Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier: 86TeNNefbUDLNwKN46wDNPLDWobil2Q1HGdWrtqvREs=
Subject key identifier: 20:64:8B:7B:12:CC:3D:78:BB:65:25:DD:FB:FB:FD:0C:31:3A:CD:58
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 019CA9459E687B5D2DB17551A17A522CADFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number: 0B16
Signing time: Sun 01 Mar 2026 12:00:37 +0000
Manifest this update: Sun 01 Mar 2026 12:00:37 +0000
Manifest next update: Mon 02 Mar 2026 12:00:37 +0000
Files and hashes: 1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: EJkTQCS0kLSiAT5LCLRSYDXVTUUQMpSIG8J3/J6vCIE=)
2: rzSZWBGG1mILDZWq_ejHiNaagug.roa (hash: E4TzWT1DdcBtP+Tvjygnl6VcTwVaPGsD2eWFKuV7qQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:9e:68:7b:5d:2d:b1:75:51:a1:7a:52:2c:ad:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Mar 1 12:00:37 2026 GMT
Not After : Mar 2 12:00:37 2026 GMT
Subject: CN=20648b7b12cc3d78bb6525ddfbfbfd0c313acd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:07:94:22:09:d1:6b:70:26:25:c3:6a:63:
38:6e:bb:01:4e:69:f4:db:4b:36:b8:5f:c4:1e:9d:
7c:7d:0f:28:3c:a2:40:83:51:a0:18:49:cd:83:dc:
7a:9b:c0:58:37:38:2c:2e:1c:de:23:17:40:e9:e7:
94:f5:73:27:51:c0:70:e2:2f:d3:da:0d:bc:a6:af:
c5:3c:d0:66:b5:53:8e:eb:35:a4:2f:22:dd:b6:50:
9f:82:6a:01:b2:aa:bc:3e:12:9d:f0:75:98:ab:af:
6e:1c:95:37:19:db:25:a5:e1:21:2e:78:ce:92:1d:
a6:c4:f2:bb:c6:70:fc:20:12:7e:67:8b:c2:b1:01:
c6:76:ef:07:b0:62:1c:84:cf:82:0f:b2:d5:d3:27:
6b:c3:20:a9:7d:65:7f:8d:77:31:96:a1:47:c9:09:
68:81:a5:c8:da:d8:a7:96:97:6f:f5:a4:25:6e:c7:
20:a3:d4:95:1f:9b:15:59:14:7a:53:14:4b:a1:84:
2c:3f:22:3d:d0:40:e7:99:8c:e9:0f:4b:89:d8:24:
d7:ca:5a:45:cc:eb:be:07:a5:92:fa:14:1a:43:ae:
19:6e:e9:eb:70:70:67:f3:25:c3:f7:1a:58:a1:a5:
93:0a:5b:37:f9:07:cd:fc:ac:2e:91:a7:59:6c:23:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:64:8B:7B:12:CC:3D:78:BB:65:25:DD:FB:FB:FD:0C:31:3A:CD:58
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8a:25:bf:0c:f3:3e:15:7c:50:88:75:6c:9a:df:6a:55:5a:
7f:76:e5:38:a2:dc:3a:46:a2:8e:f2:9f:e0:92:94:33:21:84:
e6:cf:71:a6:9b:6f:64:8b:8c:85:4f:65:c5:77:ed:59:a0:d7:
c2:7d:8f:95:50:ff:67:6b:6b:2c:09:c0:85:50:10:af:5c:28:
0f:28:86:6a:b8:15:da:12:43:9b:b6:a3:1e:55:13:de:3c:b0:
a5:d7:1c:5c:ec:9f:0e:e0:5f:a0:c4:27:fa:04:1d:f1:3a:7a:
f4:b5:f6:da:52:ac:97:75:98:7d:85:66:b0:f5:4b:ee:66:a1:
53:b5:a4:31:7d:e1:ab:28:28:dd:21:fd:c2:6f:ff:63:b3:1d:
3e:de:b9:d9:f4:10:61:14:de:d8:93:6c:77:dc:2d:11:85:d0:
e2:c5:41:0e:13:2f:6d:01:ef:89:69:22:04:fb:91:de:60:d4:
e6:f2:c1:19:78:79:34:ec:c0:36:7f:c6:68:31:be:b9:66:94:
48:21:4c:e8:94:df:27:c8:c4:68:77:10:15:8c:da:ce:74:2d:
7c:9a:3b:a4:bc:78:c9:f6:03:9b:8f:cd:6b:55:78:51:f5:ec:
11:ea:a0:b5:e7:e0:22:ea:95:46:9b:91:a2:4f:89:3c:26:c0:
a6:33:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:29 2026 by rpki-client