:f4:0a:ba:24:9d:13:e5:ab:38:05:03:bf:8e:
1b:04:de:d0:84:95:2a:1b:86:27:11:a7:08:19:26:85:47:72:
7a:70:e4:7e:df:7a:57:06:ca:7d:a9:d2:5c:c9:80:c7:cd:dc:
fc:2e:f4:b0:a7:26:53:fc:77:a0:4f:61:82:50:e0:50:1d:65:
55:e1:ec:b0:2c:16:d8:c6:ca:77:47:bd:df:28:a7:17:56:69:
33:5b:e4:0a:a0:25:47:58:b4:95:06:1d:a7:9f:c5:03:c3:d6:
4b:69:f3:5c:a8:31:37:cd:5d:a8:4f:8d:40:86:ca:55:c5:9e:
5d:3f:53:38:ae:df:f7:41:8f:8f:e2:a4:f0:d7:2f:a4:8f:92:
c6:38:eb:06:97:ba:c6:6d:da:b6:f4:b9:07:89:92:a8:c1:5b:
f3:c2:42:0e:55:98:3d:97:eb:92:b2:14:8c:8e:8a:19:18:69:
1e:3e:a3:a1:f4:2d:06:9a:92:1d:02:48:ca:53:af:cb:ab:dc:
6c:22:2b:6e:e7:3a:ea:8d:4c:97:04:96:58:53:60:56:34:1c:
43:20:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:19:42 2026 by rpki-client