Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: IcvI7aZDklzHeGuohgw95zR8JG80wLAeIPvy+HvsA2s=
Subject key identifier: 4E:3B:3F:86:C5:68:EA:69:65:3F:11:22:67:F1:4D:EB:DE:30:9B:B9
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 019CAD59ACB98B314D45F1A6214518B6473B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 13C4
Signing time: Mon 02 Mar 2026 07:01:01 +0000
Manifest this update: Mon 02 Mar 2026 07:01:01 +0000
Manifest next update: Tue 03 Mar 2026 07:01:01 +0000
Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: Fwc3RXGj7Jcu/rPHCElneMbv+9mIfpBNtSZvHwGGGFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ac:b9:8b:31:4d:45:f1:a6:21:45:18:b6:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Mar 2 07:01:01 2026 GMT
Not After : Mar 3 07:01:01 2026 GMT
Subject: CN=4e3b3f86c568ea69653f112267f14debde309bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:36:06:6a:75:a3:ba:62:b8:b7:ed:86:09:
bb:29:59:13:54:e9:ff:fb:dc:4d:2d:d0:a3:44:83:
fb:2f:cf:3f:f4:af:bf:bc:76:dc:eb:68:4e:c8:70:
e4:9b:aa:86:c3:ae:41:42:4a:88:f6:3c:10:d2:59:
4d:26:0d:db:a2:72:93:0e:9c:5d:56:1d:bd:ff:96:
72:66:f5:ed:de:36:ab:7f:c6:02:04:da:69:c2:9f:
42:9e:7d:47:61:56:a8:a6:58:f3:e1:02:e2:81:62:
5c:10:6a:37:85:f0:4a:a9:d4:76:de:ff:c5:6d:ca:
ed:9c:4d:6c:c1:fd:a9:77:55:8a:62:ce:f0:1e:c8:
17:1c:b9:89:b2:3c:27:1c:cc:75:3c:38:b0:91:15:
f9:90:a9:ed:d3:60:cb:72:42:49:de:fc:a7:e2:48:
6c:1d:44:16:f8:a1:59:96:94:70:e4:9b:f8:c5:14:
a9:ca:2e:a4:5c:73:a4:23:22:e8:38:56:85:4b:34:
6f:cd:13:e9:8e:d8:a8:83:a4:51:e7:d8:a0:cb:6a:
c6:5b:3f:28:8b:54:0a:5c:77:bc:33:7d:39:33:88:
7d:dd:9e:55:3b:be:d9:60:84:cd:41:0a:52:95:06:
a0:25:57:ff:a1:85:66:69:df:3a:ef:89:a2:b2:52:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:3F:86:C5:68:EA:69:65:3F:11:22:67:F1:4D:EB:DE:30:9B:B9
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9d:a0:34:54:10:8e:d1:d9:fe:45:cc:b4:43:43:3f:e5:65:
76:63:fb:ee:bb:ad:ee:0e:9a:75:0b:82:b8:06:98:94:a6:4a:
c2:21:72:87:c8:10:7b:37:f8:b0:e2:59:ed:27:36:7f:00:b7:
f4:60:5f:d9:0b:62:94:89:0a:52:79:e1:a8:53:70:86:dd:cc:
5d:67:72:d2:ac:c4:7f:8a:6f:6a:0b:01:bf:58:7e:c5:19:91:
79:66:48:44:39:21:4a:58:d8:90:bc:c9:0d:4e:19:9e:cb:36:
82:ea:46:ed:e3:6d:2b:62:92:e1:8a:74:40:43:7d:80:04:f4:
4b:49:02:c0:03:72:16:3a:c3:ca:79:40:92:39:7f:fb:53:69:
71:8f:83:30:0e:cb:49:7b:6e:18:25:96:44:06:54:1c:10:8a:
76:2b:82:3a:23:e3:bb:d3:f5:6d:36:92:7b:c0:76:89:2e:46:
0c:23:2f:74:20:a7:07:0b:8d:a3:69:5d:b8:e6:43:2a:42:89:
ea:9e:6f:6a:d0:a6:16:24:de:8f:e1:92:37:a8:28:28:f9:e2:
6b:e2:bf:9c:7f:56:9d:7a:f1:5c:99:45:d0:5e:94:3b:29:24:
e2:fb:ae:91:56:f6:68:14:ae:69:42:56:c9:33:e9:09:c9:cf:
70:10:fd:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWay5izFNRfGmIUUYtkc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1
NTcyODgwHhcNMjYwMzAyMDcwMTAxWhcNMjYwMzAzMDcwMTAxWjAzMTEwLwYDVQQD
Eyg0ZTNiM2Y4NmM1NjhlYTY5NjUzZjExMjI2N2YxNGRlYmRlMzA5YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaE2Bmp1o7piuLfthgm7KVkTVOn/
+9xNLdCjRIP7L88/9K+/vHbc62hOyHDkm6qGw65BQkqI9jwQ0llNJg3bonKTDpxd
Vh29/5ZyZvXt3jarf8YCBNppwp9Cnn1HYVaopljz4QLigWJcEGo3hfBKqdR23v/F
bcrtnE1swf2pd1WKYs7wHsgXHLmJsjwnHMx1PDiwkRX5kKnt02DLckJJ3vyn4khs
HUQW+KFZlpRw5Jv4xRSpyi6kXHOkIyLoOFaFSzRvzRPpjtiog6RR59igy2rGWz8o
i1QKXHe8M305M4h93Z5VO77ZYITNQQpSlQagJVf/oYVmad8674mislLuUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE47P4bFaOppZT8RImfxTeveMJu5MB8GA1UdIwQY
MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt
OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh
LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJ2gNFQQ
jtHZ/kXMtENDP+VldmP77rut7g6adQuCuAaYlKZKwiFyh8gQezf4sOJZ7Sc2fwC3
9GBf2QtilIkKUnnhqFNwht3MXWdy0qzEf4pvagsBv1h+xRmReWZIRDkhSljYkLzJ
DU4Znss2gupG7eNtK2KS4Yp0QEN9gAT0S0kCwANyFjrDynlAkjl/+1NpcY+DMA7L
SXtuGCWWRAZUHBCKdiuCOiPju9P1bTaSe8B2iS5GDCMvdCCnBwuNo2lduOZDKkKJ
6p5vatCmFiTej+GSN6goKPnia+K/nH9WnXrxXJlF0F6UOykk4vuukVb2aBSuaUJW
yTPpCcnPcBD9Yw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:08 2026 by rpki-client