
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
File: WA7nOx5qibTvUVvGfcmBcpak2Ks.mft (raw, json)
Hash identifier: AjoRsoGAIdT3Qx6l+YMjyf9voPR/ovGUAEA7hqKWP2g=
Subject key identifier: 2F:B9:1D:1B:0A:1F:B2:E1:EE:50:E6:CB:D9:80:82:29:8A:D9:A5:B3
Authority key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
Certificate issuer: /CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Certificate serial: 019CAAC6964CE79201258877A40CC5E55785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
Manifest number: 74
Signing time: Sun 01 Mar 2026 19:01:07 +0000
Manifest this update: Sun 01 Mar 2026 19:01:07 +0000
Manifest next update: Mon 02 Mar 2026 19:01:07 +0000
Files and hashes: 1: 1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa (hash: avI9enOgnl+yynJNmVDI/bPieULR/2YL8z47OvnAoGM=)
2: UA7MZYc-czHZyAm_jTZP6uIdkoc.roa (hash: y/+93xNILFZI2eCu1XR1bZH6lI5t/EYB1r4ioe1Vzp8=)
3: WA7nOx5qibTvUVvGfcmBcpak2Ks.crl (hash: ovlgwfgvZzC3SKr1YEi3KVXkvkbrd9hfTIaI0tkffTY=)
4: mJY88gnCtE0_lJEMctYDc3XreZc.roa (hash: dILiJ64ptgJlU6ZR8SsCAYYl2fBgysDyRuWNcNNxdXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:96:4c:e7:92:01:25:88:77:a4:0c:c5:e5:57:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Validity
Not Before: Mar 1 19:01:07 2026 GMT
Not After : Mar 2 19:01:07 2026 GMT
Subject: CN=2fb91d1b0a1fb2e1ee50e6cbd98082298ad9a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:52:72:f5:27:45:28:f7:52:74:16:2a:3e:
51:89:84:9e:60:65:81:38:b6:1e:fb:74:b1:f0:61:
2a:77:9f:1c:2e:a5:ad:87:52:06:6b:67:5f:ef:49:
ea:ed:1a:61:23:9c:19:dc:c6:64:85:23:28:5c:7f:
44:69:e8:02:5b:81:4f:1e:1a:f9:22:09:e4:16:af:
78:16:b0:55:e5:96:2f:9d:4f:c1:d1:02:21:01:6a:
f9:62:fc:b3:4c:16:17:c7:a1:63:2d:8d:90:58:13:
e0:24:2d:56:67:40:cd:f9:d5:71:0c:98:32:8f:9a:
30:be:6f:e7:b5:d6:cd:83:fa:10:b3:4a:55:4c:02:
4d:a6:74:33:de:80:e3:83:14:b1:dd:9c:73:49:69:
a7:16:a0:7a:76:b9:c6:ce:95:ab:5f:4f:1c:0a:06:
5d:88:4c:09:72:51:9d:4d:30:0e:ac:b2:58:28:61:
f8:dd:e2:5b:4b:66:0f:57:95:20:53:e9:7b:48:89:
85:7d:36:63:fb:1a:f3:45:06:04:72:25:84:32:81:
69:2e:98:0d:2d:d2:d6:34:ff:f3:0a:56:3f:1d:51:
9c:32:59:b2:b4:02:d0:35:35:71:c2:b7:c2:da:f4:
4d:7d:29:dd:58:ed:cd:d8:80:98:f0:36:34:1d:de:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B9:1D:1B:0A:1F:B2:E1:EE:50:E6:CB:D9:80:82:29:8A:D9:A5:B3
X509v3 Authority Key Identifier:
keyid:58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fc:d0:8a:51:5c:8d:f7:1e:e0:4b:f7:81:8a:a6:bb:cc:95:
