Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json)
Hash identifier: T+ERlzHPNU9LTIp9b1sePON9FvcH4sNxAbUcSSy8w8I=
Subject key identifier: 4D:17:56:BB:30:28:26:C3:44:A0:8B:4B:57:73:36:A7:6C:01:C0:A8
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 019CAEA3605770026FBDFD2CFA9520371A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
Manifest number: 0B68
Signing time: Mon 02 Mar 2026 13:01:08 +0000
Manifest this update: Mon 02 Mar 2026 13:01:08 +0000
Manifest next update: Tue 03 Mar 2026 13:01:08 +0000
Files and hashes: 1: Mkx5QqJBBdzFi4K_8jHAK9jxROo.roa (hash: /xYXG6nHZmfuKlJ26GtGjcJ2e4BfFGtrbLlscDJbCtk=)
2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: +HmG+WDDCBF+gfr/FL77j9u9vde+6LVeq6RC+wPWp+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:60:57:70:02:6f:bd:fd:2c:fa:95:20:37:1a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Mar 2 13:01:08 2026 GMT
Not After : Mar 3 13:01:08 2026 GMT
Subject: CN=4d1756bb302826c344a08b4b577336a76c01c0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:05:75:20:19:06:e7:c7:a7:32:49:0c:47:
d5:82:ff:ee:00:c4:ce:1d:9e:57:88:f7:2e:db:2a:
ce:c8:d1:4f:40:f0:bb:6d:33:c6:94:45:fd:09:0f:
88:bd:23:c1:15:3a:b0:25:65:9c:25:22:92:22:13:
31:f4:52:44:f2:d8:d7:97:1a:f7:83:85:38:ae:24:
c0:60:87:36:db:56:30:d6:73:4e:aa:45:5e:95:f8:
ff:d7:fb:9d:03:d9:91:70:ba:1a:2b:41:91:ee:43:
2e:0a:47:76:8f:12:70:6d:21:30:73:5f:f3:b5:9b:
35:17:11:8d:2a:12:bf:ca:91:bb:e4:b2:7a:7f:1e:
c4:8d:04:b5:2e:a8:15:87:ae:07:a2:1c:bd:1a:a0:
5a:1d:46:4d:a5:71:21:9a:db:5d:77:db:94:34:f6:
19:7b:dc:9b:b6:b6:01:c9:4f:ea:ec:33:74:c2:b9:
55:40:5d:42:b8:ea:ec:8e:d8:2a:a1:6b:00:dd:97:
c1:bc:44:b8:fc:8b:20:0b:0a:2d:68:cf:e1:7e:21:
ad:8d:14:c6:be:26:30:af:56:de:1e:2a:3c:4a:9b:
00:df:64:84:c4:ba:43:75:61:f3:90:16:d0:36:a2:
d9:ca:1e:2e:c4:ed:d8:f3:11:06:ca:99:dd:c9:d1:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:56:BB:30:28:26:C3:44:A0:8B:4B:57:73:36:A7:6C:01:C0:A8
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:19:04:b4:db:e0:62:34:49:12:09:5e:e2:0c:b7:25:9a:66:
82:12:dc:5e:0d:fb:65:7f:f4:36:00:87:4a:e9:7d:99:4c:74:
1a:fe:00:de:fc:49:e0:87:18:cc:b8:a6:95:0a:10:9f:e4:72:
3b:83:41:a4:70:1a:e0:87:05:35:7b:c3:04:64:3f:be:73:55:
35:fc:4f:c9:29:37:5d:21:3f:6e:c4:63:dc:01:de:0c:62:63:
a4:61:dd:cf:62:b3:96:e6:b4:1a:2e:29:0c:b4:a4:e0:28:5f:
0c:e5:45:df:fc:40:62:a4:ae:60:f5:e4:d5:ea:2c:6c:24:68:
59:9b:92:06:6b:a1:40:2f:9e:d5:27:66:ee:70:ca:10:c7:7d:
c9:40:a8:f5:3a:61:3c:17:e0:aa:b6:ce:de:15:b2:14:d4:e4:
2f:51:11:ec:1a:25:9a:13:48:84:e8:26:1d:fa:23:df:6a:a1:
70:4a:60:09:b9:71:04:46:71:b7:41:81:0c:25:62:86:a3:bb:
ec:45:98:1a:0a:04:c6:1f:fd:6f:25:d5:37:50:d1:33:33:33:
37:db:71:a8:aa:6e:1b:fc:f2:ac:89:0d:88:5d:69:f4:db:40:
e3:51:12:1a:ff:70:a7:ab:87:3a:26:35:9f:96:4d:5f:39:bb:
18:83:50:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo2BXcAJvvf0s+pUgNxoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYjMyZjIxZjI4OTJiZTdjNGJjZDdlZTEwNmYwMTlhNmRl
ODg3MDcwHhcNMjYwMzAyMTMwMTA4WhcNMjYwMzAzMTMwMTA4WjAzMTEwLwYDVQQD
Eyg0ZDE3NTZiYjMwMjgyNmMzNDRhMDhiNGI1NzczMzZhNzZjMDFjMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR8FdSAZBufHpzJJDEfVgv/uAMTO
HZ5XiPcu2yrOyNFPQPC7bTPGlEX9CQ+IvSPBFTqwJWWcJSKSIhMx9FJE8tjXlxr3
g4U4riTAYIc221Yw1nNOqkVelfj/1/udA9mRcLoaK0GR7kMuCkd2jxJwbSEwc1/z
tZs1FxGNKhK/ypG75LJ6fx7EjQS1LqgVh64Hohy9GqBaHUZNpXEhmttdd9uUNPYZ
e9ybtrYByU/q7DN0wrlVQF1CuOrsjtgqoWsA3ZfBvES4/IsgCwotaM/hfiGtjRTG
viYwr1beHio8SpsA32SExLpDdWHzkBbQNqLZyh4uxO3Y8xEGypndydFEvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0XVrswKCbDRKCLS1dzNqdsAcCoMB8GA1UdIwQY
MBaAFMGzLyHyiSvnxLzX7hBvAZpt6IcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTkt
Njg1ZGRiNjU1NTZmLzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTktNjg1ZGRiNjU1NTZm
LzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhkEtNvg
YjRJEgle4gy3JZpmghLcXg37ZX/0NgCHSul9mUx0Gv4A3vxJ4IcYzLimlQoQn+Ry
O4NBpHAa4IcFNXvDBGQ/vnNVNfxPySk3XSE/bsRj3AHeDGJjpGHdz2Kzlua0Gi4p
DLSk4ChfDOVF3/xAYqSuYPXk1eosbCRoWZuSBmuhQC+e1Sdm7nDKEMd9yUCo9Tph
PBfgqrbO3hWyFNTkL1ER7BolmhNIhOgmHfoj32qhcEpgCblxBEZxt0GBDCVihqO7
7EWYGgoExh/9byXVN1DRMzMzN9txqKpuG/zyrIkNiF1p9NtA41ESGv9wp6uHOiY1
n5ZNXzm7GINQKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:08 2026 by rpki-client