Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier: OcJWNWbVCCiX4EYLc/YQVvUEeOnWpgD2BiSlm4it/0w=
Subject key identifier: DD:E3:78:47:5A:FA:8B:C4:2E:3F:5E:E2:31:FD:8C:76:14:4C:A4:5B
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial: 019CAB6B4E505042E282765A695F157EED8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number: 045C
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: T0cDmVa9gE4i8e3QBEcrjEVwsDLqibb4Co/VtBdV/bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4e:50:50:42:e2:82:76:5a:69:5f:15:7e:ed:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=dde378475afa8bc42e3f5ee231fd8c76144ca45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:cd:1d:36:fe:20:5a:b7:fb:59:39:3d:dd:
ce:91:ba:75:6c:b7:98:9d:4f:17:78:7c:ef:63:00:
40:a6:87:e6:f5:09:dc:14:7d:18:cb:28:5f:2d:b8:
4a:47:94:a4:44:1c:ae:dc:7f:f4:7c:34:b2:b8:fd:
21:cf:1c:7d:b2:3c:54:0b:78:54:6a:10:8d:12:14:
dc:00:09:b6:fe:be:92:89:32:26:35:07:3c:0f:18:
c0:01:3f:fe:80:9b:5b:f4:00:d4:41:ef:e9:d6:9b:
98:bd:6e:a2:5b:aa:7d:e6:bf:57:dd:04:9d:c9:70:
83:c0:10:aa:49:5f:d6:7b:04:5d:59:fe:51:a6:6f:
1d:cb:eb:9a:a2:18:66:1b:47:c3:27:5c:cb:eb:b8:
f5:a1:19:ea:28:04:72:7b:6c:4b:5f:90:b3:cd:9b:
e6:80:c5:1c:86:1f:00:5e:85:28:1a:5b:9a:e9:40:
5d:25:2b:78:cb:c9:cb:75:ab:fd:88:23:2d:1d:14:
75:55:c0:26:79:3f:a6:5b:d6:30:40:26:b2:32:9a:
34:5b:cb:a9:a7:c1:45:d6:42:2f:12:71:11:85:f1:
3c:39:28:af:f0:ec:d3:64:32:30:7f:cb:64:94:77:
1a:cd:70:92:73:8b:35:92:45:0e:f9:6b:9c:59:e9:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:78:47:5A:FA:8B:C4:2E:3F:5E:E2:31:FD:8C:76:14:4C:A4:5B
X509v3 Authority Key Identifier:
keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:32:e7:df:b4:2b:19:f1:c8:71:e4:f5:4b:5a:17:61:1a:e8:
21:a7:0c:6f:e2:25:dd:fc:f5:3b:97:64:fe:e8:62:48:e1:d4:
e0:18:ad:72:d5:04:a5:ed:bc:98:57:06:ac:50:14:f8:49:1f:
d4:4a:e2:40:a8:29:db:4b:9a:00:66:8e:77:69:e5:e4:5f:94:
82:a5:93:be:05:41:0f:ff:00:e0:ed:e6:3f:55:2e:27:3f:b4:
72:98:5a:57:48:89:12:20:89:78:91:bd:ab:d5:22:09:44:6b:
0e:61:61:ca:54:be:f4:28:f6:16:44:8c:b5:cb:31:00:2f:82:
4d:0d:15:dd:9e:a4:ce:25:45:94:f2:dd:d8:eb:d0:e8:3e:90:
6f:2b:d0:df:81:91:8d:63:ba:6f:72:b2:a9:8b:28:c5:a3:5f:
75:d4:55:8c:ce:08:40:97:fc:8d:b3:43:ab:36:6f:68:a5:b1:
75:aa:99:38:4f:06:b1:61:43:f3:fb:4a:8a:c9:cd:ef:cc:c3:
c9:93:42:76:90:0a:d8:28:7a:8c:81:ae:d7:a3:e5:b4:48:c1:
77:ee:3b:5d:b2:5f:6b:b9:f5:f8:b1:33:6a:5b:05:a9:17:de:
f1:5c:6f:cd:14:49:e1:3b:a8:fc:38:72:35:df:63:23:92:6d:
f4:68:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:30 2026 by rpki-client