Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: f27jhR/oDjf6aIffdA/KY+xxm1EORxJojZzSBcWWh9M=
Subject key identifier: F1:6F:42:C2:63:C0:3B:EA:60:29:A3:1E:26:68:54:04:FB:88:F8:1C
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 019CABA1D87103533DEBEE2E29EB5EFCD921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 0817
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: 42Ji29vqDAxpdndaWxEQMipFjyU.roa (hash: aVLNPW2DwaXPkiMoRdCmxUWjB3XXnvtot9VBLL1K0cY=)
2: OOcVjTinelu-vgE59aMpB7cwNfA.roa (hash: Zjel+wrfjrnJJPs2axJSuj38XRQFBg6WAwK0ANjmS6U=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: w2kkAwn6t6rn9Gt3rRiIxlSDQB6aRA18wYnEqE08IpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d8:71:03:53:3d:eb:ee:2e:29:eb:5e:fc:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=f16f42c263c03bea6029a31e26685404fb88f81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:69:ce:c6:bd:0e:84:6d:1e:b1:b3:78:fd:
46:2f:14:29:83:78:e1:00:b4:34:ee:62:eb:9e:87:
eb:55:37:da:4b:34:e3:6e:19:2a:6b:40:dd:ee:b1:
52:d6:45:84:92:f4:2e:50:60:f9:4e:b0:00:53:96:
98:d9:45:6f:18:08:bb:a4:c4:6f:34:44:5c:5c:20:
6f:37:fc:99:da:b0:88:dc:71:5e:de:44:97:89:11:
4b:63:a4:a6:9c:89:83:14:e6:ec:d8:06:d1:45:d6:
1e:90:39:8f:4c:b3:19:d8:bd:c0:9b:fa:a6:1f:8b:
0b:e7:d1:e9:96:83:dd:78:6b:de:6e:5b:83:c5:ba:
58:81:52:87:1f:54:47:1b:68:57:b0:7c:df:02:f0:
a9:78:2e:b9:73:37:13:42:0b:9e:c3:dc:37:30:dd:
ed:25:9e:f1:5b:ab:11:34:20:79:a5:a9:8a:f6:79:
09:be:40:1c:b4:bf:96:2d:33:ba:60:65:5c:2d:d3:
61:b6:12:9f:34:9d:a0:04:9f:38:00:42:94:c7:97:
57:25:65:e0:ff:0e:df:51:39:0a:3d:f6:33:3b:f5:
c9:a9:32:27:3c:90:3c:52:78:76:40:ee:a8:66:f7:
30:0c:72:ff:07:7a:29:1e:0b:26:d5:26:03:82:6b:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6F:42:C2:63:C0:3B:EA:60:29:A3:1E:26:68:54:04:FB:88:F8:1C
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:64:87:e4:f2:9e:23:b0:fa:7b:7e:8b:33:c2:86:83:55:82:
8f:2a:1c:9c:d4:98:6c:1e:ce:37:07:92:2e:87:ca:0c:2b:d7:
b1:18:f8:93:c1:70:49:bd:37:b3:1f:76:c6:3a:ba:b9:68:d6:
9d:88:c3:88:5b:e2:b7:f5:9c:c5:f2:ee:78:1b:05:fd:57:6f:
bc:77:07:6f:07:73:c9:87:25:bd:6c:88:a8:95:26:2d:f3:1b:
62:9b:c8:68:86:d3:37:16:48:fe:65:73:df:09:79:27:2f:e8:
ae:00:25:7b:e2:86:ff:66:38:9e:83:4f:4c:7f:87:eb:0a:50:
f8:d4:88:3d:5d:c1:b5:f2:de:1a:ad:c8:f5:d3:ce:a7:3c:ab:
5d:14:17:b5:e8:2c:d2:c9:78:30:36:8a:05:a3:a0:21:9f:4d:
ed:63:a4:e3:32:ad:59:fe:48:c6:3e:a5:f7:d7:95:dd:23:c0:
bd:1d:a9:f7:aa:c3:46:a8:99:8c:8f:ca:f4:cc:97:98:99:98:
74:b0:7a:be:ac:7f:d9:bd:65:45:01:df:d1:d0:1d:6f:80:28:
68:6d:ca:04:40:77:88:50:50:f1:2f:ef:59:a8:7e:ac:3b:4b:
20:db:4d:5b:11:2f:96:e4:70:88:23:f9:f3:2e:da:ec:f2:82:
5b:a9:1d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodhxA1M96+4uKete/NkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTE5MzM0YWQyYWQ1MzYxNmMzNGZlY2U5NmNlMjkyMzBm
ODYzNDkwHhcNMjYwMzAxMjMwMDM2WhcNMjYwMzAyMjMwMDM2WjAzMTEwLwYDVQQD
EyhmMTZmNDJjMjYzYzAzYmVhNjAyOWEzMWUyNjY4NTQwNGZiODhmODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BJpzsa9DoRtHrGzeP1GLxQpg3jh
ALQ07mLrnofrVTfaSzTjbhkqa0Dd7rFS1kWEkvQuUGD5TrAAU5aY2UVvGAi7pMRv
NERcXCBvN/yZ2rCI3HFe3kSXiRFLY6SmnImDFObs2AbRRdYekDmPTLMZ2L3Am/qm
H4sL59HploPdeGvebluDxbpYgVKHH1RHG2hXsHzfAvCpeC65czcTQguew9w3MN3t
JZ7xW6sRNCB5pamK9nkJvkActL+WLTO6YGVcLdNhthKfNJ2gBJ84AEKUx5dXJWXg
/w7fUTkKPfYzO/XJqTInPJA8Unh2QO6oZvcwDHL/B3opHgsm1SYDgmsJ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFvQsJjwDvqYCmjHiZoVAT7iPgcMB8GA1UdIwQY
MBaAFMKRkzStKtU2FsNP7Ols4pIw+GNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDIt
MTY1MzE4OGQ4MTI2LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDItMTY1MzE4OGQ4MTI2
LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2SH5PKe
I7D6e36LM8KGg1WCjyocnNSYbB7ONweSLofKDCvXsRj4k8FwSb03sx92xjq6uWjW
nYjDiFvit/WcxfLueBsF/VdvvHcHbwdzyYclvWyIqJUmLfMbYpvIaIbTNxZI/mVz
3wl5Jy/orgAle+KG/2Y4noNPTH+H6wpQ+NSIPV3BtfLeGq3I9dPOpzyrXRQXtegs
0sl4MDaKBaOgIZ9N7WOk4zKtWf5Ixj6l99eV3SPAvR2p96rDRqiZjI/K9MyXmJmY
dLB6vqx/2b1lRQHf0dAdb4AoaG3KBEB3iFBQ8S/vWah+rDtLINtNWxEvluRwiCP5
8y7a7PKCW6kd5Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:59 2026 by rpki-client