Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: jXIAha2a88L6waiLXZxfkyIW2FOsnrBB7SDoYk1NbYo=
Subject key identifier: B7:D5:42:A4:F7:35:52:B9:DD:4D:5D:D8:F2:79:17:61:95:B9:95:9A
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019CABA1B58F629D73F63DE4F5A8B76E0E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1861
Signing time: Sun 01 Mar 2026 23:00:27 +0000
Manifest this update: Sun 01 Mar 2026 23:00:27 +0000
Manifest next update: Mon 02 Mar 2026 23:00:27 +0000
Files and hashes: 1: PHg3Ww569zMDLEj_XkzXkt_l28U.roa (hash: 5pJ4hX6iwllF4hbtS1Bn9jqzOhPSmXxQOqAVEn4F03k=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: r+SoS4iG1zLUW2MwpvfwkuP3UkN5Oa9xbV47/hjMTaM=)
3: ri2vYJesfddybqK6UaLh9V2RvNw.roa (hash: o/GKrhkl1lRLWD595uYZL3g9iAVKABVMqzW4acHlZ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b5:8f:62:9d:73:f6:3d:e4:f5:a8:b7:6e:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Mar 1 23:00:27 2026 GMT
Not After : Mar 2 23:00:27 2026 GMT
Subject: CN=b7d542a4f73552b9dd4d5dd8f279176195b9959a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:71:de:9e:10:d8:0e:6c:f3:ad:8f:ad:9c:
c2:26:cd:58:a0:28:e8:e4:f9:b1:51:1b:a5:53:f3:
44:0a:6b:77:b1:0e:78:70:68:89:20:30:de:ff:f9:
23:d0:03:e3:ad:fd:5a:d7:19:3f:bf:75:41:0b:c5:
c4:3b:80:ae:6e:97:09:13:dd:9b:16:35:25:48:50:
25:5d:9c:96:1c:19:76:36:b0:81:e0:09:af:2f:3d:
ed:72:1b:58:dc:33:74:3b:68:aa:86:2c:88:26:c6:
51:5a:a4:a3:94:fe:52:a2:c2:f4:d7:ac:f0:59:4d:
43:a9:d5:db:71:7a:55:21:22:06:51:64:99:fe:a5:
4e:a3:f8:0c:c4:a5:88:98:80:82:67:28:01:8f:b6:
c7:ee:6b:19:3f:0c:5c:87:b3:21:ff:b5:5d:97:97:
7e:42:b2:5f:b9:55:34:25:0c:fd:bf:12:eb:82:84:
e6:a5:09:8f:15:3d:6e:39:ca:e6:2b:f2:66:54:97:
9e:ab:df:62:98:cd:5c:66:24:57:34:0f:42:76:b0:
c5:99:d6:8f:e1:1d:cb:a8:f3:9d:c2:8e:f2:34:20:
39:c6:a6:05:31:27:20:46:83:c6:81:ca:97:7e:b8:
de:78:4e:7c:73:83:3b:2b:b0:1a:1f:ad:38:4e:1f:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D5:42:A4:F7:35:52:B9:DD:4D:5D:D8:F2:79:17:61:95:B9:95:9A
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c6:20:f5:65:5e:34:1f:af:ed:86:c5:cb:12:6f:f5:d6:d4:
f6:a6:a6:39:a3:54:2e:86:ed:c0:75:23:69:08:68:ff:dd:a6:
fb:39:36:50:af:6f:9e:c4:ca:e3:97:e0:72:99:f6:be:3a:c6:
52:82:c1:c7:4d:01:14:ba:a9:81:10:e7:b2:0b:90:6d:3c:29:
42:3f:d3:e0:64:e8:c5:32:9f:68:af:4e:ab:98:93:8f:3b:25:
70:ce:66:57:1e:ab:be:07:82:58:da:42:94:bd:61:d1:24:50:
bc:f5:08:5c:ca:c7:13:cf:cb:a6:22:01:1c:6d:f0:78:e3:d9:
8c:39:2e:c0:8f:8c:46:6b:25:5f:34:3c:67:05:e4:40:72:54:
23:14:8f:53:00:99:28:af:64:fe:1e:a4:be:a6:e2:a5:19:fd:
b0:4c:58:da:69:90:3d:c1:7e:a2:bd:62:6a:a7:21:24:9d:4d:
d3:61:a7:78:1f:e1:6c:04:b6:c0:4f:9d:20:7d:21:6f:53:93:
e6:09:26:cb:55:b0:27:be:aa:7d:5a:d9:16:5a:40:b9:f0:6a:
e7:07:7d:41:58:09:e7:27:b9:69:0c:02:99:50:74:ad:ac:d6:
1a:13:7a:33:ab:10:e9:61:4d:82:40:64:b0:d2:80:a8:36:c9:
c3:a1:52:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrobWPYp1z9j3k9ai3bg4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx
YzRmZTIwHhcNMjYwMzAxMjMwMDI3WhcNMjYwMzAyMjMwMDI3WjAzMTEwLwYDVQQD
EyhiN2Q1NDJhNGY3MzU1MmI5ZGQ0ZDVkZDhmMjc5MTc2MTk1Yjk5NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL1x3p4Q2A5s862PrZzCJs1YoCjo
5PmxURulU/NECmt3sQ54cGiJIDDe//kj0APjrf1a1xk/v3VBC8XEO4CubpcJE92b
FjUlSFAlXZyWHBl2NrCB4AmvLz3tchtY3DN0O2iqhiyIJsZRWqSjlP5SosL016zw
WU1DqdXbcXpVISIGUWSZ/qVOo/gMxKWImICCZygBj7bH7msZPwxch7Mh/7Vdl5d+
QrJfuVU0JQz9vxLrgoTmpQmPFT1uOcrmK/JmVJeeq99imM1cZiRXNA9CdrDFmdaP
4R3LqPOdwo7yNCA5xqYFMScgRoPGgcqXfrjeeE58c4M7K7AaH604Th/NBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfVQqT3NVK53U1d2PJ5F2GVuZWaMB8GA1UdIwQY
MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt
NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk
LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMYg9WVe
NB+v7YbFyxJv9dbU9qamOaNULobtwHUjaQho/92m+zk2UK9vnsTK45fgcpn2vjrG
UoLBx00BFLqpgRDnsguQbTwpQj/T4GToxTKfaK9Oq5iTjzslcM5mVx6rvgeCWNpC
lL1h0SRQvPUIXMrHE8/LpiIBHG3weOPZjDkuwI+MRmslXzQ8ZwXkQHJUIxSPUwCZ
KK9k/h6kvqbipRn9sExY2mmQPcF+or1iaqchJJ1N02GneB/hbAS2wE+dIH0hb1OT
5gkmy1WwJ76qfVrZFlpAufBq5wd9QVgJ5ye5aQwCmVB0razWGhN6M6sQ6WFNgkBk
sNKAqDbJw6FSUQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:58 2026 by rpki-client