
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: KaLTelT/mWCTpBtPic+0+QX2dNKCPouwXC7AQ4u4bOs=
Subject key identifier: AC:19:A9:8C:2A:44:E2:E8:04:F9:2F:E5:9A:AC:86:51:64:BF:52:30
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019CABA222BFE0534866ACD2995863792119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 0784
Signing time: Sun 01 Mar 2026 23:00:55 +0000
Manifest this update: Sun 01 Mar 2026 23:00:55 +0000
Manifest next update: Mon 02 Mar 2026 23:00:55 +0000
Files and hashes: 1: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (hash: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM=)
2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: isBFDEyTDclLmbY7QrMNF0gzI5ebEoTbMGeoBMOnbbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:22:bf:e0:53:48:66:ac:d2:99:58:63:79:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Mar 1 23:00:55 2026 GMT
Not After : Mar 2 23:00:55 2026 GMT
Subject: CN=ac19a98c2a44e2e804f92fe59aac865164bf5230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:19:a2:c0:6f:c6:13:3a:4a:5a:b8:84:e8:
16:70:cd:9f:54:f4:87:a7:1d:a6:72:cf:66:43:a7:
76:9b:9b:86:53:ce:8a:ff:bb:b0:81:67:30:16:ca:
04:4b:11:f5:b4:91:35:7d:92:3c:74:e8:0c:47:af:
41:36:31:3d:66:36:f9:53:7c:39:4c:b4:d3:14:ca:
e0:05:cb:d5:43:da:2c:ec:1c:3c:f8:e2:35:46:9e:
bf:88:d7:e3:21:52:4b:dd:44:fd:6a:0f:e6:7c:14:
20:8c:a7:0e:79:3e:ca:6c:7c:09:8d:10:74:bd:d6:
13:5d:be:c0:52:4a:23:6f:d6:ef:01:8d:6d:f0:b0:
e3:8e:52:f5:d1:f6:83:f8:eb:02:bd:0f:8c:58:4c:
d9:22:54:8a:79:f9:7e:d1:8d:2b:87:8d:c8:05:dd:
f8:3f:74:e8:95:97:08:c8:ba:d2:d9:cf:72:3c:07:
80:fe:79:f3:3c:e6:02:72:e8:d3:cf:36:11:9a:a3:
a0:14:ca:a0:a6:53:f5:24:fe:bd:50:a5:fa:21:21:
52:2c:7f:63:3d:86:44:54:ff:66:00:6e:8a:d6:3b:
aa:c5:8e:13:64:f8:c5:d8:ad:d2:07:0c:5d:fa:b0:
d8:67:bd:85:9b:67:df:16:ab:12:1e:dd:19:35:9d:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:A9:8C:2A:44:E2:E8:04:F9:2F:E5:9A:AC:86:51:64:BF:52:30
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:86:4e:28:77:a7:2e:a9:03:4e:fb:41:94:ec:83:a0:03:
3b:30:44:6a:b7:67:86:13:d4:2c:ba:91:fd:a2:d5:39:35:0a:
e0:7b:76:02:8d:61:91:35:0c:b5:93:11:ed:57:1f:4d:de:43:
70:b0:57:8f:b8:13:84:a9:1a:26:91:d8:ed:7b:88:ad:c4:5a:
e6:00:8c:d0:0a:7d:0c:12:11:50:bb:8e:d7:97:76:64:e7:f8:
f0:77:ac:be:9b:88:7d:e1:39:ef:5f:74:c7:81:1f:0b:7c:7d:
04:a5:36:fd:ab:22:be:94:ba:ba:e4:4d:c8:6d:aa:bf:c2:df:
77:37:0c:97:5a:03:12:1d:c5:c0:81:b2:60:d1:37:8f:a2:54:
e5:bb:c6:9d:47:38:b2:10:e1:4f:9f:6f:6a:2a:35:c0:eb:c5:
c1:f8:51:3e:da:dd:08:ad:c9:fb:f5:82:a4:9b:da:b4:4d:ce:
1f:d2:47:a5:b7:d2:e3:5e:fe:eb:e7:f7:53:23:af:79:d3:cb:
b3:cb:8f:b2:3a:e2:63:18:ea:ba:5c:6c:00:e9:ff:87:3f:12:
c9:89:1e:25:d7:80:f9:52:fa:a3:26:4d:9c:a9:ce:33:99:a3:
68:6c:02:5c:ec:aa:bd:8b:37:ab:3f:d4:40:a6:ce:99:91:b7:
e9:fb:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:01 2026 by rpki-client