Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: lTIDuLNN7LXoC/hZNpQXyjfVbnP/JckY1VvjjJyfRfU=
Subject key identifier: AF:6D:9A:91:E6:21:0F:B0:E7:E7:C6:14:6A:46:B1:94:34:A1:E5:31
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019CAAC6956B5E96E8E3C467FD77EF17D656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0497
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (hash: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=)
2: bO3gP48gXR59qEaPaz0ip1xjgwQ.roa (hash: XOVMmfwGhj7NmfYoVzb+IQU1JCdUzXepcMZ7m+uOQU0=)
3: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: Eo6KBL9CTemYuBvkJ6w5xvdlINcJDgOtvI4zpbKeOII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:95:6b:5e:96:e8:e3:c4:67:fd:77:ef:17:d6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=af6d9a91e6210fb0e7e7c6146a46b19434a1e531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:89:dc:7c:63:a9:c8:95:10:0e:dd:ef:10:
49:ca:05:0c:23:c0:00:a6:59:18:f3:db:38:bd:80:
ba:6b:a3:52:1b:c7:1d:4d:58:6c:4a:91:3d:35:2d:
26:f6:bd:50:b5:72:22:88:4c:e9:7f:17:df:c8:46:
4d:82:1f:e7:89:e7:11:51:4f:cc:9d:c4:89:ec:46:
ea:da:9e:b7:8a:71:a1:bf:61:81:e4:c0:be:09:af:
eb:7a:1d:f5:69:69:bb:32:b6:3f:51:67:06:7e:5d:
dc:07:5e:0e:44:6e:5f:2a:86:a8:45:85:2e:ea:4e:
e8:43:ec:a4:5d:82:84:6e:3c:f2:6f:19:85:bd:30:
24:9e:39:21:db:ef:79:9c:f1:ef:b1:f9:7f:33:c7:
a9:ca:c1:a5:06:14:46:4c:4b:cd:71:89:dd:3a:40:
e0:31:df:c2:55:b8:ba:7b:78:e2:fd:32:91:80:d1:
86:43:f8:f4:74:b0:73:79:ef:a1:10:62:d0:38:96:
df:7c:da:5d:a3:a8:a1:6a:2d:ab:c2:6c:bd:6a:64:
88:48:ab:bd:f9:91:04:7f:81:0c:21:8c:7c:30:95:
94:bd:e3:2b:fe:23:70:4b:e5:25:39:76:79:42:bb:
40:06:94:37:31:38:c4:ff:b7:98:87:dd:9b:d2:80:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:9A:91:E6:21:0F:B0:E7:E7:C6:14:6A:46:B1:94:34:A1:E5:31
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:87:2b:67:5f:58:b9:0a:18:4a:6d:ca:3b:34:1a:04:19:7a:
80:2c:e1:a0:f8:08:3d:e5:83:af:bb:49:1f:c7:43:97:26:62:
92:2e:28:ea:b1:f5:b9:06:86:c3:5e:1e:7b:79:e6:fd:10:67:
4f:72:84:72:11:81:19:9d:56:97:be:c1:cd:64:5d:82:02:76:
5a:f1:c1:af:39:ec:b8:10:50:74:6a:d3:34:71:3b:2a:5f:7f:
2f:7d:c1:98:8a:53:1d:0a:a0:ed:86:2c:3f:4f:7f:d3:0c:23:
97:fb:21:54:7d:15:f1:68:a0:52:50:f6:4b:1b:5a:d4:1f:0a:
5d:ef:f8:41:bd:81:27:53:7a:86:ad:ef:51:49:25:89:88:9c:
ff:f8:8c:b9:84:9a:e6:3f:d8:fe:d3:5f:75:c8:2d:41:13:8d:
cc:06:24:fa:18:c8:59:64:16:4c:81:ac:8a:5e:0e:04:c5:41:
aa:fc:61:7e:bf:ac:5d:94:bc:e4:ff:bc:04:6a:da:63:f8:a5:
ef:ec:d7:30:37:db:f6:4a:24:b3:12:57:6b:86:5b:f7:3d:84:
c4:df:af:15:d4:9a:ef:48:37:7e:f4:30:a0:c3:90:44:79:72:
b6:c2:57:89:e9:aa:97:5f:a6:9d:99:b6:04:23:f4:49:7f:34:
df:58:49:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxpVrXpbo48Rn/XfvF9ZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjQyZTRhNWMxYzkxZWJjNGVmZmZmMTQ4YjMxMmZlN2I3
ZTg5NzAwHhcNMjYwMzAxMTkwMTA2WhcNMjYwMzAyMTkwMTA2WjAzMTEwLwYDVQQD
EyhhZjZkOWE5MWU2MjEwZmIwZTdlN2M2MTQ2YTQ2YjE5NDM0YTFlNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7WJ3HxjqciVEA7d7xBJygUMI8AA
plkY89s4vYC6a6NSG8cdTVhsSpE9NS0m9r1QtXIiiEzpfxffyEZNgh/niecRUU/M
ncSJ7Ebq2p63inGhv2GB5MC+Ca/reh31aWm7MrY/UWcGfl3cB14ORG5fKoaoRYUu
6k7oQ+ykXYKEbjzybxmFvTAknjkh2+95nPHvsfl/M8epysGlBhRGTEvNcYndOkDg
Md/CVbi6e3ji/TKRgNGGQ/j0dLBzee+hEGLQOJbffNpdo6ihai2rwmy9amSISKu9
+ZEEf4EMIYx8MJWUveMr/iNwS+UlOXZ5QrtABpQ3MTjE/7eYh92b0oCPgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9tmpHmIQ+w5+fGFGpGsZQ0oeUxMB8GA1UdIwQY
MBaAFMK0LkpcHJHrxO//8UizEv57folwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQt
YzczY2JlNzBhYmI5LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQtYzczY2JlNzBhYmI5
LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0YcrZ19Y
uQoYSm3KOzQaBBl6gCzhoPgIPeWDr7tJH8dDlyZiki4o6rH1uQaGw14ee3nm/RBn
T3KEchGBGZ1Wl77BzWRdggJ2WvHBrznsuBBQdGrTNHE7Kl9/L33BmIpTHQqg7YYs
P09/0wwjl/shVH0V8WigUlD2Sxta1B8KXe/4Qb2BJ1N6hq3vUUkliYic//iMuYSa
5j/Y/tNfdcgtQRONzAYk+hjIWWQWTIGsil4OBMVBqvxhfr+sXZS85P+8BGraY/il
7+zXMDfb9koksxJXa4Zb9z2ExN+vFdSa70g3fvQwoMOQRHlytsJXiemql1+mnZm2
BCP0SX8031hJ7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:22 2026 by rpki-client