Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json)
Hash identifier: 5RTmbRU62VRHp2DsDQFQK2RmNB03ifxEpLJbwG1rQFY=
Subject key identifier: 5C:85:43:69:4E:F0:A6:A6:9A:0D:92:0C:79:6B:87:2D:D8:87:37:59
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 019CAA58B74787D02ADA8A9DDB862E91A41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
Manifest number: 099D
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: Kri8lcqdAC5Txkl5fI-cqACqq6c.roa (hash: J1QbpgXMbeBVuARIX0Ol8v/rcfJIXCmPbQPctcPNzxM=)
2: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: WJwQZTQ+mnDQLeJbMP1kC+64xaWR7gAPga78YPwaqSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b7:47:87:d0:2a:da:8a:9d:db:86:2e:91:a4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=5c8543694ef0a6a69a0d920c796b872dd8873759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:43:20:e4:6d:6c:1a:a2:92:9a:60:79:8a:
bf:ac:3f:1f:b0:9a:0f:86:87:be:68:ea:0a:fc:d2:
1e:fa:0d:b7:78:9e:f7:45:de:6e:8c:ce:c8:2a:84:
94:45:63:51:97:5d:eb:f4:30:a3:2e:f3:27:5d:63:
23:af:a4:9c:30:18:f2:04:88:cd:ae:b5:fc:47:a6:
09:e1:44:f9:9b:b2:a8:cd:69:68:86:ca:95:48:62:
38:02:ef:a2:cd:22:8c:f6:85:b8:35:0f:63:88:c9:
54:d2:33:73:29:84:bc:69:70:8b:d9:3f:b5:16:2b:
e3:f4:bf:28:ad:5e:98:a0:25:ec:14:56:81:a7:06:
5c:6a:63:df:ef:cd:3a:92:2e:fb:94:84:a9:49:c9:
58:3a:04:84:50:26:0c:b7:1c:85:6e:fd:dc:33:ac:
a6:bc:39:bd:ae:9b:50:98:34:32:4f:37:ea:4f:d8:
33:c7:68:f2:f6:e1:2c:c6:4e:b3:d2:86:dc:53:7f:
f8:76:cf:e2:27:03:0e:8f:a3:d8:2f:40:31:54:c7:
fd:95:42:5a:71:67:94:89:73:23:3f:e4:98:3a:34:
99:b4:1a:43:72:63:99:b9:21:47:58:cb:d0:31:0d:
69:7b:ae:44:f3:66:8c:34:f8:d0:67:0a:ad:06:fc:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:43:69:4E:F0:A6:A6:9A:0D:92:0C:79:6B:87:2D:D8:87:37:59
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:72:c1:3e:15:68:c6:f2:59:29:f0:b7:36:da:2c:5b:00:
9b:34:d4:72:e9:2a:7e:76:11:f2:c1:32:10:1c:0c:a4:29:65:
db:38:2e:12:6c:f4:50:37:ef:6b:7a:0d:83:08:aa:5d:fc:de:
3a:25:a5:ee:36:2d:93:9f:57:2f:78:2c:bc:3a:40:4e:98:7d:
df:76:2c:4a:d0:88:a6:05:07:60:c9:83:25:77:3e:31:dc:78:
37:60:84:a9:15:d0:c5:2d:52:98:fd:02:a0:27:65:56:93:fb:
56:c6:e6:79:75:1f:20:11:3b:8f:2b:a6:38:cf:05:8f:f7:de:
48:24:f5:ee:15:72:0c:23:0c:67:d3:33:10:d3:17:25:a3:5b:
ac:c9:44:e2:ce:a1:d3:74:d7:c4:65:ea:5c:82:a9:e0:a2:50:
74:f8:d5:1f:2d:68:a8:97:21:38:e0:d5:cf:68:de:cd:18:53:
ab:c5:02:3d:0c:53:de:b1:01:9a:a8:74:34:55:e7:8e:63:e5:
ed:50:47:52:d4:07:4e:57:3f:62:7b:64:0f:fd:72:02:48:31:
86:8c:62:1e:64:46:54:17:fa:43:45:06:dc:b5:52:c2:ac:87:
3c:e8:1e:05:dc:68:31:71:51:4f:4e:00:64:1a:67:18:6f:5d:
98:d0:1a:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWLdHh9Aq2oqd24YukaQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYTJhOTI1NDc5YmNmY2JjMTk2ODhhOTUyYTI0MzAxZjRl
NzY4MzkwHhcNMjYwMzAxMTcwMTA2WhcNMjYwMzAyMTcwMTA2WjAzMTEwLwYDVQQD
Eyg1Yzg1NDM2OTRlZjBhNmE2OWEwZDkyMGM3OTZiODcyZGQ4ODczNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo11DIORtbBqikppgeYq/rD8fsJoP
hoe+aOoK/NIe+g23eJ73Rd5ujM7IKoSURWNRl13r9DCjLvMnXWMjr6ScMBjyBIjN
rrX8R6YJ4UT5m7KozWlohsqVSGI4Au+izSKM9oW4NQ9jiMlU0jNzKYS8aXCL2T+1
Fivj9L8orV6YoCXsFFaBpwZcamPf7806ki77lISpSclYOgSEUCYMtxyFbv3cM6ym
vDm9rptQmDQyTzfqT9gzx2jy9uEsxk6z0obcU3/4ds/iJwMOj6PYL0AxVMf9lUJa
cWeUiXMjP+SYOjSZtBpDcmOZuSFHWMvQMQ1pe65E82aMNPjQZwqtBvxehwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyFQ2lO8Kammg2SDHlrhy3YhzdZMB8GA1UdIwQY
MBaAFFqiqSVHm8/LwZaIqVKiQwH052g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3FLcEpVZWJ6OHZCbG9pcFVxSkRBZlRuYURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wYTAzMGYtYWJiNS00ZTM3LTk2YTMt
YjRmMTIwMTIyOTIyLzEvV3FLcEpVZWJ6OHZCbG9pcFVxSkRBZlRuYURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wYTAzMGYtYWJiNS00ZTM3LTk2YTMtYjRmMTIwMTIyOTIy
LzEvV3FLcEpVZWJ6OHZCbG9pcFVxSkRBZlRuYURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtxywT4V
aMbyWSnwtzbaLFsAmzTUcukqfnYR8sEyEBwMpCll2zguEmz0UDfva3oNgwiqXfze
OiWl7jYtk59XL3gsvDpATph933YsStCIpgUHYMmDJXc+Mdx4N2CEqRXQxS1SmP0C
oCdlVpP7VsbmeXUfIBE7jyumOM8Fj/feSCT17hVyDCMMZ9MzENMXJaNbrMlE4s6h
03TXxGXqXIKp4KJQdPjVHy1oqJchOODVz2jezRhTq8UCPQxT3rEBmqh0NFXnjmPl
7VBHUtQHTlc/YntkD/1yAkgxhoxiHmRGVBf6Q0UG3LVSwqyHPOgeBdxoMXFRT04A
ZBpnGG9dmNAaFA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:34 2026 by rpki-client