Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: J1EIbwvYEiemVaihO8WHZpUXVTm0GVbN3+aC5Bn/z94=
Subject key identifier: 12:4C:72:0D:DD:15:4A:37:F3:79:8F:64:5A:DE:D9:16:7B:DC:F5:D3
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019CAC0FF5C737B93F8148728F545D80379A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 03B0
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: 7wINIhRe030vHslgnqmy0LRX56ensvX4+crc+l3uj0w=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f5:c7:37:b9:3f:81:48:72:8f:54:5d:80:37:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=124c720ddd154a37f3798f645aded9167bdcf5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:34:d9:e2:93:69:7c:80:76:84:0d:d3:8e:
86:f5:80:3d:94:ed:06:8d:4b:47:c7:69:1a:e6:c0:
32:08:48:1d:27:01:10:d1:1a:4f:96:c8:ec:31:11:
94:fd:b9:f2:72:0a:02:ef:6c:22:f8:30:88:0a:40:
eb:fa:ea:32:fc:d2:98:81:4b:a1:10:f3:66:3a:d9:
2d:ac:1e:7b:41:8d:a5:bb:61:d6:c4:21:6d:90:2e:
91:57:68:0f:99:b8:f9:40:7b:13:9c:6f:50:e2:1a:
4a:86:0a:02:18:61:4f:e4:c8:5f:aa:ef:0e:0b:6e:
ba:ac:bb:47:1f:a9:29:17:df:3b:02:3a:c1:56:b5:
8c:c8:8b:ae:c0:fd:aa:04:9c:4b:83:e5:f0:a1:b1:
5e:65:c6:e1:fc:98:e6:e0:b9:19:ce:53:7a:5d:88:
94:85:12:49:34:13:58:6f:9f:dc:e4:0c:d8:2d:c3:
24:63:e0:bc:71:a0:d1:46:6c:6a:67:c1:ab:46:f2:
96:e8:d8:f6:af:4e:fd:0e:7e:c7:fd:04:20:1f:da:
e9:45:7e:fb:87:60:9b:cb:ea:29:5d:28:6e:84:67:
9a:4f:08:1f:05:df:a6:9c:d1:22:4e:a5:0c:94:b5:
2f:a8:d8:8c:1b:c4:6d:3a:3d:df:db:6d:22:3f:e0:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4C:72:0D:DD:15:4A:37:F3:79:8F:64:5A:DE:D9:16:7B:DC:F5:D3
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:12:d6:e5:02:72:1c:98:a5:0b:98:70:e9:29:92:19:8f:b5:
e8:87:2f:a9:a6:b8:3b:bb:5c:51:8a:64:3a:1f:55:92:f5:87:
9c:f1:2a:44:3e:7c:6d:09:8c:98:56:6d:2f:55:0c:ac:e3:ab:
ee:1a:4b:0b:07:e4:4f:3f:e6:a9:f2:c7:c8:56:51:5f:ef:c4:
96:6c:52:e5:91:ca:0d:e1:9b:48:ff:9c:93:7f:82:89:bf:fe:
66:79:dd:06:32:0e:f8:ff:c8:0b:73:0e:4c:66:e5:f5:c0:a8:
4c:4a:30:71:18:aa:f7:22:5d:a4:50:62:4b:66:cc:85:8e:90:
28:de:d2:1e:55:25:6e:1e:ed:71:a1:43:2e:8f:b0:ad:f5:0a:
ad:52:19:46:dc:3a:e6:09:69:82:dd:b3:30:cf:23:61:59:6c:
c1:37:69:99:48:22:05:0d:5a:39:27:e1:cd:99:ef:9c:6f:d9:
38:10:56:c1:41:46:89:06:bc:c6:84:b8:a4:2e:51:d6:28:26:
ab:72:90:dd:7a:2a:78:6b:3f:0c:2b:22:35:38:97:4f:71:70:
6c:00:5c:b0:4b:ea:94:cd:2a:52:dd:90:41:d6:93:c6:20:f6:
db:e5:3d:9e:6f:9f:f5:ef:aa:76:57:3f:40:ee:7a:01:ca:0d:
84:8c:3c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD/XHN7k/gUhyj1RdgDeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw
N2ExMjIwHhcNMjYwMzAyMDEwMDUyWhcNMjYwMzAzMDEwMDUyWjAzMTEwLwYDVQQD
EygxMjRjNzIwZGRkMTU0YTM3ZjM3OThmNjQ1YWRlZDkxNjdiZGNmNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0k02eKTaXyAdoQN046G9YA9lO0G
jUtHx2ka5sAyCEgdJwEQ0RpPlsjsMRGU/bnycgoC72wi+DCICkDr+uoy/NKYgUuh
EPNmOtktrB57QY2lu2HWxCFtkC6RV2gPmbj5QHsTnG9Q4hpKhgoCGGFP5Mhfqu8O
C266rLtHH6kpF987AjrBVrWMyIuuwP2qBJxLg+XwobFeZcbh/Jjm4LkZzlN6XYiU
hRJJNBNYb5/c5AzYLcMkY+C8caDRRmxqZ8GrRvKW6Nj2r079Dn7H/QQgH9rpRX77
h2Cby+opXShuhGeaTwgfBd+mnNEiTqUMlLUvqNiMG8RtOj3f220iP+BctQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJMcg3dFUo383mPZFre2RZ73PXTMB8GA1UdIwQY
MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt
YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh
LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBLW5QJy
HJilC5hw6SmSGY+16Icvqaa4O7tcUYpkOh9VkvWHnPEqRD58bQmMmFZtL1UMrOOr
7hpLCwfkTz/mqfLHyFZRX+/ElmxS5ZHKDeGbSP+ck3+Cib/+ZnndBjIO+P/IC3MO
TGbl9cCoTEowcRiq9yJdpFBiS2bMhY6QKN7SHlUlbh7tcaFDLo+wrfUKrVIZRtw6
5glpgt2zMM8jYVlswTdpmUgiBQ1aOSfhzZnvnG/ZOBBWwUFGiQa8xoS4pC5R1igm
q3KQ3XoqeGs/DCsiNTiXT3FwbABcsEvqlM0qUt2QQdaTxiD22+U9nm+f9e+qdlc/
QO56AcoNhIw8Pw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:53 2026 by rpki-client