Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: DuysEJCPoikOp4YcLuKZPQhAdPYvSMrBxTnyZrFB2RY=
Subject key identifier: 73:49:4F:0D:60:49:43:9B:B5:6F:C7:99:40:02:18:61:7A:A5:BE:A7
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 019CABD92ABC9B8FA4CE9BFCA2E4452241A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 0609
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: S66d551JroD6MSIEZ_42ExhqO5k.roa (hash: t3UcVYuNtk2YzWoEW72cC2ZSBix9HCSCO3JVqXCUzCU=)
2: VxEWsPAkHIxtvkrHED-wCH1kUI0.roa (hash: 8vUxWPnKT69GjCXQn0MXD3bHdB31nVJ/4lTKFyOpw+g=)
3: aVFkjMqYn2rDvWK_4Er7veowmzc.roa (hash: a0eU89LPDvn15SbN8UifKQ8En1lFGp7ZEcjuxOeXD3w=)
4: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: oyKWoa0SBkyV4M92NZ30PbEM2JBrEyPwkYn58o62Ygc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2a:bc:9b:8f:a4:ce:9b:fc:a2:e4:45:22:41:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=73494f0d6049439bb56fc799400218617aa5bea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:57:85:d1:b0:bf:09:a0:c2:ae:e0:35:f2:
eb:ad:df:21:2e:c7:a7:72:6b:5e:9a:8f:05:2b:f8:
1c:91:4c:ee:9d:92:9c:1e:c7:90:78:ce:01:e7:69:
5c:80:cc:b2:f9:2d:1e:9e:b9:77:b2:36:03:8a:44:
a0:ea:50:c4:e8:20:a4:56:f0:12:70:d7:7d:e1:cf:
4e:d2:b5:1f:38:b2:cd:ed:6c:de:c3:6f:ce:b8:27:
93:3d:c8:9c:da:d0:53:3d:01:2a:8e:b8:7f:f9:96:
f8:23:23:da:23:0a:a4:8d:a4:96:d3:07:bc:14:c0:
45:cd:d7:ad:5f:ac:dc:e7:94:b8:31:77:ed:8c:72:
c4:37:4a:4f:68:ab:e1:2c:89:b4:ef:3b:c6:a5:1a:
8b:86:64:43:67:43:7b:f3:76:f0:8f:32:0e:6d:91:
d4:7c:a1:3e:51:e4:5f:08:77:cf:5c:d3:dd:8f:f6:
5a:38:41:7c:e9:14:01:de:d7:a7:a9:3d:88:6b:57:
8b:1c:36:a2:26:03:71:41:79:bc:19:7f:10:16:54:
ef:03:78:a8:40:90:56:68:42:06:31:e7:a9:9d:b0:
00:38:ad:47:fc:6f:5e:02:f7:d5:da:1b:bc:eb:bf:
42:27:0b:a1:0e:24:9c:85:9f:52:06:fa:3e:15:a0:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:4F:0D:60:49:43:9B:B5:6F:C7:99:40:02:18:61:7A:A5:BE:A7
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:0d:0c:d5:1e:3b:41:60:1f:3e:f8:91:7b:25:60:18:46:
b6:42:39:0b:fe:ee:40:5b:19:19:35:55:21:e6:09:52:84:dd:
ff:77:64:1d:0c:e9:88:38:29:ac:4c:22:18:f5:11:77:89:4b:
6c:89:4d:db:9e:3c:15:44:94:ca:44:44:7a:5c:62:39:66:64:
62:44:1a:e7:d2:65:44:2d:79:d2:9e:f3:32:9d:36:83:af:40:
1c:d3:21:f8:ac:ce:3d:c5:94:54:39:0d:84:4c:f9:14:24:0f:
82:56:cb:23:7a:03:f9:a0:ea:7b:1b:06:1c:9f:f0:3f:fe:a0:
25:77:30:3b:d3:7c:7d:fa:25:67:4f:45:27:fb:8d:33:f5:14:
85:c1:7c:1c:7d:ef:47:6c:d3:aa:d4:46:65:e3:13:fd:f6:79:
ef:8b:10:8e:aa:08:d0:13:a1:66:b2:a7:99:43:f0:2c:9a:51:
67:fd:ed:ab:90:aa:1d:20:94:c7:85:34:92:9e:b9:74:aa:8e:
99:d3:a2:b2:13:85:b2:c3:a6:45:2a:75:f5:6f:c5:27:ee:0f:
a1:1e:bb:e2:fe:65:2f:d5:45:fd:5d:f0:40:69:4a:c2:cd:60:
7a:91:18:b4:ef:c6:ba:24:38:2d:3a:e4:9c:70:0d:9f:6f:e4:
f8:e1:27:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Sq8m4+kzpv8ouRFIkGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTg4MzU5Yjk1YTM5NjRhZTZmOWEwY2RhYWUwN2Y1Nzlm
OThjMzUwHhcNMjYwMzAyMDAwMTAxWhcNMjYwMzAzMDAwMTAxWjAzMTEwLwYDVQQD
Eyg3MzQ5NGYwZDYwNDk0MzliYjU2ZmM3OTk0MDAyMTg2MTdhYTViZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy45XhdGwvwmgwq7gNfLrrd8hLsen
cmtemo8FK/gckUzunZKcHseQeM4B52lcgMyy+S0enrl3sjYDikSg6lDE6CCkVvAS
cNd94c9O0rUfOLLN7Wzew2/OuCeTPcic2tBTPQEqjrh/+Zb4IyPaIwqkjaSW0we8
FMBFzdetX6zc55S4MXftjHLEN0pPaKvhLIm07zvGpRqLhmRDZ0N783bwjzIObZHU
fKE+UeRfCHfPXNPdj/ZaOEF86RQB3tenqT2Ia1eLHDaiJgNxQXm8GX8QFlTvA3io
QJBWaEIGMeepnbAAOK1H/G9eAvfV2hu8679CJwuhDiSchZ9SBvo+FaCONQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNJTw1gSUObtW/HmUACGGF6pb6nMB8GA1UdIwQY
MBaAFJXog1m5Wjlkrm+aDNquB/V5+Yw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTkt
NzEyZDVlMTdhNmY2LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTktNzEyZDVlMTdhNmY2
LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBwNDNUe
O0FgHz74kXslYBhGtkI5C/7uQFsZGTVVIeYJUoTd/3dkHQzpiDgprEwiGPURd4lL
bIlN2548FUSUykREelxiOWZkYkQa59JlRC150p7zMp02g69AHNMh+KzOPcWUVDkN
hEz5FCQPglbLI3oD+aDqexsGHJ/wP/6gJXcwO9N8ffolZ09FJ/uNM/UUhcF8HH3v
R2zTqtRGZeMT/fZ574sQjqoI0BOhZrKnmUPwLJpRZ/3tq5CqHSCUx4U0kp65dKqO
mdOishOFssOmRSp19W/FJ+4PoR674v5lL9VF/V3wQGlKws1gepEYtO/GuiQ4LTrk
nHANn2/k+OEnHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:44 2026 by rpki-client