Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: wGM5EKXY5goeaTpm9poop0/yyjs83q5pBm+sKeH9KT4=
Subject key identifier: 56:6B:5B:58:39:94:F9:57:11:3D:0F:25:63:63:EE:27:AD:56:CF:E1
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 019CAAC6D3041EC511EC4C12C41B950E8ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 02BF
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: rCug5sz67nVjn7XmLBt3rkfQTl4Pw/IUVyCT6qI5/X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d3:04:1e:c5:11:ec:4c:12:c4:1b:95:0e:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=566b5b583994f957113d0f256363ee27ad56cfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:38:d1:4f:ed:3e:5c:ab:41:69:c5:e3:f8:
6a:66:b7:ec:43:a7:c8:15:9d:a2:03:db:d1:5a:13:
70:e6:02:8a:88:74:09:f4:7e:15:38:db:48:8d:c8:
a4:a2:ec:4d:ba:c5:19:5e:26:cf:6f:d2:5e:38:ea:
76:4f:5c:96:85:1a:c1:77:68:7b:72:1e:41:2e:25:
bf:0a:d7:40:e0:71:29:b5:4c:a8:e6:2f:fc:ae:01:
1c:50:98:09:d1:ca:de:08:39:f0:ff:6a:b6:50:83:
76:8a:e2:4c:eb:91:fa:63:51:d1:6d:02:ab:04:6c:
81:b4:93:5b:52:18:f5:e0:47:ae:63:8e:46:cb:4e:
e4:2c:45:c3:77:e8:e8:66:ba:51:c7:44:c9:a6:21:
b6:6f:cd:16:22:70:57:fb:de:ed:8c:28:cb:6a:cc:
3d:7e:ab:c5:0b:c0:a8:be:d0:b7:9a:bc:16:ce:e3:
73:a3:50:b6:39:0a:f6:ef:2d:6f:88:6b:4a:d1:c1:
6e:fe:05:e3:65:b0:43:44:b2:99:71:0a:14:40:9d:
fc:14:c2:e7:d5:f6:7c:75:6e:1f:c0:58:b0:db:76:
e7:b8:68:2a:82:ee:9e:1b:58:a0:e2:a1:d0:2e:94:
1e:87:87:56:91:be:d3:95:42:96:81:73:0f:20:26:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6B:5B:58:39:94:F9:57:11:3D:0F:25:63:63:EE:27:AD:56:CF:E1
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:79:58:cc:4c:44:92:54:0f:e6:b9:a4:cf:c1:8f:ce:30:1f:
4b:6f:fc:da:93:ad:b0:e0:c6:56:5f:a8:55:4b:63:95:57:01:
dc:07:3e:63:9f:85:72:be:90:c4:35:4d:8d:8d:a2:2b:21:99:
1d:9a:88:f1:c9:60:7b:50:a7:e2:70:d2:07:aa:ae:ab:7c:88:
95:3f:5b:a7:62:36:75:6d:cb:16:ff:04:a6:aa:b4:b5:72:14:
bc:fd:4c:2c:f1:30:6b:e4:49:a6:08:37:ba:4a:d0:4f:1e:21:
8a:9c:1e:e2:6e:34:b8:cf:b1:ed:af:c5:d7:a1:12:a5:09:32:
10:f7:c4:ed:41:a8:be:fb:38:da:8f:64:64:7d:c4:88:3d:70:
9c:45:71:15:b5:e1:00:4a:61:2b:ec:ee:62:7e:8c:2b:67:d3:
e1:07:48:d1:ab:e8:15:42:f0:b0:d9:3e:8f:27:2b:83:12:0a:
27:8a:8b:63:25:67:97:dd:de:83:7a:be:9c:c7:4b:b6:65:60:
1e:b3:6e:05:4d:13:0c:42:1d:bd:2c:e7:18:79:34:ee:f6:b4:
6d:08:9b:35:8c:ea:83:02:cf:6c:83:f9:e0:fe:77:ca:1c:59:
df:04:b1:0e:98:61:fd:3e:19:67:bd:d1:51:2f:c1:1a:50:dc:
8e:dd:de:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxtMEHsUR7EwSxBuVDo7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTFiOGI3YTFkYTY0MDM0ODQ5M2I5YzZmNGVhZDQ5NmUz
ODYxY2YwHhcNMjYwMzAxMTkwMTIyWhcNMjYwMzAyMTkwMTIyWjAzMTEwLwYDVQQD
Eyg1NjZiNWI1ODM5OTRmOTU3MTEzZDBmMjU2MzYzZWUyN2FkNTZjZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTY40U/tPlyrQWnF4/hqZrfsQ6fI
FZ2iA9vRWhNw5gKKiHQJ9H4VONtIjcikouxNusUZXibPb9JeOOp2T1yWhRrBd2h7
ch5BLiW/CtdA4HEptUyo5i/8rgEcUJgJ0creCDnw/2q2UIN2iuJM65H6Y1HRbQKr
BGyBtJNbUhj14EeuY45Gy07kLEXDd+joZrpRx0TJpiG2b80WInBX+97tjCjLasw9
fqvFC8CovtC3mrwWzuNzo1C2OQr27y1viGtK0cFu/gXjZbBDRLKZcQoUQJ38FMLn
1fZ8dW4fwFiw23bnuGgqgu6eG1ig4qHQLpQeh4dWkb7TlUKWgXMPICYwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZrW1g5lPlXET0PJWNj7ietVs/hMB8GA1UdIwQY
MBaAFMDhuLeh2mQDSEk7nG9OrUluOGHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09HNHQ2SGFaQU5JU1R1Y2IwNnRTVzQ0WWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hZmNlZDgtNWM0OC00NzQwLWE2MzUt
MTYxMWM5MGJhMzNiLzEvd09HNHQ2SGFaQU5JU1R1Y2IwNnRTVzQ0WWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hZmNlZDgtNWM0OC00NzQwLWE2MzUtMTYxMWM5MGJhMzNi
LzEvd09HNHQ2SGFaQU5JU1R1Y2IwNnRTVzQ0WWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnlYzExE
klQP5rmkz8GPzjAfS2/82pOtsODGVl+oVUtjlVcB3Ac+Y5+Fcr6QxDVNjY2iKyGZ
HZqI8clge1Cn4nDSB6quq3yIlT9bp2I2dW3LFv8Epqq0tXIUvP1MLPEwa+RJpgg3
ukrQTx4hipwe4m40uM+x7a/F16ESpQkyEPfE7UGovvs42o9kZH3EiD1wnEVxFbXh
AEphK+zuYn6MK2fT4QdI0avoFULwsNk+jycrgxIKJ4qLYyVnl93eg3q+nMdLtmVg
HrNuBU0TDEIdvSznGHk07va0bQibNYzqgwLPbIP54P53yhxZ3wSxDphh/T4ZZ73R
US/BGlDcjt3ekg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:33 2026 by rpki-client