Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
File: WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json)
Hash identifier: /pb+HpFr2QhVF52rugZPJ0qRcC6eDBKYNfhnojG5vhQ=
Subject key identifier: AD:82:86:58:5F:6C:21:7C:34:19:5F:EE:41:D3:73:E1:2A:04:9F:FA
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial: 019CAAC725C0F989E0E31DD3B0EAE48E2723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
Manifest number: 02D5
Signing time: Sun 01 Mar 2026 19:01:43 +0000
Manifest this update: Sun 01 Mar 2026 19:01:43 +0000
Manifest next update: Mon 02 Mar 2026 19:01:43 +0000
Files and hashes: 1: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: vl+BHmTbpSxh8Cq8KCA2/8f/n7CbgC+aWdXQk3z9YrA=)
2: e1NZm3XKE7xcFABvZP0BCejzf1s.roa (hash: j0g+97meVg3ce9VbKXkz531r7nEoX07hUsET3+Mmkt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:25:c0:f9:89:e0:e3:1d:d3:b0:ea:e4:8e:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
Validity
Not Before: Mar 1 19:01:43 2026 GMT
Not After : Mar 2 19:01:43 2026 GMT
Subject: CN=ad8286585f6c217c34195fee41d373e12a049ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:8f:7f:d5:df:0e:22:36:e5:4b:af:77:4a:
83:3e:e1:d1:a7:17:24:eb:b6:1e:46:aa:31:f0:c8:
19:02:64:57:9d:9b:63:ca:9c:55:f6:3c:2a:48:1c:
3b:f7:7d:f9:c8:5b:d3:81:7d:e8:4f:55:8c:51:e4:
20:b0:9d:4e:ca:7b:5b:1f:21:d4:14:2c:de:e4:11:
50:09:e1:c1:6e:bc:36:b2:05:b5:75:aa:d0:59:9a:
76:b2:9b:35:31:74:9d:94:d3:c9:b2:ac:4c:09:ec:
ff:28:7c:29:6b:77:f8:f1:0d:37:24:87:cd:0f:7a:
6e:d0:df:e5:1d:1f:8c:c5:0b:1e:cc:1e:f6:a2:0c:
aa:8a:c6:83:fd:d5:f1:6e:20:73:33:1d:d2:a5:7d:
81:71:47:92:aa:1f:da:7b:aa:43:41:53:26:da:08:
f7:f7:45:f2:11:ca:d2:b1:56:da:d7:09:95:a9:ef:
8f:af:ee:49:43:ac:f5:4c:84:b5:7e:ac:b1:a9:eb:
7c:d8:5a:0a:5e:45:77:f6:91:b6:b5:f9:32:c7:dc:
f9:44:9d:1a:fb:cc:f3:10:ac:56:d8:47:03:93:04:
4c:3f:1d:6e:ec:12:fa:bc:77:6b:d3:69:03:76:4e:
78:04:f9:80:9d:8c:7e:ce:62:0b:ff:ad:3a:33:3f:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:82:86:58:5F:6C:21:7C:34:19:5F:EE:41:D3:73:E1:2A:04:9F:FA
X509v3 Authority Key Identifier:
keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:12:84:de:84:80:ea:29:03:38:d2:2a:86:df:08:53:31:47:
a4:df:7b:53:ca:aa:1e:52:c2:1b:cf:04:d8:d6:e1:69:01:2a:
e1:42:3a:e0:39:10:ad:a7:8b:db:ea:ed:9e:7a:60:77:06:8f:
70:63:a4:27:71:41:db:ef:21:f9:e8:8a:40:6e:d9:e7:9b:47:
be:5c:77:b9:c0:5b:dc:31:eb:da:2b:5e:ef:04:a7:c3:7a:2a:
30:f9:a7:e1:c6:e2:0e:78:b2:35:37:75:f5:16:6f:04:b8:44:
ad:46:27:fd:8e:d3:7f:b0:08:18:17:7d:5f:5d:b1:79:84:85:
39:77:d9:cf:c6:00:8a:7d:df:ca:20:1b:7d:ab:55:32:99:7c:
82:50:0a:cd:53:c8:43:31:08:4c:78:e6:b1:e2:52:53:ed:a2:
74:c1:e0:3c:c2:8e:46:f6:04:cb:f5:58:f1:48:72:af:d9:c8:
57:5b:0e:41:6e:40:67:2c:a2:9a:66:09:7b:97:2a:6f:13:25:
42:df:03:bb:6c:82:d5:87:83:d7:bd:46:34:1f:62:aa:5a:86:
1a:6a:6a:66:a2:90:5e:62:80:c8:3e:46:29:3a:a8:de:58:2f:
34:49:9b:c9:66:09:bd:35:d7:c4:49:5f:f1:76:73:db:20:96:
5f:df:d6:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxyXA+Yng4x3TsOrkjicjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmFlODAzZGYyMmIwNTVjNzRlNWZlOGYxMWQ5NDQwODk1
NjBlZDIwHhcNMjYwMzAxMTkwMTQzWhcNMjYwMzAyMTkwMTQzWjAzMTEwLwYDVQQD
EyhhZDgyODY1ODVmNmMyMTdjMzQxOTVmZWU0MWQzNzNlMTJhMDQ5ZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuviPf9XfDiI25Uuvd0qDPuHRpxck
67YeRqox8MgZAmRXnZtjypxV9jwqSBw79335yFvTgX3oT1WMUeQgsJ1OyntbHyHU
FCze5BFQCeHBbrw2sgW1darQWZp2sps1MXSdlNPJsqxMCez/KHwpa3f48Q03JIfN
D3pu0N/lHR+MxQsezB72ogyqisaD/dXxbiBzMx3SpX2BcUeSqh/ae6pDQVMm2gj3
90XyEcrSsVba1wmVqe+Pr+5JQ6z1TIS1fqyxqet82FoKXkV39pG2tfkyx9z5RJ0a
+8zzEKxW2EcDkwRMPx1u7BL6vHdr02kDdk54BPmAnYx+zmIL/606Mz+AfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2ChlhfbCF8NBlf7kHTc+EqBJ/6MB8GA1UdIwQY
MBaAFFgq6APfIrBVx05f6PEdlECJVg7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lZjA0NmQtZjk1OS00Nzk4LTk2Yjgt
Y2ZlMTY0N2VhODY1LzEvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lZjA0NmQtZjk1OS00Nzk4LTk2YjgtY2ZlMTY0N2VhODY1
LzEvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBKE3oSA
6ikDONIqht8IUzFHpN97U8qqHlLCG88E2NbhaQEq4UI64DkQraeL2+rtnnpgdwaP
cGOkJ3FB2+8h+eiKQG7Z55tHvlx3ucBb3DHr2ite7wSnw3oqMPmn4cbiDniyNTd1
9RZvBLhErUYn/Y7Tf7AIGBd9X12xeYSFOXfZz8YAin3fyiAbfatVMpl8glAKzVPI
QzEITHjmseJSU+2idMHgPMKORvYEy/VY8Uhyr9nIV1sOQW5AZyyimmYJe5cqbxMl
Qt8Du2yC1YeD171GNB9iqlqGGmpqZqKQXmKAyD5GKTqo3lgvNEmbyWYJvTXXxElf
8XZz2yCWX9/WMw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:39 2026 by rpki-client