Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: Hwp9TIaIE3+WI3D2wU5BHsw6rMhQWhZUWc4upiqVAVw=
Subject key identifier: 9F:D0:8E:4D:66:E0:EE:FF:ED:5E:A9:8C:CC:D4:68:D8:49:66:D7:70
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 019CAAFD0F81F7312800C02864646A2D7936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 08D4
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa (hash: fKvo/tgzhzmSFkdOZO8OEhheB3WyD+MYf7ggWIjBrww=)
2: edt0xmZ0bSGmPNiLP1d_zAw05s8.roa (hash: j624gLbIQ30d5sWbalA5dsbX8f1xaNen+6AY5gXhfxY=)
3: veq3VGflC7EKcyTSV4PLJ0gF_AI.roa (hash: OTH3lPgKfCmDiloxLfi5qPSyfmhULCNeRQ8YV01zMtE=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: QW1V9aF6zekvuBBlNXxosHW29Fi+CQ/3m08LJAusoQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0f:81:f7:31:28:00:c0:28:64:64:6a:2d:79:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=9fd08e4d66e0eeffed5ea98cccd468d84966d770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:12:61:2d:3d:87:fb:19:e7:00:b7:d4:e3:
07:dc:41:f7:ca:11:1e:65:41:b0:c0:94:af:fa:0e:
a8:75:74:c5:ef:94:6c:4a:d4:15:fa:46:31:e4:d7:
8f:6e:bd:7b:a7:64:24:10:1b:25:15:23:6d:18:ca:
2d:f5:64:56:5e:79:bb:6d:a1:81:d2:f2:15:f5:ea:
d8:e1:a8:68:bd:1a:da:e7:9b:db:19:74:ea:45:2a:
a9:cb:4b:c0:93:24:0e:10:4d:96:d4:f6:95:00:7e:
2d:aa:f0:1b:e2:8f:32:d9:64:d5:52:ed:3d:fb:19:
ac:a4:7e:82:89:96:ef:d5:8a:80:82:66:53:fc:26:
01:18:e3:26:f2:d8:c6:c7:c1:fe:d5:7d:3a:b2:cb:
c8:1f:72:45:2e:c6:c0:21:b7:40:a5:d8:8d:62:da:
a2:e6:d7:9a:73:88:41:2c:ab:8b:cb:76:02:f6:41:
cf:13:9c:cc:e7:13:c7:a5:c7:b8:28:16:ed:5f:ea:
12:e3:e5:55:49:75:1b:2a:dd:be:f0:42:89:84:d5:
74:91:19:66:10:00:3d:1d:f7:8a:2f:78:98:d9:26:
34:0c:4a:80:e3:27:d3:6c:78:5a:7b:41:f9:5c:c4:
e1:2d:83:8f:98:ed:92:ef:10:7d:46:a4:ea:2a:45:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D0:8E:4D:66:E0:EE:FF:ED:5E:A9:8C:CC:D4:68:D8:49:66:D7:70
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:12:7c:c9:52:2a:ff:a6:08:84:eb:26:10:0e:f0:90:00:80:
df:f5:b9:81:73:94:d8:57:96:3e:09:dd:66:83:45:bb:56:a4:
28:b5:45:f8:57:fc:15:af:01:02:5f:ee:24:8c:54:a6:d7:e3:
1b:96:9b:8e:6d:96:d1:25:a6:9d:ff:d2:8b:43:8d:4d:3f:22:
44:ed:55:76:84:06:2d:65:ff:fd:40:e7:9f:bc:20:9d:98:2b:
da:6c:9b:f8:c4:bf:25:14:46:ac:cb:3b:5c:b6:80:a8:61:fd:
02:60:3a:0a:ce:6b:52:50:e8:fc:68:2e:e5:2a:70:59:40:c0:
9b:f8:e7:03:99:d7:20:ee:0e:8e:0a:d7:06:41:b5:98:a6:50:
12:a0:e9:d5:e3:51:74:9b:df:90:e6:af:b1:47:d3:23:9d:2f:
c4:bf:2b:b0:5c:50:e9:f3:f0:2c:74:45:fb:69:38:c9:ae:62:
1f:eb:0d:91:80:f9:97:de:89:07:32:48:c2:da:dd:cb:11:89:
63:13:fe:ea:3d:d9:76:38:dd:f7:84:c0:96:f6:e3:bf:42:77:
0c:09:52:dd:04:fc:72:a4:c7:32:d7:6d:a8:7e:93:91:f6:66:
39:0c:15:98:5b:55:b0:7b:a2:65:c9:2d:ea:34:2f:29:9a:89:
02:e7:0e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Q+B9zEoAMAoZGRqLXk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2
NGVjMjAwHhcNMjYwMzAxMjAwMDM3WhcNMjYwMzAyMjAwMDM3WjAzMTEwLwYDVQQD
Eyg5ZmQwOGU0ZDY2ZTBlZWZmZWQ1ZWE5OGNjY2Q0NjhkODQ5NjZkNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfUSYS09h/sZ5wC31OMH3EH3yhEe
ZUGwwJSv+g6odXTF75RsStQV+kYx5NePbr17p2QkEBslFSNtGMot9WRWXnm7baGB
0vIV9erY4ahovRra55vbGXTqRSqpy0vAkyQOEE2W1PaVAH4tqvAb4o8y2WTVUu09
+xmspH6CiZbv1YqAgmZT/CYBGOMm8tjGx8H+1X06ssvIH3JFLsbAIbdApdiNYtqi
5teac4hBLKuLy3YC9kHPE5zM5xPHpce4KBbtX+oS4+VVSXUbKt2+8EKJhNV0kRlm
EAA9HfeKL3iY2SY0DEqA4yfTbHhae0H5XMThLYOPmO2S7xB9RqTqKkU/WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/Qjk1m4O7/7V6pjMzUaNhJZtdwMB8GA1UdIwQY
MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt
ZjJhMmE1ZDUwNDVlLzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl
LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhJ8yVIq
/6YIhOsmEA7wkACA3/W5gXOU2FeWPgndZoNFu1akKLVF+Ff8Fa8BAl/uJIxUptfj
G5abjm2W0SWmnf/Si0ONTT8iRO1VdoQGLWX//UDnn7wgnZgr2myb+MS/JRRGrMs7
XLaAqGH9AmA6Cs5rUlDo/Ggu5SpwWUDAm/jnA5nXIO4OjgrXBkG1mKZQEqDp1eNR
dJvfkOavsUfTI50vxL8rsFxQ6fPwLHRF+2k4ya5iH+sNkYD5l96JBzJIwtrdyxGJ
YxP+6j3Zdjjd94TAlvbjv0J3DAlS3QT8cqTHMtdtqH6TkfZmOQwVmFtVsHuiZckt
6jQvKZqJAucO5Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:34 2026 by rpki-client