Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: mV8dB6fFkDDBZP6hG6YHEQxnk2zo8/hhtajotgear9Y=
Subject key identifier: 28:D9:FD:27:C8:C3:D1:EF:75:F1:42:E2:B7:E9:91:86:7D:4A:D1:34
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019FAC3EF0C3897219B9583DF662F7F03AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 0912
Signing time: Wed 29 Jul 2026 05:00:33 +0000
Manifest this update: Wed 29 Jul 2026 05:00:33 +0000
Manifest next update: Thu 30 Jul 2026 05:00:33 +0000
Files and hashes: 1: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (hash: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM=)
2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: vtpyBvfQPLu35wJ4TTLt+l2CWAoWCrnU9hwzu9At7Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:f0:c3:89:72:19:b9:58:3d:f6:62:f7:f0:3a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Jul 29 05:00:33 2026 GMT
Not After : Jul 30 05:00:33 2026 GMT
Subject: CN=28d9fd27c8c3d1ef75f142e2b7e991867d4ad134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:b2:11:bc:31:97:76:37:de:d8:67:b0:19:
18:98:2a:9d:66:51:ec:58:d3:f3:fd:3b:af:80:e6:
a5:20:5b:eb:c0:e0:c7:dd:1f:25:82:9a:b4:84:e4:
bd:d8:31:59:28:d3:e8:63:7d:9e:ee:11:b1:ac:4b:
ee:6c:51:92:16:12:d3:73:bc:bf:45:82:e3:fc:a5:
18:07:d1:a9:c3:65:00:a7:e8:e1:84:a0:31:52:bd:
f9:86:f1:a6:98:2a:b5:49:83:da:b0:02:f6:47:5a:
7e:34:c5:36:78:63:13:ba:7e:f4:52:06:3e:36:1b:
4a:86:2e:f1:33:b4:9c:5d:f9:4e:d8:ef:48:72:ac:
e9:be:19:76:d1:48:f3:5a:34:79:d5:44:7e:58:1a:
80:4f:28:df:18:84:e1:f2:d7:2e:3f:75:f6:ca:be:
d8:21:af:3c:f2:f5:f6:f7:0c:77:67:90:bc:28:e6:
71:81:c6:14:b5:3e:47:fa:9b:2c:45:a5:ff:a0:7d:
6e:fe:04:0d:c8:dd:71:d2:61:7d:28:f4:6c:ce:4b:
00:f8:fa:9b:d5:ba:68:2e:89:cc:c4:b4:46:f6:f0:
fa:00:af:3e:5b:75:52:88:7f:30:5c:45:78:cc:a4:
b6:31:9b:54:1e:26:ca:ac:57:46:bb:b7:71:8c:fc:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:FD:27:C8:C3:D1:EF:75:F1:42:E2:B7:E9:91:86:7D:4A:D1:34
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d9:dc:73:5d:a1:22:9e:eb:d4:c6:44:2b:43:a5:d2:83:39:
cd:23:7a:ec:a1:55:f4:72:08:8e:f9:b2:14:84:31:9f:01:db:
79:a3:d8:c9:7c:ad:ab:a0:1e:94:10:38:26:f2:29:0a:f2:31:
7d:91:df:56:e4:51:dc:19:7e:4e:8a:d9:81:8f:93:b2:fb:dc:
41:1d:81:4d:5f:28:30:00:77:ff:b0:90:d8:43:36:5b:5c:2f:
6f:ba:d9:90:62:7a:f9:15:81:2f:33:8b:5e:66:2e:19:69:ca:
4e:59:bb:11:c1:ad:2d:e9:6f:28:91:36:cf:42:09:a5:89:83:
0f:67:54:1b:24:05:89:df:2c:94:86:f0:32:55:fb:15:30:d8:
01:c0:bd:90:94:7d:71:43:d3:9d:5a:46:57:ac:42:3e:2f:d5:
72:5d:68:22:5d:05:e3:25:13:4a:44:b0:0e:3e:a5:4e:24:f6:
0e:9b:42:d5:13:41:35:c0:14:80:75:6a:1e:b3:ca:ef:dd:cb:
dd:00:93:c9:6c:70:a4:65:6c:27:ab:ce:69:e1:85:6a:f2:00:
bd:b8:65:32:ee:d4:64:7d:87:41:98:d4:e4:d0:bf:b2:9e:fc:
9f:96:fa:8f:da:39:c5:07:d9:5f:b0:4b:f1:81:c3:f5:e1:fc:
ea:ab:bc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:32 2026 by rpki-client