Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier: +z5tbsEfxuKt0p/8opITaXgwlMouN7tY7OEYBpFuBRU=
Subject key identifier: 82:61:2E:D7:FC:7B:36:AA:28:A3:01:66:B4:81:06:77:C0:44:7F:FF
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer: /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial: 019CAAFD641840CCCBB19701D8BB44F1EC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number: 0942
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: VrmjHVAC_dTFireq6yrVrnJ1Qr8.roa (hash: 3FZStDcO/86XfV9ktKFi/0KRl54/2sqdqVE7Qc6xIko=)
2: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: bLVfalAbbym4PWnlK86coel8+utLdvCG1yMH+H3gCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:64:18:40:cc:cb:b1:97:01:d8:bb:44:f1:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=82612ed7fc7b36aa28a30166b4810677c0447fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:1a:a4:91:b1:57:20:00:81:47:07:80:6e:
20:fb:4d:63:ad:59:6c:d5:ea:c0:b0:ab:a2:43:35:
ae:0b:0c:8c:09:bf:16:d5:ea:68:ab:40:78:4d:95:
e0:5e:9c:9c:ce:9c:6b:78:ba:18:3a:9a:6b:92:f4:
a5:15:e5:bc:05:e4:32:3c:68:22:ed:b0:16:e9:df:
0b:6a:e6:38:88:ee:e0:f4:a0:09:44:56:2a:b7:eb:
f4:3d:d1:05:c3:7e:7c:b8:80:68:2b:ca:1b:7c:b0:
f6:3c:99:ca:65:a1:65:50:44:6b:7b:7b:f0:c5:60:
6a:f9:b4:a7:59:c9:6c:fc:02:9c:95:ea:e9:04:42:
6d:94:6f:0d:7b:78:86:0c:08:60:f0:0e:51:fd:f0:
34:32:e9:f5:54:3c:53:95:16:52:10:d4:14:7e:bf:
4b:cf:9f:9c:34:27:e4:01:e9:be:98:1e:e3:c0:d6:
cd:67:7d:c5:8e:22:a4:33:7c:7b:bc:78:58:07:8d:
ab:3e:e7:c3:f0:75:4d:f4:db:c9:a3:d7:31:03:ec:
b7:44:54:39:5c:db:3a:c0:ab:c2:9d:b0:ae:db:ec:
be:58:3d:30:92:f9:7e:1a:5d:0d:69:2f:13:26:3c:
63:65:c2:b2:ab:c0:0e:cf:ae:f0:b6:cd:da:fe:be:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:61:2E:D7:FC:7B:36:AA:28:A3:01:66:B4:81:06:77:C0:44:7F:FF
X509v3 Authority Key Identifier:
keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d2:c3:7e:d7:32:fd:62:09:ff:56:01:06:fb:80:1d:72:47:
be:cd:82:3c:de:d5:e7:38:f7:00:81:6a:63:60:0a:f8:06:43:
cf:6e:66:63:01:b2:5a:ee:da:4d:91:1d:68:a1:48:ab:36:19:
44:48:01:4c:23:09:c2:99:66:df:20:65:70:dd:45:ee:a3:65:
1e:d2:67:b7:fe:16:f3:9e:ac:c9:0d:4d:5b:d9:8d:e1:68:33:
4b:91:81:e7:62:52:45:8d:f6:c3:fd:74:fa:b4:be:f3:d8:66:
dc:eb:6a:62:ce:5b:5d:8b:7b:fc:2a:ae:17:e0:6d:10:43:89:
b9:ba:62:df:a4:08:98:ff:29:4b:00:0d:e2:a8:62:d9:3b:77:
12:98:c6:e7:cb:fb:15:76:b6:b7:1c:b4:1a:b6:31:b8:e7:8a:
e6:e8:bb:75:5b:d1:99:f6:62:bd:d9:a1:8b:fb:b2:f8:1a:54:
5f:e3:3d:00:1a:1a:7a:2d:be:b2:5b:00:72:54:e7:38:c5:f2:
eb:61:f0:d9:71:59:14:b4:45:fb:8a:de:73:a9:a9:02:68:20:
ab:a1:fe:ec:ae:ac:1b:b1:fa:66:78:01:da:fb:ff:c1:c0:d6:
10:13:9d:ad:7a:34:53:a6:c8:f2:12:a1:c4:96:dd:9b:31:b7:
44:2e:28:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/WQYQMzLsZcB2LtE8ew9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGEzZDgwZjY3ODZmMTc5MTA5OGQ0NWVjZDU1NGYwNjYw
Y2NlNGYwHhcNMjYwMzAxMjAwMDU4WhcNMjYwMzAyMjAwMDU4WjAzMTEwLwYDVQQD
Eyg4MjYxMmVkN2ZjN2IzNmFhMjhhMzAxNjZiNDgxMDY3N2MwNDQ3ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQYapJGxVyAAgUcHgG4g+01jrVls
1erAsKuiQzWuCwyMCb8W1epoq0B4TZXgXpyczpxreLoYOpprkvSlFeW8BeQyPGgi
7bAW6d8LauY4iO7g9KAJRFYqt+v0PdEFw358uIBoK8obfLD2PJnKZaFlUERre3vw
xWBq+bSnWcls/AKclerpBEJtlG8Ne3iGDAhg8A5R/fA0Mun1VDxTlRZSENQUfr9L
z5+cNCfkAem+mB7jwNbNZ33FjiKkM3x7vHhYB42rPufD8HVN9NvJo9cxA+y3RFQ5
XNs6wKvCnbCu2+y+WD0wkvl+Gl0NaS8TJjxjZcKyq8AOz67wts3a/r72mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJhLtf8ezaqKKMBZrSBBnfARH//MB8GA1UdIwQY
MBaAFMBKPYD2eG8XkQmNRezVVPBmDM5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMzZlYjEtOGFmNS00OTEwLThkZjQt
ZWQyZTEzNmRjMDI2LzEvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMzZlYjEtOGFmNS00OTEwLThkZjQtZWQyZTEzNmRjMDI2
LzEvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdLDftcy
/WIJ/1YBBvuAHXJHvs2CPN7V5zj3AIFqY2AK+AZDz25mYwGyWu7aTZEdaKFIqzYZ
REgBTCMJwplm3yBlcN1F7qNlHtJnt/4W856syQ1NW9mN4WgzS5GB52JSRY32w/10
+rS+89hm3OtqYs5bXYt7/CquF+BtEEOJubpi36QImP8pSwAN4qhi2Tt3EpjG58v7
FXa2txy0GrYxuOeK5ui7dVvRmfZivdmhi/uy+BpUX+M9ABoaei2+slsAclTnOMXy
62Hw2XFZFLRF+4rec6mpAmggq6H+7K6sG7H6ZngB2vv/wcDWEBOdrXo0U6bI8hKh
xJbdmzG3RC4oww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:50 2026 by rpki-client