Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: r2s93CjV++7OqiewT1OgytF1iTnCd22z80ef/XOBLfY=
Subject key identifier: 55:81:0B:23:C7:3D:3E:84:4C:C0:CF:4C:2D:FD:33:67:F9:A9:31:34
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 019CAE6C486118664224DB1EEA9A966CCE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 02FD
Signing time: Mon 02 Mar 2026 12:00:57 +0000
Manifest this update: Mon 02 Mar 2026 12:00:57 +0000
Manifest next update: Tue 03 Mar 2026 12:00:57 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: r+GZ0lKlDZlH378bodsvPx5+fHmpH4/lOR5LFSyMx58=)
2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:48:61:18:66:42:24:db:1e:ea:9a:96:6c:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Mar 2 12:00:57 2026 GMT
Not After : Mar 3 12:00:57 2026 GMT
Subject: CN=55810b23c73d3e844cc0cf4c2dfd3367f9a93134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:3e:34:b6:53:7b:14:63:fe:ee:fe:75:0e:
34:60:51:0c:62:bf:ed:77:fc:8d:7d:b9:b0:da:96:
71:fe:13:82:e8:56:fa:89:d8:28:db:05:8a:34:b5:
db:ee:06:84:39:d0:fe:ad:89:4a:b4:19:ee:11:99:
1c:23:48:6e:d3:21:75:01:be:88:9f:5c:74:69:7f:
d8:a3:30:7b:b7:ca:7f:8b:1b:aa:37:6f:e8:85:19:
e3:6e:4a:7a:50:58:03:90:c3:46:12:db:7f:ea:7b:
b8:2d:6b:1d:b9:a8:73:03:c8:43:7a:b2:b1:b7:f1:
ed:71:38:97:c6:77:5c:81:52:68:44:c2:22:ed:31:
a8:47:33:72:f8:d3:99:38:61:fb:a7:a2:36:2b:7e:
36:37:10:6a:ef:ec:49:aa:ae:f3:3c:ff:45:18:b7:
8a:02:92:54:7d:1e:cf:80:c5:88:81:ee:a1:d2:07:
83:7d:46:3f:25:97:61:60:e3:ce:01:33:a2:db:bd:
f1:d5:4a:c8:2b:35:ec:68:98:bb:e0:5a:6f:5d:8f:
c3:17:2f:b9:fc:94:28:c8:8d:f7:4f:af:62:af:a6:
97:75:5f:15:04:c2:b4:79:7d:4a:34:02:1c:25:bb:
cf:03:88:44:9a:74:4e:c0:b7:82:06:82:28:46:ef:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:81:0B:23:C7:3D:3E:84:4C:C0:CF:4C:2D:FD:33:67:F9:A9:31:34
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9c:d0:73:44:f9:15:5b:88:97:03:05:77:92:48:ab:2b:4d:
09:36:ce:6a:04:cf:7d:bd:66:4b:88:20:c9:da:07:bd:87:ee:
ee:e0:29:f8:73:57:53:f4:4e:ca:66:7e:47:19:b1:79:45:38:
13:54:97:89:d8:fe:e2:41:c4:d5:26:c0:30:5b:67:60:f6:f0:
3f:66:6b:04:fd:d5:a8:52:55:c5:d1:74:9b:89:83:ba:f5:b0:
0e:21:f4:02:6f:67:f1:10:e2:3d:64:3c:a3:cc:47:9f:8b:38:
e9:d2:5e:2b:b9:ba:87:b9:92:2f:da:80:5c:e7:da:06:96:8b:
1b:00:dc:be:f4:cc:5e:42:90:4e:d8:9f:7c:cc:4b:58:8b:aa:
5a:ac:30:0a:ea:14:ba:18:b3:75:ee:45:e5:ea:97:26:3a:b3:
20:7d:c3:04:db:35:a7:3f:b3:04:3b:80:0a:ab:5a:6e:90:09:
7d:20:fa:45:f6:58:70:8e:a5:bd:33:95:a2:ca:04:14:fa:ec:
25:6c:aa:6e:f9:6e:23:98:d2:b8:b8:28:9f:d6:40:4b:cb:5f:
e7:1c:5f:50:86:31:8e:a0:88:0f:5d:66:3c:94:ac:6b:c7:e9:
20:50:3b:40:2d:55:4a:9e:4a:e6:33:ed:a1:c6:0b:1b:67:89:
83:d3:b5:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubEhhGGZCJNse6pqWbM4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjE1NzliODc1ZTNlMDkzZDQ3MzI1Yjk3MzVlZGJmZTc4
MDlmYmEwHhcNMjYwMzAyMTIwMDU3WhcNMjYwMzAzMTIwMDU3WjAzMTEwLwYDVQQD
Eyg1NTgxMGIyM2M3M2QzZTg0NGNjMGNmNGMyZGZkMzM2N2Y5YTkzMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+s+NLZTexRj/u7+dQ40YFEMYr/t
d/yNfbmw2pZx/hOC6Fb6idgo2wWKNLXb7gaEOdD+rYlKtBnuEZkcI0hu0yF1Ab6I
n1x0aX/YozB7t8p/ixuqN2/ohRnjbkp6UFgDkMNGEtt/6nu4LWsduahzA8hDerKx
t/HtcTiXxndcgVJoRMIi7TGoRzNy+NOZOGH7p6I2K342NxBq7+xJqq7zPP9FGLeK
ApJUfR7PgMWIge6h0geDfUY/JZdhYOPOATOi273x1UrIKzXsaJi74FpvXY/DFy+5
/JQoyI33T69ir6aXdV8VBMK0eX1KNAIcJbvPA4hEmnROwLeCBoIoRu+vlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWBCyPHPT6ETMDPTC39M2f5qTE0MB8GA1UdIwQY
MBaAFFhhV5uHXj4JPUcyW5c17b/ngJ+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQt
ZjUzMzYzMjdiODgxLzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQtZjUzMzYzMjdiODgx
LzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5zQc0T5
FVuIlwMFd5JIqytNCTbOagTPfb1mS4ggydoHvYfu7uAp+HNXU/ROymZ+RxmxeUU4
E1SXidj+4kHE1SbAMFtnYPbwP2ZrBP3VqFJVxdF0m4mDuvWwDiH0Am9n8RDiPWQ8
o8xHn4s46dJeK7m6h7mSL9qAXOfaBpaLGwDcvvTMXkKQTtiffMxLWIuqWqwwCuoU
uhizde5F5eqXJjqzIH3DBNs1pz+zBDuACqtabpAJfSD6RfZYcI6lvTOVosoEFPrs
JWyqbvluI5jSuLgon9ZAS8tf5xxfUIYxjqCID11mPJSsa8fpIFA7QC1VSp5K5jPt
ocYLG2eJg9O1GA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:02 2026 by rpki-client