Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: e7Jyh5ZuRnrlvRFFJOmfqe27nyfdvz07S8Kje5LEWDI=
Subject key identifier: A8:35:14:68:95:19:AA:F6:92:0D:F0:11:98:E1:D0:F2:14:C3:6E:07
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 019CAB6AD66730CBB2901B0D0F1F709B401A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 0860
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: gQqmUgwxt9ug0yWIuh4/cT+z4bTvr/3jcqgu0sqOs24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d6:67:30:cb:b2:90:1b:0d:0f:1f:70:9b:40:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=a83514689519aaf6920df01198e1d0f214c36e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:a5:01:b3:ba:a2:37:e5:ca:60:ae:67:c1:
66:ae:05:9e:a8:06:23:cc:ad:db:09:31:28:54:2f:
bc:3d:96:11:1c:b1:c0:b6:25:70:3d:c4:5c:0f:0a:
79:d8:31:34:8d:37:61:0d:26:93:d9:64:37:74:23:
d1:84:7f:54:3c:25:00:64:1a:1b:d8:6b:00:ea:66:
c6:fd:f2:c7:ae:2d:0d:bb:37:b9:58:0e:b1:29:a0:
af:30:2a:71:00:23:12:41:af:33:05:84:b8:e7:68:
aa:dc:3f:ed:1a:44:fd:32:3a:9a:8e:f2:c9:da:2f:
bd:5c:0b:42:56:0c:ef:45:0a:e3:92:42:6e:f6:c9:
a5:6f:1c:9e:3e:bc:c8:c2:77:c3:d9:30:14:a2:b0:
15:14:68:5c:a6:5e:04:e2:d7:ef:1f:d3:c3:b1:d0:
2c:af:6c:c4:23:d9:cc:34:c6:fc:b1:cd:3b:7b:a3:
88:db:28:ec:0e:fa:72:e9:97:37:36:1c:47:ed:2e:
ad:20:ce:8a:a2:8e:b8:8e:56:73:85:6d:cd:12:82:
d7:39:bb:22:b2:a2:66:34:d3:7b:61:06:83:91:9b:
54:6e:3d:77:81:3c:03:47:34:af:35:2f:e0:c4:20:
eb:33:59:72:c6:d8:86:71:e4:77:f5:e9:02:3e:8c:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:35:14:68:95:19:AA:F6:92:0D:F0:11:98:E1:D0:F2:14:C3:6E:07
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1c:42:3a:3c:88:f0:d6:6a:d9:1b:b6:0d:49:84:43:a7:d1:
5b:f9:a1:29:b1:98:e9:65:d6:8b:25:dd:a0:af:40:19:c3:23:
3e:3b:4e:8a:a0:e4:e4:fa:29:b0:b7:8c:31:43:b4:12:9c:67:
ee:89:e7:18:40:c5:2c:f0:84:cd:86:40:69:a6:b1:44:dd:9f:
98:c4:44:5f:09:f9:1c:4d:7b:64:f2:1a:66:9b:d2:86:27:a4:
9d:00:ac:df:43:1b:cc:4d:b2:33:ca:3e:9d:05:5d:ef:9b:b4:
53:63:93:bc:3e:3f:ee:88:4e:cd:42:7c:22:5d:ab:cf:5d:62:
47:47:74:97:d8:7d:37:0b:c0:7b:58:5e:a3:45:39:29:dc:f8:
64:24:c3:4e:a3:d5:0c:a3:94:d1:3f:bc:bb:c7:d2:68:a8:9b:
54:31:24:38:d4:91:5a:d2:18:af:08:fd:38:a4:b8:26:5a:b5:
f6:4f:c0:00:6d:14:9b:7b:83:72:59:e0:3d:56:40:a8:1b:dd:
4e:d1:97:c8:46:83:06:43:a7:30:00:4d:2f:2d:4e:0d:d3:76:
d6:09:b8:67:ac:9a:f2:b8:82:e7:c6:b5:5f:61:6e:0a:25:31:
90:e0:4a:fa:4e:a7:42:d2:0f:2b:63:fb:e1:f8:8d:5e:3f:50:
00:73:dc:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyratZnMMuykBsNDx9wm0AaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGQ3MjRjYTU5YWRkZDBmN2Y4MTA4YjAxMDU5Nzk1ZjM0
ZDMzNDUwHhcNMjYwMzAxMjIwMDMxWhcNMjYwMzAyMjIwMDMxWjAzMTEwLwYDVQQD
EyhhODM1MTQ2ODk1MTlhYWY2OTIwZGYwMTE5OGUxZDBmMjE0YzM2ZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTalAbO6ojflymCuZ8FmrgWeqAYj
zK3bCTEoVC+8PZYRHLHAtiVwPcRcDwp52DE0jTdhDSaT2WQ3dCPRhH9UPCUAZBob
2GsA6mbG/fLHri0Nuze5WA6xKaCvMCpxACMSQa8zBYS452iq3D/tGkT9MjqajvLJ
2i+9XAtCVgzvRQrjkkJu9smlbxyePrzIwnfD2TAUorAVFGhcpl4E4tfvH9PDsdAs
r2zEI9nMNMb8sc07e6OI2yjsDvpy6Zc3NhxH7S6tIM6Koo64jlZzhW3NEoLXObsi
sqJmNNN7YQaDkZtUbj13gTwDRzSvNS/gxCDrM1lyxtiGceR39ekCPowsqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg1FGiVGar2kg3wEZjh0PIUw24HMB8GA1UdIwQY
MBaAFMFNckylmt3Q9/gQiwEFl5XzTTNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgt
NGY1NjRjZTA3MTI2LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgtNGY1NjRjZTA3MTI2
LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRxCOjyI
8NZq2Ru2DUmEQ6fRW/mhKbGY6WXWiyXdoK9AGcMjPjtOiqDk5PopsLeMMUO0Epxn
7onnGEDFLPCEzYZAaaaxRN2fmMREXwn5HE17ZPIaZpvShieknQCs30MbzE2yM8o+
nQVd75u0U2OTvD4/7ohOzUJ8Il2rz11iR0d0l9h9NwvAe1heo0U5Kdz4ZCTDTqPV
DKOU0T+8u8fSaKibVDEkONSRWtIYrwj9OKS4Jlq19k/AAG0Um3uDclngPVZAqBvd
TtGXyEaDBkOnMABNLy1ODdN21gm4Z6ya8riC58a1X2FuCiUxkOBK+k6nQtIPK2P7
4fiNXj9QAHPcYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:34 2026 by rpki-client