Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: ZEPvFruuf8ocywNHODUEA3fFJiFtfUsOBw0+GcgD+Do=
Subject key identifier: 84:17:F0:07:0E:CF:C6:F5:AF:12:48:81:ED:E0:68:FF:0D:DC:AA:53
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019CAA5834E4B545F86F8CE4F3D063C6F28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 127C
Signing time: Sun 01 Mar 2026 17:00:33 +0000
Manifest this update: Sun 01 Mar 2026 17:00:33 +0000
Manifest next update: Mon 02 Mar 2026 17:00:33 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: slDP+uLMscrKKtlRaJMOZ3+21P0KBtWEbdRl+4RxTjc=)
2: jRw_hCaxwNXQsYzA3PzlY4fOvh8.roa (hash: TsARQtUlpIVlezRpKUxgn9JnDhx3xOYYjd6M4rAmM6E=)
3: wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (hash: uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:34:e4:b5:45:f8:6f:8c:e4:f3:d0:63:c6:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Mar 1 17:00:33 2026 GMT
Not After : Mar 2 17:00:33 2026 GMT
Subject: CN=8417f0070ecfc6f5af124881ede068ff0ddcaa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:74:44:fc:36:ef:c1:d8:c1:87:d4:12:cd:
bf:73:ef:9a:fe:46:22:d0:4b:5f:79:14:cb:b1:ad:
75:61:9b:2a:91:65:43:74:42:03:92:79:6f:74:6b:
97:00:c4:c5:a9:10:a5:5f:bb:05:ae:30:96:66:da:
de:11:04:f5:89:7f:36:5c:56:c8:bc:cc:af:8c:26:
79:ac:e9:09:47:61:78:32:bb:2f:2d:79:2a:30:53:
09:95:7d:00:b6:0b:06:c0:fe:6e:30:2c:31:da:7d:
cf:75:01:9f:5f:b6:d2:38:39:95:6c:0e:f7:af:09:
56:4c:5d:42:9e:6c:50:8f:c0:72:32:73:62:b7:ed:
64:1b:9a:0d:f2:a8:5f:b7:05:7a:da:fb:fb:17:51:
32:c2:4c:ae:5e:99:05:cc:ee:87:63:bc:45:28:48:
4c:2b:7b:2a:1b:83:30:8e:4e:c7:be:d2:ed:2d:13:
21:e6:76:de:b9:d6:a1:47:7c:17:19:ed:22:4f:2c:
7c:a4:1a:e2:9b:5a:6b:b8:e1:11:66:af:a3:d6:35:
f7:ed:58:65:e9:8a:aa:6c:fb:d1:3d:a9:d9:c5:b2:
d0:d0:c6:7b:bc:02:de:56:0b:77:74:dd:6d:4a:90:
42:1c:58:d5:be:7c:6a:ec:2b:12:aa:97:05:a3:32:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:17:F0:07:0E:CF:C6:F5:AF:12:48:81:ED:E0:68:FF:0D:DC:AA:53
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4a:10:f4:80:6e:12:72:29:33:71:e8:36:a6:7c:b3:e8:c8:
a9:bd:86:08:cb:c0:18:27:f1:ef:80:63:6e:4a:5a:bc:6d:f8:
44:b1:f1:29:84:20:1e:c9:c3:74:a7:ed:46:99:3a:d5:da:ef:
98:a7:7b:1b:75:e1:a6:1d:f7:53:f1:13:8f:c1:47:e6:ad:f3:
17:cd:32:3e:71:d7:bc:21:e7:e7:ed:97:5f:5e:90:78:57:d6:
aa:cb:ea:fd:c4:8a:80:fd:1d:52:24:e5:aa:74:93:ab:ac:df:
65:8c:8c:6d:4f:78:18:53:5d:a1:3f:70:17:d4:f3:74:d8:8d:
58:30:e5:a8:e4:74:70:72:e4:2d:7d:11:8d:71:7b:4b:0d:64:
d0:af:98:a9:35:75:5e:74:4c:32:63:2d:96:8e:01:31:b8:4a:
69:b1:ff:a0:c4:83:45:f7:dc:5c:be:6f:f8:12:ea:d3:27:30:
a4:23:f3:bd:f4:18:ee:40:ec:c1:d9:bd:91:4e:fe:e9:29:c2:
b4:bc:db:a8:f1:79:8f:73:73:c1:bd:33:d2:92:55:5d:71:7a:
6e:c1:6a:e0:4c:5c:48:7e:22:8f:94:87:3d:5d:3d:82:0b:c3:
cb:9a:5f:ea:54:5a:9e:24:2c:e9:e5:68:15:34:53:2c:e0:42:
cc:0c:7e:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWDTktUX4b4zk89BjxvKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNjM2OTI3MWI2ZDEzYTZhZWRjYWEyM2ViYjI5ZTI5Yjc5
NmE0NmIwHhcNMjYwMzAxMTcwMDMzWhcNMjYwMzAyMTcwMDMzWjAzMTEwLwYDVQQD
Eyg4NDE3ZjAwNzBlY2ZjNmY1YWYxMjQ4ODFlZGUwNjhmZjBkZGNhYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8h0RPw278HYwYfUEs2/c++a/kYi
0EtfeRTLsa11YZsqkWVDdEIDknlvdGuXAMTFqRClX7sFrjCWZtreEQT1iX82XFbI
vMyvjCZ5rOkJR2F4MrsvLXkqMFMJlX0AtgsGwP5uMCwx2n3PdQGfX7bSODmVbA73
rwlWTF1CnmxQj8ByMnNit+1kG5oN8qhftwV62vv7F1EywkyuXpkFzO6HY7xFKEhM
K3sqG4Mwjk7HvtLtLRMh5nbeudahR3wXGe0iTyx8pBrim1pruOERZq+j1jX37Vhl
6YqqbPvRPanZxbLQ0MZ7vALeVgt3dN1tSpBCHFjVvnxq7CsSqpcFozJsPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQX8AcOz8b1rxJIge3gaP8N3KpTMB8GA1UdIwQY
MBaAFP1jaScbbROmrtyqI+uynim3lqRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZDVlMTUtNGYxNC00OWU2LWE2ZGQt
NDUzNTFmOWRiYjUyLzEvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lZDVlMTUtNGYxNC00OWU2LWE2ZGQtNDUzNTFmOWRiYjUy
LzEvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEoQ9IBu
EnIpM3HoNqZ8s+jIqb2GCMvAGCfx74BjbkpavG34RLHxKYQgHsnDdKftRpk61drv
mKd7G3Xhph33U/ETj8FH5q3zF80yPnHXvCHn5+2XX16QeFfWqsvq/cSKgP0dUiTl
qnSTq6zfZYyMbU94GFNdoT9wF9TzdNiNWDDlqOR0cHLkLX0RjXF7Sw1k0K+YqTV1
XnRMMmMtlo4BMbhKabH/oMSDRffcXL5v+BLq0ycwpCPzvfQY7kDswdm9kU7+6SnC
tLzbqPF5j3Nzwb0z0pJVXXF6bsFq4ExcSH4ij5SHPV09ggvDy5pf6lRaniQs6eVo
FTRTLOBCzAx+Dg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:09 2026 by rpki-client