Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File: wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier: h52RXq+m7YEbO2+vH40yzlKCZ6+zGPT3FEZgg7fEb6s=
Subject key identifier: 3E:4C:4D:2E:E2:93:32:80:D6:5F:E3:0E:A0:D2:90:06:41:36:28:2D
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer: /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial: 019CAB6B67BAF74D983792F3FA08687FEBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number: 0ECA
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: qoBDdmnINwqUcx-VmQSYdLjSutc.roa (hash: dGzZF5Z6PKeCna7aXMJiJ8cbxuXwL2FNfyawPOwtpyQ=)
2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: 9QnnnMQOfpL8a/93YtMyJfYu5md7/ZcG9ewgD/sXVKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:67:ba:f7:4d:98:37:92:f3:fa:08:68:7f:eb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=3e4c4d2ee2933280d65fe30ea0d290064136282d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:31:e0:33:12:4e:8b:56:b4:f4:c4:04:6e:
51:fd:a5:11:c3:c3:ac:4e:f1:df:a2:eb:f2:af:c7:
97:96:1a:9d:ce:77:0e:cf:07:24:eb:bb:d8:36:87:
35:4d:41:a1:d7:d3:05:63:50:fe:6a:c0:c3:a7:bc:
45:59:cf:50:ac:2e:3c:47:75:ca:0a:6f:68:4e:6b:
9a:e5:c5:cf:73:dd:75:66:31:58:d3:31:ad:d0:38:
87:7a:74:45:25:4f:8a:9a:1d:19:2d:f8:f9:1e:ab:
39:17:09:a1:e0:03:74:e0:0f:5e:0c:bf:54:d9:8b:
28:8b:68:6e:51:05:c1:c8:f1:58:4f:b2:3d:cf:33:
91:47:5d:b3:18:76:28:f3:da:b4:76:fe:3e:52:3d:
ee:9f:15:64:22:c5:bc:7e:4c:21:52:49:01:bd:4b:
f1:72:ea:ad:a4:13:5f:48:7a:51:27:c6:88:7e:9d:
a6:4d:09:f5:74:d4:eb:71:06:31:b2:34:c2:9c:20:
12:78:39:30:d9:57:c7:35:8a:28:a2:5e:95:e0:ce:
12:81:0f:16:cc:ca:9b:76:ff:a0:55:26:93:11:6d:
83:94:1b:01:73:66:58:ee:b4:4b:d3:c2:aa:be:e9:
ba:5a:dc:de:60:c8:71:0a:b7:4d:f5:6c:cb:c1:65:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:4D:2E:E2:93:32:80:D6:5F:E3:0E:A0:D2:90:06:41:36:28:2D
X509v3 Authority Key Identifier:
keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:6d:8b:e4:a7:cc:31:f6:e1:22:4f:c4:1f:16:c5:57:a9:
58:6c:55:19:8a:c9:6f:75:8c:26:63:15:c4:22:ba:e2:28:80:
fe:7e:ed:d3:6b:f8:7e:b4:8f:b8:dd:ba:55:fd:bb:19:2f:df:
91:c1:c4:dc:fb:30:fc:02:08:22:21:cf:72:f6:42:92:88:05:
4e:6b:7b:a4:2c:ab:5c:00:24:bc:d0:9f:ae:bb:ea:ba:65:4f:
81:df:4a:d4:a3:71:4e:fd:13:69:80:dc:28:70:5f:ff:f2:ba:
89:e4:f4:cf:b2:51:12:8e:07:0e:9e:43:47:34:80:e5:72:96:
21:2b:e3:ab:51:68:f9:7e:70:dd:83:c1:35:f5:99:bc:56:19:
3a:0b:29:74:f6:69:22:d1:4a:9f:46:35:a1:9f:5b:38:00:a8:
cc:87:b3:e9:a4:65:e2:e8:7c:a1:e2:09:55:fa:c9:55:f3:6e:
75:8b:9c:83:b1:de:b4:63:13:cb:66:08:a1:5e:8c:e7:bf:a3:
e1:25:51:0c:51:cf:81:b3:80:96:5d:97:8d:99:ad:be:f1:69:
ef:65:9b:67:2f:b9:2c:c2:47:94:a6:db:33:18:aa:a3:8a:c2:
78:de:bc:5d:f9:fe:c3:1f:83:29:85:bd:09:fc:df:0e:e7:61:
87:0d:c2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra2e6902YN5Lz+ghof+u+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNTIzM2FmNGJhNTkxMTlkNmZmMTk0ZDdjZDg2NjUwODRh
NmVlNzcwHhcNMjYwMzAxMjIwMTA4WhcNMjYwMzAyMjIwMTA4WjAzMTEwLwYDVQQD
EygzZTRjNGQyZWUyOTMzMjgwZDY1ZmUzMGVhMGQyOTAwNjQxMzYyODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls0x4DMSTotWtPTEBG5R/aURw8Os
TvHfouvyr8eXlhqdzncOzwck67vYNoc1TUGh19MFY1D+asDDp7xFWc9QrC48R3XK
Cm9oTmua5cXPc911ZjFY0zGt0DiHenRFJU+Kmh0ZLfj5Hqs5Fwmh4AN04A9eDL9U
2Ysoi2huUQXByPFYT7I9zzORR12zGHYo89q0dv4+Uj3unxVkIsW8fkwhUkkBvUvx
cuqtpBNfSHpRJ8aIfp2mTQn1dNTrcQYxsjTCnCASeDkw2VfHNYoool6V4M4SgQ8W
zMqbdv+gVSaTEW2DlBsBc2ZY7rRL08Kqvum6WtzeYMhxCrdN9WzLwWURDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5MTS7ikzKA1l/jDqDSkAZBNigtMB8GA1UdIwQY
MBaAFMFSM69LpZEZ1v8ZTXzYZlCEpu53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMt
NGI3ZjM3NWVjZDA2LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMtNGI3ZjM3NWVjZDA2
LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4xti+Sn
zDH24SJPxB8WxVepWGxVGYrJb3WMJmMVxCK64iiA/n7t02v4frSPuN26Vf27GS/f
kcHE3Psw/AIIIiHPcvZCkogFTmt7pCyrXAAkvNCfrrvqumVPgd9K1KNxTv0TaYDc
KHBf//K6ieT0z7JREo4HDp5DRzSA5XKWISvjq1Fo+X5w3YPBNfWZvFYZOgspdPZp
ItFKn0Y1oZ9bOACozIez6aRl4uh8oeIJVfrJVfNudYucg7HetGMTy2YIoV6M57+j
4SVRDFHPgbOAll2XjZmtvvFp72WbZy+5LMJHlKbbMxiqo4rCeN68Xfn+wx+DKYW9
CfzfDudhhw3CpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:31 2026 by rpki-client