Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: O0GW5mvWIyjBE/mGGGPm1PpSuP6U020qu8rliUFtObE=
Subject key identifier: 5E:DC:5E:C5:C8:AE:5E:7A:F9:AB:0C:0E:E7:85:C5:8E:49:E5:5B:6B
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 019CABA23B53D32A06249263D173D898B709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 111A
Signing time: Sun 01 Mar 2026 23:01:01 +0000
Manifest this update: Sun 01 Mar 2026 23:01:01 +0000
Manifest next update: Mon 02 Mar 2026 23:01:01 +0000
Files and hashes: 1: gWlv5iDtX9nVjLLKKMShSTPx4uA.roa (hash: LL5oSQlkIVfG3xLLP9DHUwmZyFU2l1CdAagBhNZJ0QQ=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: jt2MBuhAxwrd/rkErW1a3DFgZna+lQI4XK9Dsq5GX0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3b:53:d3:2a:06:24:92:63:d1:73:d8:98:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Mar 1 23:01:01 2026 GMT
Not After : Mar 2 23:01:01 2026 GMT
Subject: CN=5edc5ec5c8ae5e7af9ab0c0ee785c58e49e55b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:71:02:0d:24:cd:43:c1:7b:c7:e8:89:85:
dd:09:a2:33:62:16:e3:77:6c:85:5e:0c:ad:f0:6d:
15:e3:19:63:5d:b1:de:62:ce:35:fe:21:36:a4:d7:
e6:c7:6e:a8:f4:58:ca:4f:d5:0a:1a:19:bb:a0:54:
04:3d:b4:7f:70:8a:26:36:e4:c3:0d:87:4a:93:f2:
e4:c2:69:3a:8c:61:25:1d:b6:5f:05:62:9f:ce:35:
58:92:14:ac:bf:8f:7b:ce:6b:3c:f1:12:d4:5c:79:
4b:b0:e2:76:4c:c7:b2:5a:cd:a4:0b:43:10:c5:8b:
5b:7a:3a:a0:1c:43:d5:8b:3c:1d:27:5f:ac:95:69:
2e:66:6b:ec:c7:e1:9b:f0:43:3d:94:c7:35:35:ba:
18:17:d0:51:5d:09:b8:50:a5:41:8a:c0:3b:a7:e2:
60:9d:20:89:94:36:84:31:1e:eb:fe:c9:ae:df:1a:
e5:d6:35:15:8c:b6:2a:37:b5:ce:d8:23:ce:d2:99:
d4:5f:ef:a0:77:30:13:fc:a6:63:1e:f3:6e:62:33:
ed:59:4b:71:e1:21:1f:5a:21:60:ea:1a:ce:54:b7:
78:a7:9d:b7:51:bf:ef:08:22:e6:11:1e:17:52:3d:
e7:39:d2:c8:25:cd:1c:82:b7:34:f2:fc:65:7c:c7:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:5E:C5:C8:AE:5E:7A:F9:AB:0C:0E:E7:85:C5:8E:49:E5:5B:6B
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:0f:f2:e6:25:69:7e:71:c3:66:82:f1:b7:ee:40:bc:05:
56:60:e2:f0:ef:f0:b4:6b:1e:d6:1f:1b:8f:7c:70:44:f4:47:
6d:4f:88:ef:12:a2:09:26:fd:9e:60:a7:13:d7:cb:cb:ed:1a:
58:e2:4d:b8:3d:5d:ab:1c:a0:b6:b7:bf:8d:af:d4:f9:2a:65:
ff:8b:6d:49:db:91:e7:f1:bf:a9:4c:9d:45:17:09:13:be:fa:
7d:5c:47:22:2c:d3:a7:86:fe:c4:79:e9:46:6b:5b:15:30:19:
2a:20:1b:85:2c:52:b3:ed:16:d9:67:83:d2:15:09:14:74:4f:
50:62:d6:9e:b5:67:b8:96:cf:e1:f9:08:5b:da:5b:7b:d2:9b:
f5:f5:24:66:50:4a:b0:96:58:a8:39:38:f6:30:68:19:f9:ca:
f2:07:8e:37:11:13:69:98:32:fc:c5:05:9a:e6:5c:23:c0:58:
98:ca:cb:4b:4e:24:b1:bf:7b:26:ab:35:3a:5b:4d:70:66:96:
8f:bf:46:d1:ea:cd:dc:4a:9f:c3:c0:6e:80:9a:79:9b:7f:b9:
bf:6f:95:c5:bc:e9:60:4c:08:d4:ec:e7:c5:66:d6:90:f1:99:
0e:13:28:95:74:fa:ad:fe:a6:00:5c:58:63:10:91:67:27:20:
a2:5c:02:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojtT0yoGJJJj0XPYmLcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNzc1MGI4MzExMWQ0MTcxYmJmNTVjYTAyMzIyYzFhMGRj
MGFjMzIwHhcNMjYwMzAxMjMwMTAxWhcNMjYwMzAyMjMwMTAxWjAzMTEwLwYDVQQD
Eyg1ZWRjNWVjNWM4YWU1ZTdhZjlhYjBjMGVlNzg1YzU4ZTQ5ZTU1YjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw5xAg0kzUPBe8foiYXdCaIzYhbj
d2yFXgyt8G0V4xljXbHeYs41/iE2pNfmx26o9FjKT9UKGhm7oFQEPbR/cIomNuTD
DYdKk/Lkwmk6jGElHbZfBWKfzjVYkhSsv497zms88RLUXHlLsOJ2TMeyWs2kC0MQ
xYtbejqgHEPVizwdJ1+slWkuZmvsx+Gb8EM9lMc1NboYF9BRXQm4UKVBisA7p+Jg
nSCJlDaEMR7r/smu3xrl1jUVjLYqN7XO2CPO0pnUX++gdzAT/KZjHvNuYjPtWUtx
4SEfWiFg6hrOVLd4p523Ub/vCCLmER4XUj3nOdLIJc0cgrc08vxlfMd0DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7cXsXIrl56+asMDueFxY5J5VtrMB8GA1UdIwQY
MBaAFMB3ULgxEdQXG79VygIyLBoNwKwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjct
M2M1MjliZjYyZTU0LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjctM2M1MjliZjYyZTU0
LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetIP8uYl
aX5xw2aC8bfuQLwFVmDi8O/wtGse1h8bj3xwRPRHbU+I7xKiCSb9nmCnE9fLy+0a
WOJNuD1dqxygtre/ja/U+Spl/4ttSduR5/G/qUydRRcJE776fVxHIizTp4b+xHnp
RmtbFTAZKiAbhSxSs+0W2WeD0hUJFHRPUGLWnrVnuJbP4fkIW9pbe9Kb9fUkZlBK
sJZYqDk49jBoGfnK8geONxETaZgy/MUFmuZcI8BYmMrLS04ksb97Jqs1OltNcGaW
j79G0erN3Eqfw8BugJp5m3+5v2+VxbzpYEwI1OznxWbWkPGZDhMolXT6rf6mAFxY
YxCRZycgolwCzg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:33 2026 by rpki-client