Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier: QgDWdkt0kgTiqTy0zzfzHhd8mVcsJY2O/riZSYli4hk=
Subject key identifier: 66:24:02:13:C4:72:32:C4:20:67:25:70:0C:1D:57:A6:6C:BF:03:08
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 019CAB6B66566A122F40D03BDB1C5BF54EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number: 0916
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: zA7qYuSWB4OSOLBz8N3InGTyG7PcpDpJuQKFNuuO0gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:66:56:6a:12:2f:40:d0:3b:db:1c:5b:f5:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=66240213c47232c4206725700c1d57a66cbf0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:dd:4c:fa:2b:2e:de:db:50:9b:47:14:30:
2f:aa:e0:7b:38:85:35:2a:78:2d:32:35:be:a9:ee:
02:45:9a:0b:4c:81:58:1a:87:ca:e3:c3:55:8d:50:
c2:0e:1a:16:ab:0c:45:ac:6a:9a:c7:8f:e0:da:35:
fa:4b:3d:6a:6f:73:d2:70:0f:69:38:3e:93:96:91:
48:e9:cf:16:c6:cb:85:b2:8c:1c:46:11:3e:74:25:
05:a9:ad:23:33:6d:12:e9:1a:4c:74:74:e2:9a:56:
dd:0a:c7:1e:f6:d1:67:58:a5:fe:c8:7b:5c:31:05:
1a:ca:7e:07:db:f7:c3:2d:d1:b4:b6:52:1b:7c:f8:
1c:3f:99:d7:9c:30:21:1e:a0:a4:33:2d:36:1f:db:
64:9c:9b:cf:25:5f:55:7f:a0:30:59:44:cd:4e:c2:
94:88:0f:03:05:0c:71:ce:76:07:c2:e7:81:ce:81:
dc:31:9b:db:90:97:35:60:b7:30:6f:76:de:74:b4:
d5:7d:41:7f:a7:18:76:de:72:99:15:71:18:7a:9a:
cd:d3:79:05:e2:e7:86:a9:f2:3e:84:3e:d7:62:e5:
a5:b3:4f:e6:98:41:a4:7b:97:cb:0c:1b:9e:9d:aa:
7e:1a:12:a3:8a:8e:cf:ec:96:fd:4d:f8:21:a2:6a:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:24:02:13:C4:72:32:C4:20:67:25:70:0C:1D:57:A6:6C:BF:03:08
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:03:46:d2:2d:95:2e:3f:01:86:66:36:84:f8:2a:d5:e9:2a:
65:a5:d2:e5:95:00:48:a5:bd:bc:30:83:c5:89:9a:4a:5a:0e:
8d:5e:84:2c:2c:2d:8b:15:51:26:f6:99:c1:c3:49:4f:1f:8b:
2e:ca:0f:a2:19:93:61:96:03:dd:18:0a:09:9e:3a:71:17:45:
3f:e0:16:0e:d1:68:04:72:ca:3f:4b:c8:dc:a1:f7:39:03:cf:
22:00:ad:82:5d:bf:0b:6a:b2:14:f6:e9:2d:f4:11:da:12:57:
36:a6:f9:4c:9d:b5:a6:6a:a2:5f:48:f4:20:e7:2b:7c:02:2c:
7c:18:c0:c2:e1:1a:47:3d:53:09:40:89:f4:73:e1:24:2c:db:
a3:a8:9d:68:0a:6e:1a:7c:8c:b6:93:7a:5d:b8:93:61:9a:98:
91:f7:20:78:16:fd:47:26:17:4d:07:77:ad:09:d6:e0:60:85:
98:bf:98:a2:6f:d6:c6:4b:67:5d:7e:53:28:49:49:2d:d6:ce:
33:75:2b:a3:77:4a:11:33:f8:36:4c:04:6c:2c:b3:fc:81:81:
ab:f9:43:f5:84:61:38:05:29:0f:8e:ea:2c:a9:82:34:37:1c:
cc:5b:26:37:81:32:05:06:96:9c:1a:11:08:04:cb:d4:46:92:
67:3f:c5:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra2ZWahIvQNA72xxb9U7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl
ZWQ2OGIwHhcNMjYwMzAxMjIwMTA4WhcNMjYwMzAyMjIwMTA4WjAzMTEwLwYDVQQD
Eyg2NjI0MDIxM2M0NzIzMmM0MjA2NzI1NzAwYzFkNTdhNjZjYmYwMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/TdTPorLt7bUJtHFDAvquB7OIU1
KngtMjW+qe4CRZoLTIFYGofK48NVjVDCDhoWqwxFrGqax4/g2jX6Sz1qb3PScA9p
OD6TlpFI6c8WxsuFsowcRhE+dCUFqa0jM20S6RpMdHTimlbdCsce9tFnWKX+yHtc
MQUayn4H2/fDLdG0tlIbfPgcP5nXnDAhHqCkMy02H9tknJvPJV9Vf6AwWUTNTsKU
iA8DBQxxznYHwueBzoHcMZvbkJc1YLcwb3bedLTVfUF/pxh23nKZFXEYeprN03kF
4ueGqfI+hD7XYuWls0/mmEGke5fLDBuenap+GhKjio7P7Jb9TfghomrIBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYkAhPEcjLEIGclcAwdV6ZsvwMIMB8GA1UdIwQY
MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt
MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni
LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgNG0i2V
Lj8BhmY2hPgq1ekqZaXS5ZUASKW9vDCDxYmaSloOjV6ELCwtixVRJvaZwcNJTx+L
LsoPohmTYZYD3RgKCZ46cRdFP+AWDtFoBHLKP0vI3KH3OQPPIgCtgl2/C2qyFPbp
LfQR2hJXNqb5TJ21pmqiX0j0IOcrfAIsfBjAwuEaRz1TCUCJ9HPhJCzbo6idaApu
GnyMtpN6XbiTYZqYkfcgeBb9RyYXTQd3rQnW4GCFmL+Yom/WxktnXX5TKElJLdbO
M3Uro3dKETP4NkwEbCyz/IGBq/lD9YRhOAUpD47qLKmCNDcczFsmN4EyBQaWnBoR
CATL1EaSZz/F6w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:11:27 2026 by rpki-client