Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
File: wIneL0L89EpNqraoJMEgq7i3Fl0.mft (raw, json)
Hash identifier: geQTpMxebi75j0tVIW44LRwJi2yvziKLVNjDQfJo6zo=
Subject key identifier: 1D:D9:64:EB:A9:2A:B9:69:03:C0:CD:5C:1C:21:B8:37:2E:4C:49:35
Authority key identifier: C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
Certificate issuer: /CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Certificate serial: 019CAFB635310B44E9C3D178F22319C10B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
Manifest number: 01F7
Signing time: Mon 02 Mar 2026 18:01:19 +0000
Manifest this update: Mon 02 Mar 2026 18:01:19 +0000
Manifest next update: Tue 03 Mar 2026 18:01:19 +0000
Files and hashes: 1: I3Xf9VKD-tJpcuIxLlSODq6ARfU.roa (hash: 7g0Zv7NUV1llXr3xxVw2ZytxF911Q+NrrEu/LVgTpkk=)
2: W1e0EWYLXXz7WEE9jIFX4zFwLi8.roa (hash: MBpCLgOals90jJpQV95qSwbxGgxUH35zT0YlklNTg2M=)
3: wIneL0L89EpNqraoJMEgq7i3Fl0.crl (hash: RpFCElbCS/Wm5r9R5tKUIy4ULDPHTspTgud3/asxkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:35:31:0b:44:e9:c3:d1:78:f2:23:19:c1:0b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Validity
Not Before: Mar 2 18:01:19 2026 GMT
Not After : Mar 3 18:01:19 2026 GMT
Subject: CN=1dd964eba92ab96903c0cd5c1c21b8372e4c4935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:06:8b:f2:a0:57:3f:7c:c1:d8:e4:4a:d2:
d6:02:d7:cd:eb:3d:07:c4:8f:d5:93:47:68:75:a3:
17:26:fa:9c:25:f1:ff:97:a3:c1:11:9f:4d:95:e0:
71:86:dc:2c:a6:9f:4a:1c:e9:b3:14:21:2b:92:c5:
dc:b2:97:d2:0e:de:a9:fb:be:56:5d:e0:ba:7a:a8:
d5:fa:5a:17:43:c6:4d:1a:e1:f7:ee:ac:69:00:97:
e0:9f:f8:cf:5f:ab:7b:23:fe:09:65:38:61:9b:58:
fb:e2:f2:26:d3:c6:d1:bb:86:bf:1f:0f:c7:5e:94:
6a:49:e6:bb:87:2e:b8:c5:25:d8:c2:91:b4:07:ae:
bc:5b:18:73:7d:44:50:e4:a5:c0:bc:ec:cf:92:3a:
31:08:f5:c2:89:f2:cb:ec:97:27:ac:a5:15:e6:2e:
6c:0e:24:8b:5b:79:be:cd:b2:fa:a7:a0:6b:eb:87:
fd:d5:db:e3:7b:2d:88:df:9d:28:93:4e:f1:30:2a:
75:3a:8c:85:a3:66:ae:87:82:bf:fe:37:ac:a9:4e:
3b:86:8d:cd:e7:f6:d3:e1:95:6b:2d:85:28:21:2b:
e1:7d:9c:8e:8d:21:a3:8e:02:db:76:a5:d2:b6:ea:
19:87:dc:11:a1:f0:4e:d4:a4:4d:a5:45:ce:53:4e:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:64:EB:A9:2A:B9:69:03:C0:CD:5C:1C:21:B8:37:2E:4C:49:35
X509v3 Authority Key Identifier:
keyid:C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a2:a0:8a:50:96:8e:cb:d3:71:af:40:97:56:cf:dd:5f:c3:
