Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
File: WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json)
Hash identifier: 8BriQhKpNNuKTBh3+xpvzv2JTlOnHNRdAPMMMNFMnik=
Subject key identifier: 5B:3D:76:05:24:BF:B3:11:EB:8C:3E:C7:17:31:71:42:58:F8:58:D9
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Certificate issuer: /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial: 019CAB34B2D9DBDE23E44BE9FA282C857EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
Manifest number: 09DA
Signing time: Sun 01 Mar 2026 21:01:23 +0000
Manifest this update: Sun 01 Mar 2026 21:01:23 +0000
Manifest next update: Mon 02 Mar 2026 21:01:23 +0000
Files and hashes: 1: BvmBDu9gUylydSFpdWFHr27-_DY.roa (hash: d2SU0ny5FTlBkZIC6ubpt8gy5sJqNewyGcnF2XElBAw=)
2: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: 3p76fq3ifbaPvkklhVopNQq2aqPhb5EgHvkgMQZe4L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b2:d9:db:de:23:e4:4b:e9:fa:28:2c:85:7e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
Validity
Not Before: Mar 1 21:01:23 2026 GMT
Not After : Mar 2 21:01:23 2026 GMT
Subject: CN=5b3d760524bfb311eb8c3ec71731714258f858d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:ec:d7:e7:9d:e5:d8:71:51:1a:65:ad:b9:
60:e0:21:c8:ba:ca:5e:34:56:d5:96:14:89:13:b2:
7c:d3:b5:4c:a8:21:3a:7b:58:77:84:48:cb:da:82:
c6:8f:da:5f:95:98:d3:2b:ed:95:de:84:69:cd:e6:
47:eb:7d:3c:56:57:f5:7e:49:83:b3:1a:6f:48:46:
29:99:8b:c1:db:38:9a:12:c3:2f:28:73:51:5d:49:
f3:dd:cc:0a:12:20:a9:47:d8:fd:da:54:a3:05:61:
c8:15:fa:cb:fc:a3:f1:bb:65:90:f3:42:a0:16:21:
e9:a5:bf:12:17:46:c9:1b:dd:24:69:a1:ab:5e:18:
2f:6f:b0:6c:1d:66:77:37:e5:49:e6:50:45:53:88:
59:8c:82:54:ee:2c:f2:b7:3e:74:d3:04:6d:af:c8:
37:63:c5:fa:6d:4e:f0:82:51:99:dc:ee:d1:57:c0:
b8:cc:c7:f5:93:65:36:34:ad:95:06:9b:23:45:ed:
55:a1:ff:e9:cc:de:ce:1c:ee:1b:3e:f6:a7:f6:d3:
7a:4c:2f:fa:8f:e3:5f:83:27:ab:5a:5f:d4:32:20:
6b:16:e2:57:ff:41:71:7b:3b:26:b3:c8:fd:6c:3a:
a9:9e:6d:16:89:9a:67:29:68:8b:a5:18:e7:78:8b:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:76:05:24:BF:B3:11:EB:8C:3E:C7:17:31:71:42:58:F8:58:D9
X509v3 Authority Key Identifier:
keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:18:79:a0:a9:03:15:ec:dd:bc:2a:89:58:96:95:e5:a1:e0:
70:d8:22:1f:78:a8:f9:3d:2c:7a:39:f0:82:7e:ce:2a:3a:5d:
4f:66:a9:17:1f:21:5e:98:eb:34:da:01:db:a6:3f:54:00:4d:
53:dd:e7:d6:3f:8f:62:57:91:43:0e:e3:ce:7e:3e:10:51:39:
04:7b:d3:05:8c:8b:fd:5b:6a:3b:86:fd:bd:4c:83:b2:43:b5:
ac:99:64:44:f4:51:af:59:db:14:c2:aa:50:5a:55:ad:f8:bc:
77:0a:16:aa:19:2b:8a:86:e6:e2:0f:b9:51:e3:3d:d4:d4:12:
73:cd:0a:4c:fb:70:c3:6d:27:7d:2b:a8:1b:12:13:71:eb:69:
52:b9:1d:76:e0:98:37:56:21:15:cf:66:2a:41:44:2a:77:ff:
fb:4b:97:6a:6d:a0:75:23:ca:69:95:6b:20:ea:86:55:f6:47:
8a:5c:28:4c:08:a3:b1:69:93:a9:45:cb:ea:40:66:fa:87:92:
a1:52:b1:d2:ca:20:bd:0d:c3:f4:dd:c3:be:d1:d2:a7:89:4c:
ae:54:1a:38:96:cf:61:ef:ff:27:50:6f:2d:c5:f9:9e:c9:a8:
82:d7:5c:e3:30:ba:85:71:28:de:93:1e:e4:53:f2:d2:b7:4e:
fa:81:ad:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNLLZ294j5Evp+igshX61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzU4MmJjM2YwYmFkYjY2MWE2OWZiOWE0ODNiMzdlYzkw
NTgyN2UwHhcNMjYwMzAxMjEwMTIzWhcNMjYwMzAyMjEwMTIzWjAzMTEwLwYDVQQD
Eyg1YjNkNzYwNTI0YmZiMzExZWI4YzNlYzcxNzMxNzE0MjU4Zjg1OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27js1+ed5dhxURplrblg4CHIuspe
NFbVlhSJE7J807VMqCE6e1h3hEjL2oLGj9pflZjTK+2V3oRpzeZH6308Vlf1fkmD
sxpvSEYpmYvB2ziaEsMvKHNRXUnz3cwKEiCpR9j92lSjBWHIFfrL/KPxu2WQ80Kg
FiHppb8SF0bJG90kaaGrXhgvb7BsHWZ3N+VJ5lBFU4hZjIJU7izytz500wRtr8g3
Y8X6bU7wglGZ3O7RV8C4zMf1k2U2NK2VBpsjRe1Vof/pzN7OHO4bPvan9tN6TC/6
j+NfgyerWl/UMiBrFuJX/0Fxezsms8j9bDqpnm0WiZpnKWiLpRjneIs06QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFs9dgUkv7MR64w+xxcxcUJY+FjZMB8GA1UdIwQY
MBaAFFl1grw/C622YaafuaSDs37JBYJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hXQ3ZEOExyYlpocHAtNXBJT3pmc2tGZ240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80ODg5OGItZjliNC00NWI0LTk5M2Yt
ZThhMWRjOGUzZmZjLzEvV1hXQ3ZEOExyYlpocHAtNXBJT3pmc2tGZ240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80ODg5OGItZjliNC00NWI0LTk5M2YtZThhMWRjOGUzZmZj
LzEvV1hXQ3ZEOExyYlpocHAtNXBJT3pmc2tGZ240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRh5oKkD
FezdvCqJWJaV5aHgcNgiH3io+T0sejnwgn7OKjpdT2apFx8hXpjrNNoB26Y/VABN
U93n1j+PYleRQw7jzn4+EFE5BHvTBYyL/VtqO4b9vUyDskO1rJlkRPRRr1nbFMKq
UFpVrfi8dwoWqhkriobm4g+5UeM91NQSc80KTPtww20nfSuoGxITcetpUrkdduCY
N1YhFc9mKkFEKnf/+0uXam2gdSPKaZVrIOqGVfZHilwoTAijsWmTqUXL6kBm+oeS
oVKx0sogvQ3D9N3DvtHSp4lMrlQaOJbPYe//J1BvLcX5nsmogtdc4zC6hXEo3pMe
5FPy0rdO+oGt+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:40 2026 by rpki-client