
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier: juGdDUI55SAU6EbgpmZHJDOs3ta29tIt1VKPMKOgQiM=
Subject key identifier: 4D:D3:FC:84:FE:3A:B7:FE:D5:D4:C4:7B:76:F1:9F:57:6D:B7:BC:EA
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial: 019CABA201D5D93730321745EB802A0970B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number: 16FC
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: JvdKR8w378wRcIgnyCDN8YQt0NY.roa (hash: yPYUw3ORIF3GkrD9VXNJ088VEVXOizVNl2vWPpByN18=)
2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: Q/xVi2Yvzv0qvC0gFOWCC1gIFDuJRjvqe6wH2okdWGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:01:d5:d9:37:30:32:17:45:eb:80:2a:09:70:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=4dd3fc84fe3ab7fed5d4c47b76f19f576db7bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:75:42:8c:61:03:6f:8e:5d:2f:c2:8f:39:
dc:2c:c4:ef:34:f1:d3:18:6e:f3:94:e0:10:28:fb:
e8:31:43:0b:90:08:27:de:3c:40:5b:ba:86:69:a8:
b7:e8:14:45:48:8d:35:c2:07:b7:38:c3:22:1f:f6:
7d:5d:6e:8a:8f:51:69:9c:6d:3f:15:71:cb:78:8e:
b0:a9:b4:19:37:75:35:c8:a0:72:8b:ac:7e:82:ff:
ca:e6:cf:92:21:4c:43:79:d8:a2:43:0b:b3:29:0e:
63:72:f6:cc:8f:01:f3:df:c1:be:bb:80:22:56:c2:
e2:18:1e:55:74:b5:94:79:4f:54:c6:8e:09:fd:87:
84:29:d1:bc:a9:56:c7:60:50:9b:87:53:f3:70:68:
99:3b:ed:af:f3:6e:a0:df:7c:c8:44:82:3d:43:9e:
ac:95:c1:db:0c:76:26:16:77:e3:fd:e7:df:85:12:
9f:f7:37:3f:c5:19:46:b7:eb:71:d0:c0:95:c1:26:
fc:57:75:e7:c6:5e:26:aa:7c:a1:87:58:73:36:82:
7d:db:7e:56:a8:f2:a6:2b:16:8c:b2:97:46:93:1a:
36:3d:cd:d5:ea:10:f1:b7:db:5e:f4:92:d8:b2:48:
84:c3:21:3b:85:d2:96:74:aa:56:21:36:44:3c:11:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:FC:84:FE:3A:B7:FE:D5:D4:C4:7B:76:F1:9F:57:6D:B7:BC:EA
X509v3 Authority Key Identifier:
keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:57:56:65:72:54:d3:32:2d:3e:38:00:f4:7b:bb:67:ff:d4:
bd:0c:8c:98:2f:77:8e:2e:91:d6:89:b1:fd:a4:00:78:e7:81:
f0:c8:da:93:8d:3d:a5:95:86:aa:17:af:e6:84:c7:7a:39:86:
67:04:72:d1:14:0c:94:7b:d3:68:51:0d:c6:e9:cc:b0:ac:eb:
21:af:54:93:2b:e4:b3:c9:6a:10:59:f5:c5:df:ae:db:c0:16:
c5:0a:89:ae:10:73:00:84:bd:7e:18:53:c1:7a:00:1c:eb:94:
12:a9:de:a8:5b:b6:37:4d:0e:01:79:72:da:6f:48:41:34:16:
7c:37:75:ce:4c:a4:0c:70:c7:f3:32:46:54:da:98:c3:fa:16:
1e:c6:56:1a:c6:49:21:0d:96:b3:73:e3:e1:e9:a6:c7:72:7f:
e8:3e:b9:75:72:8b:7a:86:8b:f5:22:60:06:4d:f6:1a:26:92:
d4:e1:7d:b7:12:1d:14:91:2e:3d:20:69:78:43:a7:9c:90:8e:
0f:14:b4:43:72:a4:06:18:ae:78:a7:f5:0b:2f:0b:5d:ea:34:
2c:07:a7:46:33:27:08:24:c7:1d:2c:8c:e9:8c:98:94:83:fa:
79:00:26:6c:8b:1a:0a:4b:6e:22:85:f9:5e:af:d5:f7:ec:44:
68:a6:3f:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrogHV2TcwMhdF64AqCXCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjU5MDlmM2I5NGU1NWY1ZWYzMzZhMjdkMjc0YTdkZmQw
ZDk2YjIwHhcNMjYwMzAxMjMwMDQ2WhcNMjYwMzAyMjMwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZGQzZmM4NGZlM2FiN2ZlZDVkNGM0N2I3NmYxOWY1NzZkYjdiY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1351QoxhA2+OXS/CjzncLMTvNPHT
GG7zlOAQKPvoMUMLkAgn3jxAW7qGaai36BRFSI01wge3OMMiH/Z9XW6Kj1FpnG0/
FXHLeI6wqbQZN3U1yKByi6x+gv/K5s+SIUxDediiQwuzKQ5jcvbMjwHz38G+u4Ai
VsLiGB5VdLWUeU9Uxo4J/YeEKdG8qVbHYFCbh1PzcGiZO+2v826g33zIRII9Q56s
lcHbDHYmFnfj/effhRKf9zc/xRlGt+tx0MCVwSb8V3Xnxl4mqnyhh1hzNoJ9235W
qPKmKxaMspdGkxo2Pc3V6hDxt9te9JLYskiEwyE7hdKWdKpWITZEPBH2awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3T/IT+Orf+1dTEe3bxn1dtt7zqMB8GA1UdIwQY
MBaAFFslkJ87lOVfXvM2on0nSn39DZayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEt
M2YxN2NiY2JhNWNhLzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEtM2YxN2NiY2JhNWNh
LzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1dWZXJU
0zItPjgA9Hu7Z//UvQyMmC93ji6R1omx/aQAeOeB8Mjak409pZWGqhev5oTHejmG
ZwRy0RQMlHvTaFENxunMsKzrIa9Ukyvks8lqEFn1xd+u28AWxQqJrhBzAIS9fhhT
wXoAHOuUEqneqFu2N00OAXly2m9IQTQWfDd1zkykDHDH8zJGVNqYw/oWHsZWGsZJ
IQ2Ws3Pj4emmx3J/6D65dXKLeoaL9SJgBk32GiaS1OF9txIdFJEuPSBpeEOnnJCO
DxS0Q3KkBhiueKf1Cy8LXeo0LAenRjMnCCTHHSyM6YyYlIP6eQAmbIsaCktuIoX5
Xq/V9+xEaKY/dw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:09 2026 by rpki-client