48:a0:40:98:d4:82:6e:f8:d9:a2:3a:2c:57:e9:33:98:6b:e8:
9e:de:4d:01:1f:c0:aa:80:a5:76:9e:2d:82:e9:ad:f6:7e:7e:
3d:df:49:d5:f9:bb:a5:c7:f9:cf:85:6b:ac:7b:3e:08:a7:76:
d7:08:4a:1a:53:80:e1:18:5f:93:d2:fa:01:02:a5:93:2a:1f:
35:93:6a:17:04:a0:a8:67:a0:4e:35:03:cd:3e:76:d6:a4:7e:
01:41:3c:bd:20:cd:62:8e:ca:a2:c9:7e:89:42:bb:5d:eb:7a:
44:0f:09:e0:68:32:5b:69:ff:e1:77:9d:17:39:18:fc:af:96:
bb:07:eb:a6:f9:f6:8f:1f:37:2f:e9:41:3e:fd:10:13:34:c9:
0d:6a:f0:7d:28:6b:82:87:62:32:96:6b:57:34:c5:fd:44:a0:
b6:ad:81:71:c9:f5:84:33:3e:64:9a:18:6c:6e:98:a4:c8:09:
5f:e1:eb:bb:1f:3c:82:c9:e0:d7:0a:6a:83:63:f9:52:c7:a7:
ce:43:5e:a9:48:7d:eb:cd:fb:de:d2:40:60:db:eb:2d:e9:bb:
6a:8a:15:8c:e9:54:d2:7b:4d:ad:73:e8:09:37:55:de:4c:77:
0f:1f:ca:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtjUxC0Tpw9F48iMZwQsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODlkZTJmNDJmY2Y0NGE0ZGFhYjZhODI0YzEyMGFiYjhi
NzE2NWQwHhcNMjYwMzAyMTgwMTE5WhcNMjYwMzAzMTgwMTE5WjAzMTEwLwYDVQQD
EygxZGQ5NjRlYmE5MmFiOTY5MDNjMGNkNWMxYzIxYjgzNzJlNGM0OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV8Gi/KgVz98wdjkStLWAtfN6z0H
xI/Vk0dodaMXJvqcJfH/l6PBEZ9NleBxhtwspp9KHOmzFCErksXcspfSDt6p+75W
XeC6eqjV+loXQ8ZNGuH37qxpAJfgn/jPX6t7I/4JZThhm1j74vIm08bRu4a/Hw/H
XpRqSea7hy64xSXYwpG0B668WxhzfURQ5KXAvOzPkjoxCPXCifLL7JcnrKUV5i5s
DiSLW3m+zbL6p6Br64f91dvjey2I350ok07xMCp1OoyFo2auh4K//jesqU47ho3N
5/bT4ZVrLYUoISvhfZyOjSGjjgLbdqXStuoZh9wRofBO1KRNpUXOU05a9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3ZZOupKrlpA8DNXBwhuDcuTEk1MB8GA1UdIwQY
MBaAFMCJ3i9C/PRKTaq2qCTBIKu4txZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0luZUwwTDg5RXBOcXJhb0pNRWdxN2kzRmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YmI0MTYtYmE4Zi00OWE3LWI1YWEt
ZWUyZGMyODYwZDViLzEvd0luZUwwTDg5RXBOcXJhb0pNRWdxN2kzRmwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83YmI0MTYtYmE4Zi00OWE3LWI1YWEtZWUyZGMyODYwZDVi
LzEvd0luZUwwTDg5RXBOcXJhb0pNRWdxN2kzRmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKKgilCW
jsvTca9Al1bP3V/DSKBAmNSCbvjZojosV+kzmGvont5NAR/AqoCldp4tgumt9n5+
Pd9J1fm7pcf5z4VrrHs+CKd21whKGlOA4Rhfk9L6AQKlkyofNZNqFwSgqGegTjUD
zT521qR+AUE8vSDNYo7Kosl+iUK7Xet6RA8J4GgyW2n/4XedFzkY/K+Wuwfrpvn2
jx83L+lBPv0QEzTJDWrwfShrgodiMpZrVzTF/USgtq2Bccn1hDM+ZJoYbG6YpMgJ
X+Hrux88gsng1wpqg2P5UsenzkNeqUh968373tJAYNvrLem7aooVjOlU0ntNrXPo
CTdV3kx3Dx/KaA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:48:03 2026 by rpki-client