Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: P1sTmbsZ+K+N9w1A+rkCRHihDsRu48bTWmsqC1KuxPY=
Subject key identifier: B1:6F:25:14:7F:D3:BC:FA:34:AD:FE:28:F1:67:DC:B4:AE:77:A9:26
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 019CABD9F09B99E0E29B16EFAF5C1EFBE8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 07F6
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: OGQiuCtwzZJ9dAw5kz1ODwt8MOJpWA5aZz6R0ldqC4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f0:9b:99:e0:e2:9b:16:ef:af:5c:1e:fb:e8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=b16f25147fd3bcfa34adfe28f167dcb4ae77a926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:a1:46:5d:68:ce:5e:59:b3:c2:5a:8b:eb:
69:66:df:86:78:86:59:ba:d8:21:00:21:a7:30:c6:
8a:f0:2b:02:7b:4d:a6:2b:b4:77:08:f1:6b:68:70:
0d:5d:df:ad:71:a0:30:22:cc:5b:31:69:a3:8c:82:
b0:22:0c:cc:cc:3f:10:13:81:37:67:b2:95:44:ff:
5e:36:0d:6f:a6:eb:69:70:04:ed:ee:c7:a7:e1:55:
3d:98:c6:fb:e8:00:e5:22:4c:f1:17:86:8d:ce:7c:
e6:43:a7:a1:a0:d2:51:73:7b:13:56:03:e7:6a:61:
b7:2f:ec:53:45:d5:91:37:82:7b:cb:36:06:2e:00:
94:c6:99:c6:af:fe:ae:8f:e2:7d:01:c1:cd:ae:d2:
7e:b2:0b:cf:5c:84:a3:d8:98:1a:8e:09:fd:2c:9b:
aa:b6:20:ec:02:69:b5:dd:c3:b6:d2:87:94:a9:10:
fb:d3:2e:ba:b8:7d:e5:09:66:84:dc:31:ce:d6:1e:
90:c3:6a:df:cd:8d:c7:3a:1b:d9:f7:b8:59:d9:d6:
84:d6:7c:9f:96:0a:da:0c:a4:96:8d:53:12:e9:06:
1a:1d:9c:4c:6f:f3:7a:04:35:9f:8f:cf:9d:b1:c1:
02:f3:00:42:c9:41:2c:83:9f:55:d2:65:18:46:c0:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6F:25:14:7F:D3:BC:FA:34:AD:FE:28:F1:67:DC:B4:AE:77:A9:26
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ff:47:7e:86:f8:94:d5:de:e0:97:0b:bc:67:3a:4d:d9:ed:
83:79:45:eb:0c:2d:e2:dc:a9:2d:fe:93:46:f0:38:9d:df:4a:
a4:81:6e:da:65:80:3b:a1:88:7e:9f:45:3e:18:d4:50:58:32:
ba:7a:f9:1a:3d:a1:09:16:dd:5d:ca:a9:3c:22:89:1d:27:43:
c8:aa:ca:e4:8e:a9:aa:ef:ae:be:12:cd:57:d5:60:e8:ec:61:
e1:9d:01:5f:e5:50:87:19:9c:d0:e3:1e:aa:ee:ea:3e:f5:5a:
c7:7e:14:15:0e:9f:69:b6:bf:1a:89:48:56:41:3e:97:6f:0a:
42:15:92:62:fb:e8:01:f3:b6:af:f8:4c:85:bd:6f:8c:12:c4:
23:87:eb:a9:47:ed:83:7f:7a:98:22:9a:01:d9:40:af:96:af:
14:8a:c1:7c:48:a1:01:ea:43:39:eb:90:9d:31:96:dc:94:5f:
eb:70:ff:49:01:69:74:27:c7:b4:02:83:b9:cf:b2:fb:1a:d8:
56:3c:e2:18:d7:b4:96:c7:3f:cc:d3:90:93:0a:89:6e:41:72:
28:c3:0b:96:78:b5:e0:a1:e9:47:1b:41:21:33:d6:34:c4:da:
c1:d6:5b:08:b1:ca:e1:fe:37:6c:f9:09:a9:83:b4:b8:20:58:
aa:5a:7d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fCbmeDimxbvr1we++iuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk
ZTVjMGEwHhcNMjYwMzAyMDAwMTUyWhcNMjYwMzAzMDAwMTUyWjAzMTEwLwYDVQQD
EyhiMTZmMjUxNDdmZDNiY2ZhMzRhZGZlMjhmMTY3ZGNiNGFlNzdhOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcyhRl1ozl5Zs8Jai+tpZt+GeIZZ
utghACGnMMaK8CsCe02mK7R3CPFraHANXd+tcaAwIsxbMWmjjIKwIgzMzD8QE4E3
Z7KVRP9eNg1vputpcATt7sen4VU9mMb76ADlIkzxF4aNznzmQ6ehoNJRc3sTVgPn
amG3L+xTRdWRN4J7yzYGLgCUxpnGr/6uj+J9AcHNrtJ+sgvPXISj2Jgajgn9LJuq
tiDsAmm13cO20oeUqRD70y66uH3lCWaE3DHO1h6Qw2rfzY3HOhvZ97hZ2daE1nyf
lgraDKSWjVMS6QYaHZxMb/N6BDWfj8+dscEC8wBCyUEsg59V0mUYRsBdVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFvJRR/07z6NK3+KPFn3LSud6kmMB8GA1UdIwQY
MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt
MmQ4MDE5MDE3ODQ5LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5
LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASv9Hfob4
lNXe4JcLvGc6Tdntg3lF6wwt4typLf6TRvA4nd9KpIFu2mWAO6GIfp9FPhjUUFgy
unr5Gj2hCRbdXcqpPCKJHSdDyKrK5I6pqu+uvhLNV9Vg6Oxh4Z0BX+VQhxmc0OMe
qu7qPvVax34UFQ6faba/GolIVkE+l28KQhWSYvvoAfO2r/hMhb1vjBLEI4frqUft
g396mCKaAdlAr5avFIrBfEihAepDOeuQnTGW3JRf63D/SQFpdCfHtAKDuc+y+xrY
VjziGNe0lsc/zNOQkwqJbkFyKMMLlni14KHpRxtBITPWNMTawdZbCLHK4f43bPkJ
qYO0uCBYqlp98w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:01 2026 by rpki-client