Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: qk6mHSSj+g9W5wqm55fW4/D+v9hceLXM3ZlHTAA8/J0=
Subject key identifier: 62:53:51:9F:A7:DD:E1:DF:61:F0:DD:BC:53:AD:06:88:FC:DC:42:A3
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 019EBDA2F41E70243A1693BFC99208D2CE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 149E
Signing time: Fri 12 Jun 2026 21:00:33 +0000
Manifest this update: Fri 12 Jun 2026 21:00:33 +0000
Manifest next update: Sat 13 Jun 2026 21:00:33 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: phDgi6jArgaLiGMRh0srks3AAnk+AnefsnT8wDAEujM=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:f4:1e:70:24:3a:16:93:bf:c9:92:08:d2:ce:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Jun 12 21:00:33 2026 GMT
Not After : Jun 13 21:00:33 2026 GMT
Subject: CN=6253519fa7dde1df61f0ddbc53ad0688fcdc42a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:30:b7:15:fc:4d:59:e6:0a:19:e4:9c:08:
a6:af:04:2f:de:4e:75:5c:6d:83:3c:58:28:72:36:
d7:90:a7:5a:a5:50:3d:74:1c:7c:54:95:ed:b9:ea:
aa:3e:da:34:ec:f9:e5:b1:21:c7:e7:c7:bf:d4:75:
9c:d6:40:94:fe:7b:3d:ef:d5:36:46:cb:3f:11:be:
91:16:8b:d7:91:04:f9:46:31:cb:55:19:04:3b:5f:
77:20:08:15:df:cc:dd:79:61:54:98:06:e7:a1:1e:
22:2f:0c:b3:f0:5f:cd:00:c0:af:78:7b:96:82:a5:
35:46:7c:5c:ff:6f:f2:0e:78:d7:a2:34:25:d0:a5:
f8:13:f1:b6:a2:fd:ce:7d:26:f6:02:62:82:fa:df:
ed:50:a9:1d:34:dc:ea:ae:e7:73:43:17:23:9b:2a:
2d:aa:40:7f:45:88:9e:2d:2c:e9:94:1b:c0:3d:e8:
cc:a1:b4:ed:e0:2d:7b:22:81:3b:9f:a5:aa:21:6b:
52:a2:26:1d:bd:42:8c:00:42:03:70:c2:8e:cf:74:
9e:83:7d:e5:cf:c2:08:bd:20:71:a3:31:d2:fc:e3:
83:00:cb:11:72:70:c1:81:41:28:db:85:f8:23:67:
60:57:c4:77:c2:03:17:e9:59:1a:98:7f:46:1b:92:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:51:9F:A7:DD:E1:DF:61:F0:DD:BC:53:AD:06:88:FC:DC:42:A3
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e5:d6:79:28:9b:45:3f:dd:05:27:2a:4d:a1:33:af:00:3c:
d0:aa:05:40:7a:4c:ac:01:41:8a:b4:71:c5:61:24:0b:eb:26:
5a:d3:5c:a9:00:5d:6b:c3:5d:3c:e3:48:21:0b:55:69:e3:74:
4c:d3:17:5d:e6:09:de:85:f7:12:97:fd:e6:f2:c3:f9:de:b3:
cf:dc:01:25:b8:e6:16:cb:dd:5d:eb:e3:5d:99:91:73:7d:85:
11:81:e5:47:d3:3f:59:b8:29:6a:75:81:6d:80:7a:1a:b1:a0:
9b:e7:3f:93:49:a6:29:3c:17:a6:ce:9f:f7:ce:1b:c6:d8:54:
33:65:3a:f9:69:05:38:5c:12:6e:3d:bd:97:ef:63:6e:9f:8c:
f9:b3:1b:e4:d2:44:b5:e4:c5:ff:38:3c:92:f2:69:56:9a:05:
f6:03:6d:14:d0:f5:45:50:58:67:fa:6d:81:a9:1c:7b:d2:df:
e1:11:c5:8c:19:39:1f:c2:c8:a7:63:4e:02:b1:12:3a:8f:f9:
99:8e:c3:b5:1c:b2:49:f0:0b:ac:0c:00:b2:f0:a3:3f:00:db:
ec:3f:41:4e:0b:98:8d:42:09:4e:c7:71:c0:d9:29:32:fd:59:
63:d5:fb:79:10:7c:f5:95:bd:47:6a:b9:f9:4c:7f:dd:4b:00:
e5:87:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:26 2026 by rpki-client