Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File: wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier: zARxqatOho+ZmPDtg6RxApxmcgSRGvjcLYjKXPhmUaU=
Subject key identifier: 71:BB:11:6E:BF:02:72:87:1F:B3:B4:59:A5:A2:55:9B:F5:9A:0A:BE
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial: 019CAB6AC5167E6B1E0804771A4C383A4CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number: 0EAD
Signing time: Sun 01 Mar 2026 22:00:26 +0000
Manifest this update: Sun 01 Mar 2026 22:00:26 +0000
Manifest next update: Mon 02 Mar 2026 22:00:26 +0000
Files and hashes: 1: jHB7xQRhme5IgDPSIjvcZtfv9aQ.roa (hash: pcTgx9nDgIx90gGTJ16PrKl7UPy4GXJVIOHRZSZS2G8=)
2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: EYa3RhXq/Pd5QHvUdmsa/s9n+AE+N5HnaNc/tm8YM0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c5:16:7e:6b:1e:08:04:77:1a:4c:38:3a:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Validity
Not Before: Mar 1 22:00:26 2026 GMT
Not After : Mar 2 22:00:26 2026 GMT
Subject: CN=71bb116ebf0272871fb3b459a5a2559bf59a0abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:04:08:d8:fb:9f:d2:06:3d:40:1e:91:98:
28:e6:b6:7e:c4:63:e8:a0:0e:b5:5a:0d:33:71:08:
b6:d9:b9:15:ec:55:c2:8c:0e:8f:59:69:77:06:80:
3f:55:8b:6c:bb:19:20:10:9c:61:02:96:d7:49:c3:
9e:9c:71:3a:74:80:63:fb:3b:42:ec:e5:f2:f6:c6:
d6:da:4e:91:3a:02:7f:49:2b:82:5e:67:af:5f:96:
28:b0:ba:e1:95:11:c4:03:ef:1f:f2:e5:17:bc:b7:
9e:91:39:ba:61:bb:7c:cc:b0:76:75:7b:37:ba:4b:
2d:74:d5:d8:de:26:2d:60:0e:7a:d2:ce:3e:84:8c:
b7:d2:35:9f:e3:30:f8:9a:92:0b:34:54:fa:7a:0d:
15:b7:b3:a3:20:66:74:26:33:3b:24:57:4c:61:18:
7a:59:8f:fc:be:dc:98:e4:fa:12:fa:3e:54:93:c0:
38:b8:bb:6d:25:24:ea:93:18:f6:31:18:54:89:46:
33:fd:c3:95:f6:cf:2e:bc:ac:5a:82:58:ec:3c:74:
fc:51:95:22:2e:28:ec:7d:f8:4c:e1:be:f1:64:10:
e3:b5:8c:ae:b7:72:fe:1b:d7:df:83:72:77:47:35:
f0:54:3d:07:c9:31:e7:49:36:06:13:1b:31:1b:9a:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:11:6E:BF:02:72:87:1F:B3:B4:59:A5:A2:55:9B:F5:9A:0A:BE
X509v3 Authority Key Identifier:
keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:36:cd:7d:db:b0:c9:e2:d9:9e:0b:55:ba:0e:c7:32:27:de:
94:cd:0f:76:0a:2e:5c:77:e3:1b:db:a6:ee:f6:a4:bd:2e:c1:
89:47:22:93:07:b1:c5:2e:1b:15:d7:a6:59:61:a5:9d:04:ff:
2d:74:19:b0:03:20:ea:fb:c1:e1:24:df:b0:52:69:18:8f:d0:
53:19:f8:fe:61:0c:e5:dc:e8:21:61:3f:d6:98:15:44:c1:52:
b1:d1:61:9b:cb:fe:82:62:a8:28:1f:10:6f:e5:a4:42:90:29:
39:e5:92:78:e9:3e:24:a6:ed:01:fe:3a:7f:f5:d9:7f:b0:b7:
36:db:29:d5:b4:a2:ac:6d:79:73:b0:d4:63:7b:6d:8f:af:d8:
51:67:86:a2:db:17:14:57:93:b8:04:e9:40:fe:a9:3e:0a:89:
29:6c:0a:88:03:df:a8:0d:60:cd:5a:fe:70:67:29:b6:21:5b:
c3:1f:02:58:dd:4b:9a:2b:e4:ac:26:e6:4c:40:2d:c2:28:cb:
ba:81:6a:74:ec:1b:55:a2:4a:0c:e3:63:82:3c:ee:e4:a2:96:
54:b2:50:8b:ec:c9:6f:0e:6a:43:59:ac:2e:e7:79:b7:67:da:
4e:c8:ca:ed:3c:37:43:ee:3a:a8:b0:57:33:1b:22:4d:77:84:
8e:f4:b8:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrasUWfmseCAR3Gkw4OkywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwM2MyOTU2NmVmNTlmY2YxYTkwZDgyZDA4YWUxMGM2MzBm
OTRiODgwHhcNMjYwMzAxMjIwMDI2WhcNMjYwMzAyMjIwMDI2WjAzMTEwLwYDVQQD
Eyg3MWJiMTE2ZWJmMDI3Mjg3MWZiM2I0NTlhNWEyNTU5YmY1OWEwYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopcECNj7n9IGPUAekZgo5rZ+xGPo
oA61Wg0zcQi22bkV7FXCjA6PWWl3BoA/VYtsuxkgEJxhApbXScOenHE6dIBj+ztC
7OXy9sbW2k6ROgJ/SSuCXmevX5YosLrhlRHEA+8f8uUXvLeekTm6Ybt8zLB2dXs3
ukstdNXY3iYtYA560s4+hIy30jWf4zD4mpILNFT6eg0Vt7OjIGZ0JjM7JFdMYRh6
WY/8vtyY5PoS+j5Uk8A4uLttJSTqkxj2MRhUiUYz/cOV9s8uvKxagljsPHT8UZUi
LijsffhM4b7xZBDjtYyut3L+G9ffg3J3RzXwVD0HyTHnSTYGExsxG5rGmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG7EW6/AnKHH7O0WaWiVZv1mgq+MB8GA1UdIwQY
MBaAFMA8KVZu9Z/PGpDYLQiuEMYw+UuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYt
MDgxMTExMDNjY2Y5LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYtMDgxMTExMDNjY2Y5
LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjbNfduw
yeLZngtVug7HMifelM0PdgouXHfjG9um7vakvS7BiUcikwexxS4bFdemWWGlnQT/
LXQZsAMg6vvB4STfsFJpGI/QUxn4/mEM5dzoIWE/1pgVRMFSsdFhm8v+gmKoKB8Q
b+WkQpApOeWSeOk+JKbtAf46f/XZf7C3Ntsp1bSirG15c7DUY3ttj6/YUWeGotsX
FFeTuATpQP6pPgqJKWwKiAPfqA1gzVr+cGcptiFbwx8CWN1LmivkrCbmTEAtwijL
uoFqdOwbVaJKDONjgjzu5KKWVLJQi+zJbw5qQ1msLud5t2faTsjK7Tw3Q+46qLBX
MxsiTXeEjvS4pQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:22 2026 by rpki-client