Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier: EHAp+zle4GQ5O/EokQRMBCHXgJ5x8Zl204AkhWaO+gw=
Subject key identifier: 0B:EC:5B:34:46:38:7F:7F:A8:C9:59:43:F8:EA:07:6E:C4:D8:8B:04
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial: 019D98F445EC43CE0BDE821C3F266FE9B26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number: 04D7
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: tbz7DvXSeKPMm3mAxX4qzdqAsjUSd0wrRhwk7OL/x8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:45:ec:43:ce:0b:de:82:1c:3f:26:6f:e9:b2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=0bec5b3446387f7fa8c95943f8ea076ec4d88b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:ff:b5:95:78:93:16:f8:0f:4d:4f:5f:e9:
3e:0c:37:ec:db:33:08:be:0b:5d:bd:38:52:e4:60:
35:bc:e6:b6:ee:f4:0f:ab:39:ef:cf:13:6e:20:96:
95:2e:d5:e9:5d:80:59:07:93:68:ea:b3:7f:1f:60:
f0:7b:86:91:c1:db:b8:ef:2c:f7:ba:fe:dd:e4:9c:
43:4c:e5:b3:6f:dd:76:42:5d:de:1e:60:15:f9:4a:
f6:0b:81:65:4b:a0:52:bf:0f:4b:e9:70:43:86:07:
57:03:06:d6:a8:f0:cc:77:f8:1c:41:d4:3b:99:30:
5b:ac:42:b3:aa:d8:e3:05:01:ed:46:94:db:ed:5e:
60:88:0b:7c:6f:11:f4:25:c2:04:5e:2d:92:fd:22:
ad:59:db:a5:b7:4c:b1:12:07:d7:03:8d:50:90:c7:
05:54:46:b8:a6:73:72:3c:54:08:2c:b8:b0:ac:18:
cc:71:b7:2c:22:98:72:48:75:ac:d7:75:5f:21:31:
4a:2e:fb:e4:03:ce:17:7b:3b:34:71:b9:ce:8a:7c:
09:4b:62:e5:56:58:2d:d1:b6:03:c8:14:cf:0b:07:
9b:1f:6a:3c:54:43:67:cb:d9:9d:d5:01:19:3f:ce:
62:f3:5e:64:13:cc:62:ce:57:ae:eb:ca:78:bc:08:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:5B:34:46:38:7F:7F:A8:C9:59:43:F8:EA:07:6E:C4:D8:8B:04
X509v3 Authority Key Identifier:
keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:75:19:20:32:6e:e7:f6:5b:51:3e:77:40:ce:fb:2b:f2:6e:
f2:0c:88:cf:f0:39:94:c2:52:87:94:f1:ab:3b:fd:5c:56:50:
65:3e:65:5e:17:b7:93:ea:cd:70:ad:a3:98:d7:3e:cc:18:a3:
7e:24:92:2a:53:99:00:47:68:eb:b4:e2:e1:3a:04:93:54:bb:
82:d0:cb:60:63:26:86:5a:e2:ea:f4:49:e5:24:f6:7f:b2:cf:
0a:b1:00:6b:8c:cd:55:d4:d4:c5:93:83:f1:17:35:83:c8:53:
f1:4a:d7:7d:7a:86:2e:4c:02:22:6a:1a:2a:52:69:b7:23:5e:
65:d8:fb:c8:e2:88:44:7f:73:84:84:bc:bc:d0:86:2f:e3:39:
cf:6c:38:30:29:30:34:b0:22:a7:78:99:44:34:9a:45:97:92:
da:16:dc:d1:17:0d:c5:82:42:bb:75:27:0a:a8:2e:2f:4f:0d:
62:94:fc:62:69:71:d6:b8:a2:dd:da:8b:92:5e:f3:a0:21:ae:
c6:98:a8:95:02:a0:96:b8:8f:be:33:b9:64:c5:62:4f:cc:51:
54:6e:56:f6:8e:c8:c4:86:da:b4:d2:49:ae:65:cd:5a:28:74:
e1:a4:f0:8a:67:d9:5a:13:c2:59:aa:ff:a2:55:45:ba:03:38:
f4:54:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:24 2026 by rpki-client