Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier: 1ZgRkGO5GUcm6MBCnG5iyyTmaUcxTiC+UWrpiKamPxY=
Subject key identifier: 44:56:E9:94:6C:2D:AE:13:CF:5D:6F:FA:E6:69:A5:7C:14:AE:0E:0E
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial: 019CAB6BA8B1BC005FCC5EA05CFDFE122599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number: 17E9
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: es1bxamBnFS1/I05bRQFt8erxHBTJ4ukn0hhLS3CYV4=)
2: ylZo-PtqvCZYS10GqApM9m6Ug-o.roa (hash: 4edYiQzvX2wZ9mo10QzR6c1dv5Szd3EKKnlZ558MCYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a8:b1:bc:00:5f:cc:5e:a0:5c:fd:fe:12:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=4456e9946c2dae13cf5d6ffae669a57c14ae0e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:39:82:6f:be:bd:76:e1:f7:ae:e4:86:2c:
3e:f6:ac:7f:84:25:9a:81:7f:5e:79:9d:3f:a6:03:
d4:8d:05:6f:6c:ec:6a:e6:e0:4d:2c:2b:2b:86:15:
7f:6a:26:cd:11:f0:9d:0e:4b:e2:33:bf:18:8c:f9:
89:34:db:8b:28:35:a2:65:47:08:d3:4a:3c:c9:72:
1d:47:bc:ce:2a:87:10:fb:1a:bc:b1:a4:63:23:6c:
8c:8e:e2:2d:8a:76:ea:f5:b8:96:54:70:bc:5d:82:
a9:2d:24:1f:76:ab:4c:87:9e:9e:49:31:36:f2:8f:
b5:d9:c5:28:d3:0d:f6:53:03:b7:02:7b:b3:cf:e6:
e8:50:74:50:58:13:e1:f0:13:0c:03:9f:88:c4:64:
36:6b:83:b3:3b:48:9b:b0:4d:55:51:92:0d:c1:3e:
aa:fa:a1:64:ba:83:3e:20:a2:37:ea:f2:e7:e1:bf:
6a:98:d9:58:9d:b0:a4:ae:1c:7e:e3:6f:46:85:e1:
f5:9b:59:33:df:c6:4e:e0:59:b9:60:70:67:a7:cf:
07:2a:b0:02:8b:a5:b1:0e:26:10:89:b3:e5:e1:69:
cb:ad:24:c7:eb:6d:ee:c2:66:c3:03:3c:b5:aa:82:
10:15:92:3e:e1:48:28:34:a1:85:30:36:6c:c8:b7:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:56:E9:94:6C:2D:AE:13:CF:5D:6F:FA:E6:69:A5:7C:14:AE:0E:0E
X509v3 Authority Key Identifier:
keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:03:b6:93:6e:f2:f4:0f:d5:84:75:1d:9b:01:fb:5e:33:ee:
58:ca:9b:96:19:e2:91:eb:17:8e:1d:9e:28:dc:3d:d5:70:84:
ba:4b:ad:dc:3f:ea:de:45:90:75:28:55:fb:3b:0b:3e:f4:16:
e7:67:9d:61:c5:32:bf:b2:16:56:d7:93:b9:14:03:22:61:e0:
98:99:5d:4c:9e:31:46:e7:f7:93:12:a3:19:a6:17:9e:94:8b:
44:c2:1f:e2:1a:b6:36:0b:ff:b9:a5:89:e6:a6:0b:e5:7f:a7:
fb:e9:9d:48:e8:c3:a4:d6:94:58:bc:b6:18:ab:c5:19:1a:27:
59:4f:f7:ff:9a:d9:e3:a7:8d:d3:a3:4b:25:22:96:2d:83:93:
08:f8:ef:2d:5e:ad:56:a3:50:6c:62:80:42:33:70:f0:88:1d:
b9:92:bb:7a:f4:10:56:01:44:96:63:bf:25:48:be:ae:43:ca:
6a:5e:51:17:ed:93:f1:29:75:d1:b9:de:2f:16:ce:d9:66:5b:
ae:b2:32:40:09:a8:c3:54:b7:5e:86:c0:d6:56:7d:d7:d0:b3:
b8:7c:fc:5d:87:c4:a5:ac:33:b0:4e:3e:66:6b:a6:38:b7:45:
f9:df:ab:4b:75:27:7d:1c:43:19:95:ca:b8:b3:0d:b8:40:03:
24:9f:2e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6ixvABfzF6gXP3+EiWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMjFmMTg1YjRiMzg2Njc1NWRiYTAwMTBiY2YxMGI5NGE4
YWE2NmMwHhcNMjYwMzAxMjIwMTI1WhcNMjYwMzAyMjIwMTI1WjAzMTEwLwYDVQQD
Eyg0NDU2ZTk5NDZjMmRhZTEzY2Y1ZDZmZmFlNjY5YTU3YzE0YWUwZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8w5gm++vXbh967khiw+9qx/hCWa
gX9eeZ0/pgPUjQVvbOxq5uBNLCsrhhV/aibNEfCdDkviM78YjPmJNNuLKDWiZUcI
00o8yXIdR7zOKocQ+xq8saRjI2yMjuItinbq9biWVHC8XYKpLSQfdqtMh56eSTE2
8o+12cUo0w32UwO3Anuzz+boUHRQWBPh8BMMA5+IxGQ2a4OzO0ibsE1VUZINwT6q
+qFkuoM+IKI36vLn4b9qmNlYnbCkrhx+429GheH1m1kz38ZO4Fm5YHBnp88HKrAC
i6WxDiYQibPl4WnLrSTH623uwmbDAzy1qoIQFZI+4UgoNKGFMDZsyLckRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERW6ZRsLa4Tz11v+uZppXwUrg4OMB8GA1UdIwQY
MBaAFFoh8YW0s4ZnVdugAQvPELlKiqZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYt
OWNiN2ZjMTU0NDI1LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYtOWNiN2ZjMTU0NDI1
LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwO2k27y
9A/VhHUdmwH7XjPuWMqblhnikesXjh2eKNw91XCEukut3D/q3kWQdShV+zsLPvQW
52edYcUyv7IWVteTuRQDImHgmJldTJ4xRuf3kxKjGaYXnpSLRMIf4hq2Ngv/uaWJ
5qYL5X+n++mdSOjDpNaUWLy2GKvFGRonWU/3/5rZ46eN06NLJSKWLYOTCPjvLV6t
VqNQbGKAQjNw8IgduZK7evQQVgFElmO/JUi+rkPKal5RF+2T8Sl10bneLxbO2WZb
rrIyQAmow1S3XobA1lZ919CzuHz8XYfEpawzsE4+ZmumOLdF+d+rS3UnfRxDGZXK
uLMNuEADJJ8uBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:24 2026 by rpki-client