Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File: wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier: tJOdFCeDllOC5M2FjMeoQVVYSVBo+T/vrhFjWCXhxo8=
Subject key identifier: 20:8C:14:D7:32:1D:62:A9:D6:C7:C7:13:A4:3B:22:41:B5:C2:68:6B
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer: /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial: 019CAD59D64A39F15104C02467021B64290E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number: 0ABD
Signing time: Mon 02 Mar 2026 07:01:11 +0000
Manifest this update: Mon 02 Mar 2026 07:01:11 +0000
Manifest next update: Tue 03 Mar 2026 07:01:11 +0000
Files and hashes: 1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: 6tjUg2MwOOvsPZm8+XzGVZO/SwGCThCkfN9cY+xP2cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d6:4a:39:f1:51:04:c0:24:67:02:1b:64:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
Validity
Not Before: Mar 2 07:01:11 2026 GMT
Not After : Mar 3 07:01:11 2026 GMT
Subject: CN=208c14d7321d62a9d6c7c713a43b2241b5c2686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:bb:f2:8b:17:81:61:8c:cb:a1:90:0b:e9:
1c:17:90:1b:3c:81:d9:1c:9a:07:8c:2d:76:13:2a:
0c:60:d9:06:45:b4:fb:c9:74:4c:17:f6:76:81:27:
2f:3a:d8:de:a2:10:97:dc:c4:9d:4a:85:d8:b2:50:
8d:57:67:ff:91:ef:66:62:d0:31:e3:6d:4b:18:e3:
cb:00:e7:ec:88:e7:94:36:7d:23:85:38:69:d3:6a:
71:9d:33:f6:d1:36:e9:06:0f:d6:e0:e6:3f:d4:a7:
08:14:e6:05:3d:84:e6:13:ce:e7:e2:58:dd:6d:8f:
fc:f1:4a:8b:8b:ca:c7:11:f4:60:06:ac:fb:54:c9:
b4:0f:4c:7c:35:cf:ae:86:f2:67:10:2e:dc:8a:f3:
98:6e:03:da:ff:8f:96:10:33:f4:80:d9:01:90:3a:
3b:ca:3d:c8:7f:d0:3c:7f:8e:b3:49:ea:fa:96:57:
e0:e4:24:0b:ad:88:d8:73:7d:34:ec:fb:b9:d7:4e:
1f:a3:3c:f3:2c:c0:50:ff:87:92:44:23:37:05:fd:
4b:29:57:f7:21:69:6e:7c:86:16:6b:4b:9a:1d:04:
dc:4d:ea:18:96:41:df:a4:2f:9e:d2:10:41:4c:ee:
7b:2b:1d:f6:e0:92:26:c8:fe:52:86:84:bd:8a:47:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:14:D7:32:1D:62:A9:D6:C7:C7:13:A4:3B:22:41:B5:C2:68:6B
X509v3 Authority Key Identifier:
keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a7:d9:fd:48:19:95:ac:a8:ed:36:22:e8:90:85:e6:42:97:
1d:ca:8b:47:a8:8c:ea:70:32:03:bb:56:5c:05:76:eb:1d:31:
20:c6:a7:e1:20:8e:94:d5:4d:45:8a:fa:71:85:b9:b1:53:6a:
f2:91:ca:8a:4d:51:6b:61:2e:f7:71:b0:17:10:a7:00:f4:97:
6b:3f:81:08:ec:4f:8c:4e:2f:4f:19:88:50:3b:00:47:25:3c:
50:0f:7a:89:66:50:00:80:68:03:f7:23:f6:32:7a:15:48:d8:
70:78:9a:7a:28:c5:91:c7:1a:ad:5b:44:db:93:9b:83:8f:68:
14:5c:66:ea:19:18:be:a1:dc:d6:31:df:bd:1e:89:0c:e5:e1:
bd:3c:c7:42:7d:d9:42:4e:73:a5:7e:86:f3:25:b9:9f:f3:96:
de:3b:6d:bc:80:3d:24:c2:0b:f8:7f:6e:c1:06:1d:54:a3:e7:
bf:e9:41:13:ec:86:d0:73:29:df:fc:39:ad:08:e1:22:04:7e:
a8:1c:c3:69:6d:ee:fc:ce:ba:8f:02:b0:2f:09:5e:5f:b5:b9:
05:2c:73:64:7f:b5:22:a6:e3:7a:60:46:23:82:e2:94:bc:43:
5e:f6:48:d0:f1:63:75:02:c4:e9:c4:58:0f:3c:f3:cf:16:92:
55:bf:e6:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWdZKOfFRBMAkZwIbZCkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODFhMjI2NzRkYzI1YWFhNTA4NTM2N2UyMGUwNzhkZTkw
NjRmMTIwHhcNMjYwMzAyMDcwMTExWhcNMjYwMzAzMDcwMTExWjAzMTEwLwYDVQQD
EygyMDhjMTRkNzMyMWQ2MmE5ZDZjN2M3MTNhNDNiMjI0MWI1YzI2ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySi78osXgWGMy6GQC+kcF5AbPIHZ
HJoHjC12EyoMYNkGRbT7yXRMF/Z2gScvOtjeohCX3MSdSoXYslCNV2f/ke9mYtAx
421LGOPLAOfsiOeUNn0jhThp02pxnTP20TbpBg/W4OY/1KcIFOYFPYTmE87n4ljd
bY/88UqLi8rHEfRgBqz7VMm0D0x8Nc+uhvJnEC7civOYbgPa/4+WEDP0gNkBkDo7
yj3If9A8f46zSer6llfg5CQLrYjYc3007Pu5104fozzzLMBQ/4eSRCM3Bf1LKVf3
IWlufIYWa0uaHQTcTeoYlkHfpC+e0hBBTO57Kx324JImyP5ShoS9ikcd5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCMFNcyHWKp1sfHE6Q7IkG1wmhrMB8GA1UdIwQY
MBaAFMCBoiZ03CWqpQhTZ+IOB43pBk8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMTM5ZDgtNjhlMC00ZmZhLWI0ZWYt
ZDczNjRkZDM1YjMxLzEvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lMTM5ZDgtNjhlMC00ZmZhLWI0ZWYtZDczNjRkZDM1YjMx
LzEvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKfZ/UgZ
layo7TYi6JCF5kKXHcqLR6iM6nAyA7tWXAV26x0xIMan4SCOlNVNRYr6cYW5sVNq
8pHKik1Ra2Eu93GwFxCnAPSXaz+BCOxPjE4vTxmIUDsARyU8UA96iWZQAIBoA/cj
9jJ6FUjYcHiaeijFkccarVtE25Obg49oFFxm6hkYvqHc1jHfvR6JDOXhvTzHQn3Z
Qk5zpX6G8yW5n/OW3jttvIA9JMIL+H9uwQYdVKPnv+lBE+yG0HMp3/w5rQjhIgR+
qBzDaW3u/M66jwKwLwleX7W5BSxzZH+1IqbjemBGI4LilLxDXvZI0PFjdQLE6cRY
DzzzzxaSVb/mlw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:57 2026 by rpki-client