Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: vZpFJ5CLivcuxKHhtiZIp0AVGdvl+uXjPsCObd/FZEs=
Subject key identifier: BB:B8:C8:3D:44:A1:8F:8B:1B:F1:9A:CD:32:6B:44:95:21:6E:74:8A
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 019CADFE60A7F56D2FBFD79AE87DC7D07BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 17F2
Signing time: Mon 02 Mar 2026 10:00:55 +0000
Manifest this update: Mon 02 Mar 2026 10:00:55 +0000
Manifest next update: Tue 03 Mar 2026 10:00:55 +0000
Files and hashes: 1: MQ6sWToCB3mumMKgqU-7hS8fOpI.roa (hash: xhgcVHl7BJsW6MydRWNrXzoXNfS0GYn0WspMbhtJ6Ns=)
2: UGUSM9hVA7KNGP7ZI953Rb9GwC4.roa (hash: fiNb23qzbYBvgPKusu1s3CPZalyy1OSv2RbVYQYIa5Y=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: pEioHUrm1sAZ5X5pndY1B38T5o9rtjz5K2duSxow1Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:60:a7:f5:6d:2f:bf:d7:9a:e8:7d:c7:d0:7b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Mar 2 10:00:55 2026 GMT
Not After : Mar 3 10:00:55 2026 GMT
Subject: CN=bbb8c83d44a18f8b1bf19acd326b4495216e748a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:04:96:c6:f5:a2:ad:ef:4a:5e:2c:33:c4:24:
d9:59:b3:7d:35:79:bf:d5:c5:dc:02:ee:be:49:c5:
d9:9e:72:62:90:a2:53:9c:27:28:39:a0:03:61:0c:
a2:ce:60:89:54:b8:5c:ce:de:eb:be:04:2b:18:f8:
58:1c:cd:47:7e:a8:0d:c4:d6:6d:75:aa:cb:fb:a2:
96:39:23:b2:1e:8c:94:17:0f:c3:2c:61:c0:da:98:
d2:3c:e8:ef:be:45:8d:30:bc:8d:53:57:a3:a4:b7:
fd:35:bf:5d:20:e1:9c:cf:a1:de:5f:3e:72:ed:76:
fd:72:e0:d9:9b:4d:45:01:66:ac:6d:7e:4a:6f:d5:
74:b4:a5:42:bb:ff:1a:7f:4c:e1:a5:bc:af:17:ac:
5c:5a:73:06:6e:41:8a:37:03:b9:39:c6:88:27:85:
54:b2:90:48:0e:81:4f:ec:53:a0:d5:75:7c:91:ee:
ed:c3:ae:a8:28:c1:d7:42:4d:e5:df:40:b4:36:55:
37:f1:82:f1:d8:65:48:28:02:2d:d5:9a:6d:77:93:
91:22:42:fa:e4:f5:25:4d:31:af:1d:43:08:c4:e4:
52:de:a4:38:56:ca:54:01:be:f0:fe:87:12:31:9e:
7b:fe:7e:bb:6b:db:47:5a:68:fe:93:50:25:00:9e:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:C8:3D:44:A1:8F:8B:1B:F1:9A:CD:32:6B:44:95:21:6E:74:8A
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:44:b9:8e:39:17:e6:fc:97:14:a6:4a:74:3b:87:28:ed:9a:
6e:5a:6e:ba:b3:4b:bf:79:18:ba:8f:32:8f:ed:af:0c:a7:e3:
b2:a3:33:9d:5f:bf:c5:20:ee:29:7d:78:cc:88:8c:96:ec:92:
96:8c:05:4c:b5:19:f7:7b:2b:d2:21:49:a5:f1:52:77:53:b7:
01:87:a3:1d:b7:2e:2d:8f:44:0b:2b:f8:6b:a0:e7:1a:4b:46:
13:04:0f:cc:ab:bd:51:81:2e:0b:d6:a7:96:c7:b7:0e:f4:63:
e5:c9:66:5a:03:d6:f5:38:41:11:fc:f7:95:e7:4b:55:c0:48:
4c:62:8f:96:26:87:f1:9b:5d:da:28:22:74:d5:55:b2:dc:e0:
b7:71:5f:71:6d:8c:45:ed:90:e5:96:21:ad:a9:96:27:c5:de:
85:0f:6a:8c:35:32:af:0f:59:14:5c:a4:e6:9f:8a:70:f8:0a:
76:24:70:89:7c:ae:8d:d1:2d:fd:c9:a9:bb:9e:56:10:c2:3f:
94:3c:51:79:b8:46:fd:a8:03:82:eb:12:cb:f2:95:b8:1e:b2:
f6:e6:19:5f:73:df:5a:c4:d9:1f:5a:cc:be:1d:15:ce:4f:e5:
1b:5d:bc:fa:12:b3:3e:73:d4:c1:da:8a:3e:3c:c8:2d:c4:9a:
57:e0:be:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/mCn9W0vv9ea6H3H0HupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNTEwYThhNTI1ZGM5YjFlYzBiMTU2MGQwOTBhNjQyNjhk
NDJlYzQwHhcNMjYwMzAyMTAwMDU1WhcNMjYwMzAzMTAwMDU1WjAzMTEwLwYDVQQD
EyhiYmI4YzgzZDQ0YTE4ZjhiMWJmMTlhY2QzMjZiNDQ5NTIxNmU3NDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gSWxvWire9KXiwzxCTZWbN9NXm/
1cXcAu6+ScXZnnJikKJTnCcoOaADYQyizmCJVLhczt7rvgQrGPhYHM1HfqgNxNZt
darL+6KWOSOyHoyUFw/DLGHA2pjSPOjvvkWNMLyNU1ejpLf9Nb9dIOGcz6HeXz5y
7Xb9cuDZm01FAWasbX5Kb9V0tKVCu/8af0zhpbyvF6xcWnMGbkGKNwO5OcaIJ4VU
spBIDoFP7FOg1XV8ke7tw66oKMHXQk3l30C0NlU38YLx2GVIKAIt1Zptd5ORIkL6
5PUlTTGvHUMIxORS3qQ4VspUAb7w/ocSMZ57/n67a9tHWmj+k1AlAJ71NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu4yD1EoY+LG/GazTJrRJUhbnSKMB8GA1UdIwQY
MBaAFMJRCopSXcmx7AsVYNCQpkJo1C7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODct
OWE4OTU0NjdkYTg1LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODctOWE4OTU0NjdkYTg1
LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkS5jjkX
5vyXFKZKdDuHKO2ablpuurNLv3kYuo8yj+2vDKfjsqMznV+/xSDuKX14zIiMluyS
lowFTLUZ93sr0iFJpfFSd1O3AYejHbcuLY9ECyv4a6DnGktGEwQPzKu9UYEuC9an
lse3DvRj5clmWgPW9ThBEfz3ledLVcBITGKPliaH8Ztd2igidNVVstzgt3FfcW2M
Re2Q5ZYhramWJ8XehQ9qjDUyrw9ZFFyk5p+KcPgKdiRwiXyujdEt/cmpu55WEMI/
lDxRebhG/agDgusSy/KVuB6y9uYZX3PfWsTZH1rMvh0Vzk/lG128+hKzPnPUwdqK
PjzILcSaV+C+0A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:50 2026 by rpki-client