Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: ImVkru6rYOAFZkFXIN4riTih33Nod0KkfRL4+yl1Vp4=
Subject key identifier: BC:FC:90:CF:3D:FB:FB:93:72:6A:DB:E9:E1:F6:4D:FF:80:9B:E4:D5
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 01A0CA0FBFDD79C63B0C20D7E886F5AE5344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 14F0
Signing time: Tue 22 Sep 2026 17:00:24 +0000
Manifest this update: Tue 22 Sep 2026 17:00:24 +0000
Manifest next update: Wed 23 Sep 2026 17:00:24 +0000
Files and hashes: 1: TjeA0h__0K75m-Lz_8rsQK-1bSA.roa (hash: L2lPrSJTEdmpDG2xtyfaKRlJ8hxi9q1HTQ4jAfyHzCs=)
2: i_5uaEC74F4fkQ9w0VTjAAVZ7ek.roa (hash: EmaFrrCeMCRKCrjyOiqjJjxN5S8IqzhYZkELnG6BX0g=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: FcvBfu91Ibq2sN7dH76KmYmDmlaPOCsgV34aNmQCtJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:bf:dd:79:c6:3b:0c:20:d7:e8:86:f5:ae:53:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Sep 22 17:00:24 2026 GMT
Not After : Sep 23 17:00:24 2026 GMT
Subject: CN=bcfc90cf3dfbfb93726adbe9e1f64dff809be4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:9f:c6:55:c4:de:81:bc:a4:c6:85:53:e4:
87:4a:ac:d8:cf:24:6e:68:68:e6:85:19:dc:10:c1:
9d:3d:2d:cc:24:7d:a9:7c:a0:c7:53:41:48:a3:1d:
29:43:a2:be:cf:8b:03:73:07:86:31:75:50:f1:c8:
9d:92:54:15:c4:c3:aa:82:fe:01:f0:46:51:60:d5:
ff:59:81:33:55:08:c6:60:c4:f9:cf:c5:a8:e2:d5:
40:34:99:36:64:6d:1e:1e:64:9e:98:8e:89:19:b3:
8c:33:17:d2:ff:e3:65:c9:a8:e0:1c:82:e8:d2:d2:
95:ed:a7:2e:d1:51:04:36:63:7c:81:43:c5:33:4f:
44:e4:6b:b4:89:1d:dc:b6:46:7d:2c:b7:53:b1:c5:
0e:75:fb:f1:cf:ea:35:dc:02:43:47:22:fc:0e:95:
73:29:7f:c0:fd:0a:8c:29:d0:d8:47:f6:6a:f0:a2:
d7:5e:e0:d3:28:82:81:94:e4:69:81:16:16:59:fc:
89:92:47:38:ab:04:cd:0e:b1:20:d0:0d:5c:d9:d7:
0e:c4:37:46:60:b2:7e:9b:86:49:6f:cf:83:15:93:
78:ca:ba:ff:4f:69:c5:3d:a9:87:e5:62:aa:bb:4d:
40:1a:91:74:74:31:62:8d:a2:dc:b1:c7:43:67:2d:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FC:90:CF:3D:FB:FB:93:72:6A:DB:E9:E1:F6:4D:FF:80:9B:E4:D5
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:d7:2a:1f:5a:b8:a4:fe:f3:ed:c8:3d:a1:1e:a6:de:a3:
da:b8:72:58:08:5a:bb:13:77:70:da:dc:64:b3:3f:a6:07:32:
f3:42:2f:fd:08:b2:3b:a8:2c:6f:f1:12:2f:a4:c2:44:aa:be:
8f:ed:ea:32:51:ec:95:36:b3:4e:14:f0:d2:0d:64:de:44:68:
93:7a:b4:a8:fa:25:93:b2:44:c3:8c:60:dc:28:a5:54:8d:f3:
ac:37:f7:82:4e:20:30:5b:8d:da:a7:b0:78:03:2e:b7:01:1c:
76:f3:b2:16:c9:cf:8b:c8:90:6d:91:32:d5:9a:5e:6d:06:08:
2b:10:1a:e1:85:4f:b3:b6:6a:9e:56:9b:1d:d4:8a:44:bb:b2:
50:8c:80:58:3b:ea:7e:3e:44:49:8c:c0:8e:53:05:91:46:ec:
73:f1:3d:54:65:52:fe:9c:05:d0:55:79:34:12:4e:c7:30:87:
a5:13:28:89:ef:1c:a3:a7:b6:f6:98:ff:42:aa:c4:0e:5e:82:
e8:e3:15:59:af:2b:49:5e:61:d8:0e:d7:3e:5b:67:c0:12:85:
83:01:57:4f:16:eb:00:b6:5f:e8:29:e2:a9:85:7e:24:95:eb:
92:63:a8:bb:9f:ad:72:14:bd:4d:8e:0c:ff:47:ba:af:65:37:
7e:47:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:28:07 2026 by rpki-client