Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier: yiIJKuuQ/b+iaaHXQMwwE64q+Hsuh1o6xeGdP+Cl8ss=
Subject key identifier: A2:B5:A0:DE:C0:4F:98:40:B8:18:4D:50:B4:31:EC:49:2C:78:E6:3C
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial: 019CAA58EB5F1A41D2F74D8A4C69E46DF274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number: 1208
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: 7BbOZNQd0/6Q+uRbPIM5+SJtKC3h642/6W6/+F1WEAI=)
2: uSTOG5hPdGAJ8tKDlqGT_j-Wz90.roa (hash: K1kjwbswlvDhq+X0b+wPq3xckmUou+CcfH9LmHS/rpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:eb:5f:1a:41:d2:f7:4d:8a:4c:69:e4:6d:f2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=a2b5a0dec04f9840b8184d50b431ec492c78e63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:5c:ea:b1:b5:03:01:0c:35:11:06:b1:0d:
fc:91:e9:e4:e1:51:48:b4:5d:2b:42:8d:22:45:61:
65:cc:f3:52:c0:29:6b:77:b2:91:d8:93:44:8d:b8:
1c:14:8b:33:b1:f9:56:d8:e9:11:ea:cd:5a:61:78:
27:dd:e1:8c:90:a4:3f:36:bc:62:6c:09:c5:2d:31:
77:66:af:58:24:f8:97:6c:6a:75:a8:61:1f:6b:53:
f5:d1:56:72:82:35:0e:53:60:23:e5:27:f3:ba:b3:
29:de:38:92:5f:95:75:df:d1:fd:ea:dd:4a:38:47:
d7:a8:81:88:54:ec:1b:2c:9b:19:65:14:c4:7b:9b:
15:f1:e2:c2:41:10:96:48:ec:85:eb:0f:bd:30:f0:
0f:25:c9:07:31:52:e3:09:0c:5d:13:76:2a:5c:d7:
6a:7e:ca:d4:d1:1d:ee:70:95:91:d5:b1:4c:9c:2d:
d6:01:74:ee:8d:a6:c1:a7:cd:79:3e:a9:09:9e:25:
de:d1:7e:fa:0c:c8:2b:d1:21:78:15:3c:1e:6e:db:
c6:56:d1:d7:0b:9f:7f:e0:ba:12:87:2e:06:d5:50:
cf:7f:39:b3:8e:a5:33:76:07:6f:2b:9e:f8:6d:79:
6e:26:a5:6c:25:a3:f9:1a:8b:31:44:3e:5d:56:69:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B5:A0:DE:C0:4F:98:40:B8:18:4D:50:B4:31:EC:49:2C:78:E6:3C
X509v3 Authority Key Identifier:
keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ec:7c:f4:21:ca:0d:4b:15:95:c3:80:ae:33:d0:02:01:53:
e4:b3:fa:6c:73:76:5d:a3:2c:72:c1:e4:db:e2:7f:97:bd:24:
28:1a:37:3d:66:a1:7b:46:f4:8c:cd:78:3a:74:91:d1:b7:47:
d4:c9:eb:07:6e:f6:ab:98:32:74:7c:77:5c:93:00:6f:19:9f:
45:99:62:8f:d3:aa:59:4f:2e:46:60:51:a7:69:84:c4:4d:31:
18:53:7f:2a:b6:53:6c:64:4e:89:95:0c:0e:ea:f2:89:55:fb:
bc:f1:17:c9:54:c8:12:a2:d2:ba:99:a6:a9:80:97:67:bc:ab:
c2:e5:7d:18:71:c2:8e:07:a2:78:4c:78:66:c0:28:3e:8c:3d:
c2:48:0b:29:33:9b:99:ca:ba:85:1c:ed:6e:5e:80:9b:13:1d:
15:b7:ca:3a:78:44:8c:ce:3d:2f:68:b0:5c:7e:96:89:b9:c6:
08:82:ad:2b:4d:40:99:2a:d0:e8:59:ce:9e:96:1a:b6:0e:b6:
dc:ee:3f:81:69:18:d7:50:cf:01:7f:6c:0f:bb:ac:e3:dc:12:
fa:59:c9:29:a2:3d:c6:bf:7c:ec:d5:88:1d:36:4e:79:34:ef:
2f:aa:be:88:5a:fb:c9:e1:fe:f8:3e:20:c5:50:04:57:26:f8:
0b:5c:c0:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWOtfGkHS902KTGnkbfJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NjVjNjJmMTBjMjVlN2E3ZWYxODM1NjgzM2FhNGY5Yjk4
NDJjNmEwHhcNMjYwMzAxMTcwMTIwWhcNMjYwMzAyMTcwMTIwWjAzMTEwLwYDVQQD
EyhhMmI1YTBkZWMwNGY5ODQwYjgxODRkNTBiNDMxZWM0OTJjNzhlNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfVc6rG1AwEMNREGsQ38kenk4VFI
tF0rQo0iRWFlzPNSwClrd7KR2JNEjbgcFIszsflW2OkR6s1aYXgn3eGMkKQ/Nrxi
bAnFLTF3Zq9YJPiXbGp1qGEfa1P10VZygjUOU2Aj5SfzurMp3jiSX5V139H96t1K
OEfXqIGIVOwbLJsZZRTEe5sV8eLCQRCWSOyF6w+9MPAPJckHMVLjCQxdE3YqXNdq
fsrU0R3ucJWR1bFMnC3WAXTujabBp815PqkJniXe0X76DMgr0SF4FTwebtvGVtHX
C59/4LoShy4G1VDPfzmzjqUzdgdvK574bXluJqVsJaP5GosxRD5dVmlgUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK1oN7AT5hAuBhNULQx7EkseOY8MB8GA1UdIwQY
MBaAFFllxi8Qwl56fvGDVoM6pPm5hCxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEt
NmNhN2M1NDI2M2I5LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEtNmNhN2M1NDI2M2I5
LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqux89CHK
DUsVlcOArjPQAgFT5LP6bHN2XaMscsHk2+J/l70kKBo3PWahe0b0jM14OnSR0bdH
1MnrB272q5gydHx3XJMAbxmfRZlij9OqWU8uRmBRp2mExE0xGFN/KrZTbGROiZUM
DuryiVX7vPEXyVTIEqLSupmmqYCXZ7yrwuV9GHHCjgeieEx4ZsAoPow9wkgLKTOb
mcq6hRztbl6AmxMdFbfKOnhEjM49L2iwXH6WibnGCIKtK01AmSrQ6FnOnpYatg62
3O4/gWkY11DPAX9sD7us49wS+lnJKaI9xr987NWIHTZOeTTvL6q+iFr7yeH++D4g
xVAEVyb4C1zA6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:53 2026 by rpki-client