Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: 1xPcGsn73QZevtYwRTrR9lI2wOO4ZG90dfJGTUZV7xQ=
Subject key identifier: 76:06:52:EB:80:81:32:E8:19:5B:5F:0D:01:F6:15:11:C2:9F:22:E2
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 019D98185F2B0A68B541CDBFF5EF28F05A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 1406
Signing time: Thu 16 Apr 2026 21:00:27 +0000
Manifest this update: Thu 16 Apr 2026 21:00:27 +0000
Manifest next update: Fri 17 Apr 2026 21:00:27 +0000
Files and hashes: 1: 9WzxqECMXW8fZGU-rQmRPVWb_os.roa (hash: XT+868c50fo6dpkDxQc/bdQaoVcAHIBrY8fUl6miP5U=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: A1kO1EPMxdw3VAjQHHcO9LmYAnI4A9x7bAuC9lXbDYw=)
3: _rujdAaK1pmzV8pOiapDkNum8us.roa (hash: u3k5I6agFuSUW1EwC10pVK00+LAQPxho+V/fUqBY+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:5f:2b:0a:68:b5:41:cd:bf:f5:ef:28:f0:5a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Apr 16 21:00:27 2026 GMT
Not After : Apr 17 21:00:27 2026 GMT
Subject: CN=760652eb808132e8195b5f0d01f61511c29f22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:8c:2d:fa:f9:5f:58:53:fe:36:bb:b1:65:
68:5d:4c:a7:2e:38:40:7f:b5:9c:93:d7:9b:d7:6a:
da:cf:0b:f0:9a:d0:4a:7e:24:b0:c9:00:d5:5e:9d:
eb:67:d0:91:d8:40:0e:42:89:be:db:fd:06:fc:18:
ad:a0:59:2d:9a:ab:a2:0c:e3:54:cf:c9:90:d3:6d:
b8:76:d5:72:4e:06:5c:ed:ad:3e:f6:af:97:47:12:
65:63:a7:13:9d:e1:69:16:3d:35:86:6c:a3:65:6f:
89:bc:f2:64:a5:6c:11:36:8b:57:a5:fa:69:94:02:
71:96:f9:28:da:a0:30:b1:27:9a:5f:05:e1:cb:33:
39:ef:5b:da:ed:f9:c9:18:37:26:dd:a5:f7:ac:5c:
79:37:ad:7e:4c:a8:a3:75:e9:1b:ca:d2:34:f5:30:
d7:dd:07:19:15:ba:70:f2:b6:bd:ba:69:97:01:04:
2f:12:12:98:2a:a9:28:50:6f:ff:61:07:9f:85:85:
ba:fa:25:4c:8f:5e:75:45:29:be:0d:5b:06:94:ef:
c6:58:bc:a4:d0:7f:85:f6:6e:e4:63:3e:ed:87:4a:
12:02:8b:93:41:73:b5:c5:cc:b6:2b:cb:b2:6e:bc:
ca:16:ef:f4:9d:06:a8:6c:ff:54:a4:e4:50:80:1b:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:52:EB:80:81:32:E8:19:5B:5F:0D:01:F6:15:11:C2:9F:22:E2
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c5:35:57:8a:58:9c:11:84:da:bd:27:a8:ce:96:94:87:0f:
a5:fa:d6:53:31:d5:f7:ca:ee:4c:b0:61:71:de:c6:7f:ce:7f:
e6:c6:04:75:ce:6c:5b:85:90:5c:68:d7:f0:3f:f3:10:e7:7e:
50:4c:40:3d:01:0a:00:90:0a:58:2c:b9:ac:e5:7c:d6:22:8a:
0b:df:05:20:72:4a:2a:de:45:0c:d8:91:25:d6:52:49:57:be:
8d:b0:90:c8:a8:e5:fe:b7:c6:e1:38:3e:46:11:a5:d4:e4:bf:
b5:58:bc:15:46:1e:72:43:11:16:c9:f8:3a:21:d6:f1:87:b7:
21:d3:59:94:af:60:cf:f0:c1:b7:cc:e9:0e:a9:35:e2:94:0e:
e6:2d:91:ca:09:99:fd:75:ec:a5:34:ef:be:28:9d:c2:20:5b:
39:37:78:51:a2:af:b8:dd:c9:73:05:be:38:50:14:5e:be:32:
59:dd:c7:ef:16:4f:f5:d5:ca:d5:66:f6:4d:c1:7e:8e:b5:74:
65:16:e3:a3:1e:c3:85:d6:50:7c:1e:54:88:17:ea:b7:c8:fe:
91:61:2f:52:36:37:37:f2:fb:79:ed:9e:94:78:06:85:08:77:
da:1d:03:c0:81:c9:ec:af:27:b9:1f:57:9d:92:3a:3f:08:46:
54:35:df:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:12 2026 by rpki-client