
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier: 8Yo9RMkpgLt+njPt+GzWSQ8Ds+sCy6lh947ViXEw2Wk=
Subject key identifier: 81:24:8C:A9:BA:D6:F7:23:00:27:47:EF:02:63:19:F4:23:D9:96:00
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 019CABD8E08AB9E7C5A8B115E8B86F5B6E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number: 07CA
Signing time: Mon 02 Mar 2026 00:00:42 +0000
Manifest this update: Mon 02 Mar 2026 00:00:42 +0000
Manifest next update: Tue 03 Mar 2026 00:00:42 +0000
Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: UgTH+jcnKd8Q+xWV3rRRDU33/SJXFqWeYMHpHB+iZtk=)
2: nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa (hash: ybsBDRN+Wgxdd71NM5Q38e+H0vIZjbotj33kAgs43CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e0:8a:b9:e7:c5:a8:b1:15:e8:b8:6f:5b:6e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Mar 2 00:00:42 2026 GMT
Not After : Mar 3 00:00:42 2026 GMT
Subject: CN=81248ca9bad6f723002747ef026319f423d99600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:8c:19:59:f9:d1:bd:c9:5f:b3:e6:ff:72:
6d:f7:79:a5:88:54:9a:bf:34:d1:35:db:29:54:b8:
e2:44:b6:35:e1:40:b3:b1:0a:ac:31:f2:82:ba:56:
3b:1c:4e:c8:49:be:9b:88:7b:0d:a5:4e:80:a8:fc:
f5:28:5d:44:ff:8a:4d:51:28:9e:31:18:d8:99:1a:
27:d7:21:88:97:a3:be:ab:dd:28:8d:da:79:b0:8e:
a1:80:c3:25:41:45:9b:0d:9c:13:94:36:34:28:b9:
38:e1:1c:f0:1a:5c:c9:0d:b3:01:3b:1e:02:ac:58:
60:fe:c9:18:9f:03:fd:5f:81:1e:af:93:e3:e1:92:
60:e1:59:3d:78:44:38:10:a6:c5:c0:a9:5c:05:16:
bc:1c:a1:af:ad:1d:9e:09:2f:23:ab:34:55:0c:fa:
71:e6:f1:45:7f:a5:06:94:b6:fc:84:dd:e5:94:a8:
99:f5:d3:33:a0:a2:3f:21:75:fc:bf:0a:34:7f:98:
0c:7d:75:17:6e:35:0f:71:8d:b2:79:0f:9b:43:53:
0c:32:90:cd:3b:b2:99:37:df:d2:cd:b2:00:39:8c:
9e:40:82:81:5a:9f:4d:9f:86:7f:1c:3b:93:c7:5d:
03:43:5c:9a:20:b8:62:60:39:0c:22:ba:7d:03:e5:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:8C:A9:BA:D6:F7:23:00:27:47:EF:02:63:19:F4:23:D9:96:00
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bb:b5:92:a6:be:30:86:c5:f8:44:26:4a:f1:1f:4e:ad:09:
d5:0d:99:0f:ad:d5:41:ec:25:bb:43:8c:c9:29:ec:af:84:90:
3f:c9:2f:75:1e:ac:ea:5a:6c:06:14:2b:9c:c8:74:ca:70:23:
40:5a:fa:7d:ec:3e:f7:94:e9:77:5e:72:87:50:2f:5d:ef:db:
43:ae:2a:80:2e:30:0f:99:2a:b3:8b:5a:6b:85:3a:13:7a:22:
d7:01:09:9d:c8:57:f1:e0:42:fd:5c:3a:27:1e:93:0a:9f:23:
5a:65:fd:05:14:55:e8:82:ce:4d:c6:39:c7:c4:37:34:bb:17:
70:ea:9e:b8:e2:af:8a:e5:b3:50:06:58:6c:65:67:82:6c:f4:
d2:79:ea:4c:2f:95:1f:c2:63:28:70:21:52:21:b2:ba:70:47:
83:cc:53:50:a4:3e:e9:75:5b:a3:1b:54:3f:51:61:45:7e:34:
77:5c:3a:e3:b3:72:9a:1e:2f:84:c7:83:2d:73:34:a4:33:7b:
33:8a:c4:85:a3:c6:40:43:4b:84:a2:9f:55:3f:5c:87:3d:5b:
c2:69:a0:23:d2:a8:b1:20:e1:84:63:a0:f2:53:75:41:32:c2:
83:78:06:a5:bc:b0:9e:f6:92:29:57:79:88:2e:40:56:c8:96:
fb:1b:30:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2OCKuefFqLEV6LhvW24TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy
NmI1ZDMwHhcNMjYwMzAyMDAwMDQyWhcNMjYwMzAzMDAwMDQyWjAzMTEwLwYDVQQD
Eyg4MTI0OGNhOWJhZDZmNzIzMDAyNzQ3ZWYwMjYzMTlmNDIzZDk5NjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7uMGVn50b3JX7Pm/3Jt93mliFSa
vzTRNdspVLjiRLY14UCzsQqsMfKCulY7HE7ISb6biHsNpU6AqPz1KF1E/4pNUSie
MRjYmRon1yGIl6O+q90ojdp5sI6hgMMlQUWbDZwTlDY0KLk44RzwGlzJDbMBOx4C
rFhg/skYnwP9X4Eer5Pj4ZJg4Vk9eEQ4EKbFwKlcBRa8HKGvrR2eCS8jqzRVDPpx
5vFFf6UGlLb8hN3llKiZ9dMzoKI/IXX8vwo0f5gMfXUXbjUPcY2yeQ+bQ1MMMpDN
O7KZN9/SzbIAOYyeQIKBWp9Nn4Z/HDuTx10DQ1yaILhiYDkMIrp9A+XWSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEkjKm61vcjACdH7wJjGfQj2ZYAMB8GA1UdIwQY
MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt
OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz
LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLu1kqa+
MIbF+EQmSvEfTq0J1Q2ZD63VQewlu0OMySnsr4SQP8kvdR6s6lpsBhQrnMh0ynAj
QFr6few+95Tpd15yh1AvXe/bQ64qgC4wD5kqs4taa4U6E3oi1wEJnchX8eBC/Vw6
Jx6TCp8jWmX9BRRV6ILOTcY5x8Q3NLsXcOqeuOKviuWzUAZYbGVngmz00nnqTC+V
H8JjKHAhUiGyunBHg8xTUKQ+6XVboxtUP1FhRX40d1w647Nymh4vhMeDLXM0pDN7
M4rEhaPGQENLhKKfVT9chz1bwmmgI9KosSDhhGOg8lN1QTLCg3gGpbywnvaSKVd5
iC5AVsiW+xsw1A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:42 2026 by rpki-client