Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: UwiAswjFSz+2i8JHrrfusmbxmAiqpmR97jVg7Cte53U=
Subject key identifier: B1:8B:45:30:D5:49:00:34:9E:AC:28:3B:1B:8B:82:85:2A:18:C0:07
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019CAA8F7385C77728186CAA2C05C3D0C0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 18:00:53 +0000
Manifest this update: Sun 01 Mar 2026 18:00:53 +0000
Manifest next update: Mon 02 Mar 2026 18:00:53 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: A/0gfw5YAo60QYeQNTk0ytkYPaZfeoEdUC65MgsVyW4=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:73:85:c7:77:28:18:6c:aa:2c:05:c3:d0:c0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Mar 1 18:00:53 2026 GMT
Not After : Mar 2 18:00:53 2026 GMT
Subject: CN=b18b4530d54900349eac283b1b8b82852a18c007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:64:3c:89:99:48:7c:74:da:a2:48:9a:dd:
98:f0:d8:48:32:42:74:f2:f7:41:cc:00:66:63:cd:
ec:38:09:70:c8:11:91:3b:b5:b8:22:6b:8e:9c:d6:
73:63:7c:dd:b9:30:ff:4d:f1:34:ff:c7:40:a7:76:
a1:65:7e:b2:db:d7:a6:d1:d2:36:a2:e8:80:10:ca:
86:6c:9d:89:e0:c1:80:0d:2a:07:73:4a:86:39:1f:
b2:e6:f8:69:7d:ff:ac:4a:9d:2d:9c:73:de:28:c5:
d5:31:9f:61:52:65:1a:e6:15:b9:32:1f:bf:52:2b:
d5:b7:33:2f:6e:76:49:10:cf:b3:53:a4:5b:df:e2:
77:b2:c3:5b:f6:c4:c1:fe:92:20:96:ed:7d:7e:65:
0c:bd:15:a0:27:5b:16:5e:53:38:e4:33:9f:d3:77:
b4:67:53:3c:fe:a2:5a:f1:20:9d:53:bb:8f:6d:3b:
ff:82:0e:46:bc:06:3e:2c:fe:eb:07:bc:76:54:6c:
64:52:50:4d:3a:18:ef:d1:73:34:09:d7:82:46:39:
1c:06:7c:f6:52:39:69:ae:8d:7b:49:1c:d2:e2:94:
60:82:b9:8f:aa:69:ed:21:61:64:e6:d5:49:1b:88:
cc:89:e8:7a:d0:82:0f:ee:47:38:ff:46:81:88:7e:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:45:30:D5:49:00:34:9E:AC:28:3B:1B:8B:82:85:2A:18:C0:07
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:94:d2:49:d2:74:25:10:99:75:43:d1:08:f5:34:c3:19:f0:
e5:69:bd:08:98:6d:77:5e:de:c7:98:e5:cb:37:64:4a:cc:13:
00:81:48:f2:33:d5:98:f0:c1:d8:45:8d:9f:ba:13:06:28:23:
1b:05:f7:b4:f8:e0:c5:a4:b1:8a:f8:65:8a:6e:54:0d:5c:65:
0d:8d:4a:a7:ef:e5:85:02:2d:46:4d:a9:d7:e9:1c:e4:4a:b0:
43:7e:73:65:cc:21:30:23:45:4f:75:20:7d:2a:61:27:e8:f7:
9f:15:25:e7:3b:04:4b:c6:30:48:8c:33:b0:98:b2:f2:ac:0f:
79:8e:19:a1:2f:3d:2b:b4:ef:a0:64:7f:78:58:27:1c:61:68:
41:1f:04:0d:f9:60:08:55:0d:98:c2:2c:93:d6:b2:8d:fd:90:
b7:98:d6:37:fe:b9:02:d6:f9:f2:39:d7:77:0a:25:2f:db:e6:
3a:62:25:74:4a:4b:fe:03:6f:4d:40:50:2e:da:a4:df:b6:5b:
41:f4:a9:24:a5:88:d2:d1:10:b9:54:14:f8:26:bd:ed:45:51:
db:40:ff:fc:19:20:9e:71:84:df:e4:08:9f:49:b6:89:6a:1b:
55:29:f8:fe:7f:01:31:ef:66:4f:59:e2:13:d3:13:6c:f9:bb:
3e:1b:35:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj3OFx3coGGyqLAXD0MDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzNjYzk5ODk5MzczYzg1OTc0ZjAxYzljZDdhYTA1N2Fi
OTdmYWIwHhcNMjYwMzAxMTgwMDUzWhcNMjYwMzAyMTgwMDUzWjAzMTEwLwYDVQQD
EyhiMThiNDUzMGQ1NDkwMDM0OWVhYzI4M2IxYjhiODI4NTJhMThjMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUZkPImZSHx02qJImt2Y8NhIMkJ0
8vdBzABmY83sOAlwyBGRO7W4ImuOnNZzY3zduTD/TfE0/8dAp3ahZX6y29em0dI2
ouiAEMqGbJ2J4MGADSoHc0qGOR+y5vhpff+sSp0tnHPeKMXVMZ9hUmUa5hW5Mh+/
UivVtzMvbnZJEM+zU6Rb3+J3ssNb9sTB/pIglu19fmUMvRWgJ1sWXlM45DOf03e0
Z1M8/qJa8SCdU7uPbTv/gg5GvAY+LP7rB7x2VGxkUlBNOhjv0XM0CdeCRjkcBnz2
Ujlpro17SRzS4pRggrmPqmntIWFk5tVJG4jMieh60IIP7kc4/0aBiH6BvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGLRTDVSQA0nqwoOxuLgoUqGMAHMB8GA1UdIwQY
MBaAFFnDzJmJk3PIWXTwHJzXqgV6uX+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMt
MWE1ZWI1MDg4NWFlLzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMtMWE1ZWI1MDg4NWFl
LzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpTSSdJ0
JRCZdUPRCPU0wxnw5Wm9CJhtd17ex5jlyzdkSswTAIFI8jPVmPDB2EWNn7oTBigj
GwX3tPjgxaSxivhlim5UDVxlDY1Kp+/lhQItRk2p1+kc5EqwQ35zZcwhMCNFT3Ug
fSphJ+j3nxUl5zsES8YwSIwzsJiy8qwPeY4ZoS89K7TvoGR/eFgnHGFoQR8EDflg
CFUNmMIsk9ayjf2Qt5jWN/65Atb58jnXdwolL9vmOmIldEpL/gNvTUBQLtqk37Zb
QfSpJKWI0tEQuVQU+Ca97UVR20D//BkgnnGE3+QIn0m2iWobVSn4/n8BMe9mT1ni
E9MTbPm7Phs1WA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:07 2026 by rpki-client