30:ea:9d:e0:d5:ae:a7:d7:86:0f:f5:52:11:47:d9:32:8c:7a:
16:f4:cf:e8:fc:22:55:a8:c5:21:23:96:f7:72:a7:45:41:46:
c1:3c:65:6c:05:ce:11:03:1c:76:cd:c7:91:dc:a6:5b:55:ca:
75:f6:87:7a:73:1a:f2:66:4a:01:ad:9e:0b:a2:98:36:15:d3:
28:ff:6a:11:29:0a:0c:1c:bd:ed:76:68:a1:69:b2:b4:f3:81:
38:9a:3b:93:bc:10:91:e2:78:80:ab:93:74:0e:e8:13:07:55:
a2:fe:2f:94:0e:eb:52:a0:fc:6a:1b:82:af:ff:dd:48:18:c3:
78:e5:fe:38:91:e7:1f:07:62:2d:69:b4:a0:4d:61:69:3a:3b:
09:ca:ac:fb:ac:63:2b:14:1a:e2:f3:8c:72:3d:7e:ea:a3:ee:
1e:ee:fd:ee:1a:eb:8f:78:a8:83:89:b4:e4:9c:5b:d5:2d:38:
78:eb:4a:6b:c8:57:1f:2d:25:44:1c:c1:c3:ee:80:90:e2:6e:
d0:cd:2d:65:f9:d2:f6:3d:49:38:25:c7:a6:9f:6a:53:aa:ab:
05:35:b4:0c:bc:d4:75:cb:1d:65:8f:3f:31:d5:c2:81:4c:51:
93:13:c5:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxpZM55IBJYh3pAzF5VeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGVlNzNiMWU2YTg5YjRlZjUxNWJjNjdkYzk4MTcyOTZh
NGQ4YWIwHhcNMjYwMzAxMTkwMTA3WhcNMjYwMzAyMTkwMTA3WjAzMTEwLwYDVQQD
EygyZmI5MWQxYjBhMWZiMmUxZWU1MGU2Y2JkOTgwODIyOThhZDlhNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSZScvUnRSj3UnQWKj5RiYSeYGWB
OLYe+3Sx8GEqd58cLqWth1IGa2df70nq7RphI5wZ3MZkhSMoXH9EaegCW4FPHhr5
IgnkFq94FrBV5ZYvnU/B0QIhAWr5YvyzTBYXx6FjLY2QWBPgJC1WZ0DN+dVxDJgy
j5owvm/ntdbNg/oQs0pVTAJNpnQz3oDjgxSx3ZxzSWmnFqB6drnGzpWrX08cCgZd
iEwJclGdTTAOrLJYKGH43eJbS2YPV5UgU+l7SImFfTZj+xrzRQYEciWEMoFpLpgN
LdLWNP/zClY/HVGcMlmytALQNTVxwrfC2vRNfSndWO3N2ICY8DY0Hd6IKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+5HRsKH7Lh7lDmy9mAgimK2aWzMB8GA1UdIwQY
MBaAFFgO5zseaom071Fbxn3JgXKWpNirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0E3bk94NXFpYlR2VVZ2R2ZjbUJjcGFrMktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xNDRjMTgtOWU5ZS00ZTgxLTliYmIt
ZmE2YTE4NzViOTQ3LzEvV0E3bk94NXFpYlR2VVZ2R2ZjbUJjcGFrMktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xNDRjMTgtOWU5ZS00ZTgxLTliYmItZmE2YTE4NzViOTQ3
LzEvV0E3bk94NXFpYlR2VVZ2R2ZjbUJjcGFrMktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvzQilFc
jfce4Ev3gYqmu8yVMOqd4NWup9eGD/VSEUfZMox6FvTP6PwiVajFISOW93KnRUFG
wTxlbAXOEQMcds3HkdymW1XKdfaHenMa8mZKAa2eC6KYNhXTKP9qESkKDBy97XZo
oWmytPOBOJo7k7wQkeJ4gKuTdA7oEwdVov4vlA7rUqD8ahuCr//dSBjDeOX+OJHn
HwdiLWm0oE1haTo7Ccqs+6xjKxQa4vOMcj1+6qPuHu797hrrj3iog4m05Jxb1S04
eOtKa8hXHy0lRBzBw+6AkOJu0M0tZfnS9j1JOCXHpp9qU6qrBTW0DLzUdcsdZY8/
MdXCgUxRkxPFWw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:31 2026 by rpki-client