Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier: 5EFoc9CDNvig05a9fGmD1/aoybpbIevSeqbJEloJnpI=
Subject key identifier: 68:C4:ED:6D:46:02:6F:03:1A:04:7D:D2:43:ED:62:86:6C:42:45:FA
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 01A0BC8B7C70EF37CF3C3A4172688DB08DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number: 0D34
Signing time: Sun 20 Sep 2026 02:00:53 +0000
Manifest this update: Sun 20 Sep 2026 02:00:53 +0000
Manifest next update: Mon 21 Sep 2026 02:00:53 +0000
Files and hashes: 1: RM9gch6fF6dTUga4Bj7c-ZQoUtM.roa (hash: aQYj/VaPaTrTWbQj2KnQY8a0Wb0mkyzzVVekX0QBd2M=)
2: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: iQpwQIe8rpAxLvE7A4zySikcttUno8l+CqEbgdGUkb0=)
3: uveeP90Ng8fiZXlzX-6ojy0jIqY.roa (hash: PfDd8d708uz6aVMC87b2047YaQ4t2uLKA5Y0H9BA2Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:8b:7c:70:ef:37:cf:3c:3a:41:72:68:8d:b0:8d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Sep 20 02:00:53 2026 GMT
Not After : Sep 21 02:00:53 2026 GMT
Subject: CN=68c4ed6d46026f031a047dd243ed62866c4245fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:7b:56:db:15:da:05:f9:7a:5b:0b:c2:fe:
e2:87:01:ce:a0:20:7a:b8:53:21:58:6a:49:b1:e8:
4f:0e:ed:1a:7f:1b:01:5c:32:c7:7e:38:d1:ec:c0:
6a:71:3d:f8:99:09:06:b5:9a:53:fe:91:ab:14:85:
0d:18:39:57:86:e9:9d:ba:b8:3f:1a:16:c1:00:d1:
c6:1e:80:15:25:50:34:67:e6:44:fb:fb:a9:55:d9:
b2:d5:ec:eb:37:41:b1:b3:ce:f4:ec:33:30:d1:40:
09:c7:8a:4f:05:cd:4f:d1:ec:97:39:c7:65:38:27:
e6:31:fe:06:10:63:45:3a:58:ef:9a:c4:6f:4c:8c:
33:cc:92:30:3f:f6:eb:59:46:0b:f8:fe:67:d9:59:
09:bf:45:d9:42:4e:6a:8b:5c:0b:78:55:8c:06:45:
ec:0a:9c:49:f1:cc:de:38:9a:b6:31:1e:8a:f4:56:
ec:f8:79:b5:27:ed:2c:ac:fb:c8:70:c4:43:0b:35:
41:59:d6:76:c8:3c:e4:b3:b3:fd:bf:b0:04:8d:1e:
76:e6:b7:9f:f0:bb:88:44:8c:4a:68:9b:5a:f3:45:
42:41:5f:aa:81:be:53:98:0d:bb:1f:77:23:4a:f6:
70:4f:e0:c1:9b:1b:dd:94:29:aa:ae:e2:7c:18:17:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C4:ED:6D:46:02:6F:03:1A:04:7D:D2:43:ED:62:86:6C:42:45:FA
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bf:6f:9b:b7:5f:70:5d:c8:f3:82:a1:ba:c7:95:25:2a:29:
a5:a3:94:84:b3:a2:31:9c:53:d0:a4:1a:e8:3e:a7:2f:d7:cd:
33:6c:a5:9a:08:73:d9:11:41:78:1c:ab:5c:fe:48:e0:c0:7c:
60:fe:0b:a4:76:a0:36:8e:04:66:42:23:11:a0:e7:9a:06:1f:
10:07:83:f4:b6:1a:a0:11:5f:af:ed:a8:5d:d6:df:1f:39:a8:
47:17:7a:6f:34:09:ca:9d:ce:d4:76:3f:93:d8:f7:c0:59:7c:
7c:e2:ea:32:04:49:89:3d:bd:d6:2d:cf:3f:98:b1:39:9c:c0:
a4:d6:9e:13:24:d0:fa:58:7f:cc:ec:3a:86:ea:77:cb:43:c2:
b2:35:42:26:6e:57:1b:17:9b:2d:38:e0:45:d6:46:76:7b:63:
6c:d6:a4:45:42:53:ca:8c:14:df:1e:86:d4:5b:7b:46:87:67:
da:03:20:7c:6c:b1:16:76:e1:ab:3b:0e:58:8d:9a:14:cf:8a:
31:d1:ef:cf:42:8d:5b:3e:04:f6:b8:1d:ef:92:ca:01:b6:7c:
33:be:36:61:95:91:5c:ba:e1:8e:c0:fb:aa:a8:7e:f2:b6:4c:
11:a0:41:1f:7e:70:45:e1:89:b6:22:bc:7d:ea:2a:97:cf:3b:
94:22:10:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8i3xw7zfPPDpBcmiNsI2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDJjYTgxYjlmMGE5NzEzYjA5OTY4N2RjODE1NTFjNDVl
M2Y4ZmMwHhcNMjYwOTIwMDIwMDUzWhcNMjYwOTIxMDIwMDUzWjAzMTEwLwYDVQQD
Eyg2OGM0ZWQ2ZDQ2MDI2ZjAzMWEwNDdkZDI0M2VkNjI4NjZjNDI0NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo57VtsV2gX5elsLwv7ihwHOoCB6
uFMhWGpJsehPDu0afxsBXDLHfjjR7MBqcT34mQkGtZpT/pGrFIUNGDlXhumdurg/
GhbBANHGHoAVJVA0Z+ZE+/upVdmy1ezrN0Gxs8707DMw0UAJx4pPBc1P0eyXOcdl
OCfmMf4GEGNFOljvmsRvTIwzzJIwP/brWUYL+P5n2VkJv0XZQk5qi1wLeFWMBkXs
CpxJ8czeOJq2MR6K9Fbs+Hm1J+0srPvIcMRDCzVBWdZ2yDzks7P9v7AEjR525ref
8LuIRIxKaJta80VCQV+qgb5TmA27H3cjSvZwT+DBmxvdlCmqruJ8GBe9GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjE7W1GAm8DGgR90kPtYoZsQkX6MB8GA1UdIwQY
MBaAFFoCyoG58KlxOwmWh9yBVRxF4/j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2Mt
NDU5ZGRjNjMxYmNjLzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2MtNDU5ZGRjNjMxYmNj
LzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr9vm7df
cF3I84KhuseVJSoppaOUhLOiMZxT0KQa6D6nL9fNM2ylmghz2RFBeByrXP5I4MB8
YP4LpHagNo4EZkIjEaDnmgYfEAeD9LYaoBFfr+2oXdbfHzmoRxd6bzQJyp3O1HY/
k9j3wFl8fOLqMgRJiT291i3PP5ixOZzApNaeEyTQ+lh/zOw6hup3y0PCsjVCJm5X
GxebLTjgRdZGdntjbNakRUJTyowU3x6G1Ft7Rodn2gMgfGyxFnbhqzsOWI2aFM+K
MdHvz0KNWz4E9rgd75LKAbZ8M742YZWRXLrhjsD7qqh+8rZMEaBBH35wReGJtiK8
feoql887lCIQkA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:52:00 2026 by rpki-client