
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: P0ykIZih2cPcLvXQrN4lc0HEdLJEmqY0ByC6mxZo5ms=
Subject key identifier: ED:7A:79:97:15:D0:B1:BE:C7:03:10:AA:95:FE:62:FE:89:F1:73:D9
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019EC0A3ABD94572E83778F56E333699D8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 0898
Signing time: Sat 13 Jun 2026 11:00:12 +0000
Manifest this update: Sat 13 Jun 2026 11:00:12 +0000
Manifest next update: Sun 14 Jun 2026 11:00:12 +0000
Files and hashes: 1: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (hash: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM=)
2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: 1JsUFaIHYIwaq7vqXPsyGgGZyyqYDXW9wgsRyW6qet4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:ab:d9:45:72:e8:37:78:f5:6e:33:36:99:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Jun 13 11:00:12 2026 GMT
Not After : Jun 14 11:00:12 2026 GMT
Subject: CN=ed7a799715d0b1bec70310aa95fe62fe89f173d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:74:9c:87:f3:53:a4:d0:52:a2:ae:d3:3e:
a2:51:93:14:cf:67:6a:08:58:2c:26:b3:f9:bc:48:
43:13:d5:95:13:fe:20:76:ad:ae:11:1f:ea:09:d1:
6c:42:83:3f:a5:b4:47:54:ea:7a:41:79:77:19:31:
fc:5f:68:8b:23:e0:06:bc:df:b7:06:d0:57:83:2f:
09:fc:b0:5f:c1:b3:e1:2c:a2:c4:ca:a3:dd:e3:cb:
28:dd:6c:14:4e:c3:3e:42:6a:b1:7d:b5:28:5e:ec:
d3:fd:57:de:fd:08:c3:0d:47:3d:bc:53:cc:4a:3d:
17:41:05:eb:27:58:e8:05:19:33:64:ff:45:6e:80:
b4:ed:ce:3d:64:45:64:1c:85:ba:28:d3:a9:87:2d:
e6:71:4e:92:f5:91:41:77:de:ae:6b:70:f0:99:40:
8f:e9:12:1d:36:78:8d:bb:f4:6a:8e:12:93:af:94:
49:16:6a:a7:85:2d:1e:e6:9b:d3:c6:d0:01:99:a3:
9d:e3:d6:17:06:0d:08:a0:1c:22:62:69:ce:a8:ff:
76:fa:75:7c:c7:76:09:df:06:6e:72:ca:87:5d:1a:
48:d8:b7:20:99:9b:9a:34:c5:ac:dc:b5:b0:12:16:
7e:b3:f7:d5:3a:06:72:3b:c7:13:e0:af:fb:49:0a:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:79:97:15:D0:B1:BE:C7:03:10:AA:95:FE:62:FE:89:F1:73:D9
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9f:ff:cf:a4:f8:1e:d9:43:56:46:7e:5b:56:99:42:7d:07:
44:f9:82:d3:25:ad:57:3c:66:92:52:c0:c6:16:78:a5:eb:95:
e1:e9:91:90:0b:66:43:c5:32:75:ba:9e:60:99:66:a0:68:ad:
d1:4d:8a:08:53:51:56:6d:ee:10:f8:7d:69:c8:09:70:da:96:
53:29:6c:17:32:38:da:9c:94:a7:c4:5d:8c:d0:ce:75:d9:0c:
3f:73:ea:8e:2f:b8:9d:c6:ea:21:4d:bd:0f:2f:b1:2c:8d:7f:
bc:b7:03:3b:0e:58:a4:e1:93:73:ea:a9:38:03:5d:49:b6:40:
11:87:45:11:d5:74:42:f0:42:44:06:24:ac:08:3b:1a:ae:e7:
f4:75:e3:44:39:16:3d:cd:67:40:90:d6:fd:ed:b6:5a:70:75:
6f:7d:2c:33:0b:19:c1:48:6c:c0:ec:c6:43:77:ec:02:95:59:
d4:a6:30:84:00:ee:15:16:ae:90:47:9e:d5:65:f9:c4:59:d4:
cc:b1:b7:ea:f2:38:00:a6:4e:d7:51:fd:5b:0d:f7:1b:62:0b:
df:f1:9e:d7:15:33:3c:2c:6a:9e:1c:4b:bb:6b:a0:05:03:12:
f6:59:fa:3e:37:8e:67:71:77:e2:a2:2a:16:04:7d:95:87:ec:
1f:50:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:17 2026 by rpki-client