Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: rqAxasiRWBZo6aGIQzxE4m9uTlEAKkWSNq5K4c/4t6w=
Subject key identifier: B5:8E:F6:BA:CA:1A:41:9C:2C:14:14:E0:80:79:1B:0D:73:55:1C:A0
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019D2772E0564739C34FA6D0AE191C742FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 0297
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: QkVAvZwjrxqyATnnqp1b1hVQ8l7I0W9bpjnmGOV4uoE=)
2: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e0:56:47:39:c3:4f:a6:d0:ae:19:1c:74:2f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=b58ef6baca1a419c2c1414e080791b0d73551ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:32:7f:04:3f:4a:7c:be:a3:80:ab:fb:b9:
f0:4a:13:d8:f8:3f:76:46:cd:31:3e:ef:2b:4b:30:
7b:0d:8d:07:05:41:d8:f8:c3:fc:b4:a3:b3:b4:18:
0a:40:7c:3c:b1:9e:53:b4:24:d6:14:d4:98:f6:ba:
cb:ca:e1:41:c4:53:1f:9b:dc:13:e2:fe:d8:53:c5:
ab:12:83:9a:0d:c9:b2:49:39:22:00:b2:72:ed:a4:
90:3d:a4:00:0d:68:d5:c1:3d:df:09:b8:8e:7f:a4:
77:18:2c:1c:6b:54:aa:1e:61:33:db:b9:2f:1f:a5:
ea:d4:02:9b:e8:de:c5:79:37:1f:e5:0b:44:8a:93:
0e:ca:09:a9:27:19:e5:59:eb:83:6f:4f:f1:bf:c0:
a1:28:75:98:69:d9:b8:09:11:82:ed:87:59:dd:98:
e8:fa:a4:10:e2:6a:9e:cb:a2:28:01:fa:34:b3:27:
04:49:39:4c:d1:60:9e:55:e4:94:7e:ac:10:55:e1:
2c:67:fa:ff:96:9d:cf:73:72:18:1b:8d:8d:81:e8:
71:fc:c0:18:0a:a3:76:e6:b7:04:31:33:ac:1e:21:
ee:fd:26:74:ba:ce:7a:51:9c:78:ec:5d:d8:13:92:
82:f8:d8:b2:36:9f:f6:fc:3b:12:eb:62:c0:aa:07:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8E:F6:BA:CA:1A:41:9C:2C:14:14:E0:80:79:1B:0D:73:55:1C:A0
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:46:35:bb:24:1c:b0:f7:ad:b0:48:9d:07:23:79:93:e9:80:
81:73:a5:ff:41:60:b2:62:eb:e2:db:40:e4:39:e0:0b:8c:b0:
54:19:70:14:44:8c:2b:13:71:78:5a:d7:37:f8:23:e3:8a:19:
f7:d5:bc:ff:20:63:c1:92:1e:69:87:e6:b9:f4:ca:14:f8:4d:
a4:40:ee:fc:44:ce:8c:19:9d:f1:40:c6:80:03:37:90:3a:10:
95:f3:0f:e7:70:7b:50:aa:0a:65:f3:a0:89:8f:42:b9:06:05:
d1:31:bd:8a:2c:17:bb:99:9f:ef:3a:d4:4e:a0:e7:ef:11:ab:
7d:47:63:bc:4d:da:71:73:d8:d8:b0:82:cb:f3:34:8b:0b:0c:
b5:b0:98:11:44:5c:5d:76:1b:de:64:bb:55:dd:23:af:27:13:
81:ec:b6:06:db:4c:a2:f0:09:b7:86:0f:4d:98:94:cf:d7:83:
2a:4b:7c:4d:04:f0:63:e5:38:e5:ba:14:7e:57:7f:f6:ce:79:
34:c0:bf:c9:49:36:28:74:31:a1:5f:41:9f:a1:e8:87:7d:94:
ad:39:2f:56:1a:ff:81:19:ad:10:7a:c0:8d:7a:89:b9:2b:4f:
8a:20:03:7c:e5:ba:35:8f:71:63:1f:f1:a5:64:23:71:1c:d0:
56:ca:c8:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncuBWRznDT6bQrhkcdC/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZmE3MDI3NjYxYWM4YzRhNzdmZjJhYmQ1OTY4NmFmOTlm
MTU5MjgwHhcNMjYwMzI2MDAwMjEzWhcNMjYwMzI3MDAwMjEzWjAzMTEwLwYDVQQD
EyhiNThlZjZiYWNhMWE0MTljMmMxNDE0ZTA4MDc5MWIwZDczNTUxY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldMyfwQ/Sny+o4Cr+7nwShPY+D92
Rs0xPu8rSzB7DY0HBUHY+MP8tKOztBgKQHw8sZ5TtCTWFNSY9rrLyuFBxFMfm9wT
4v7YU8WrEoOaDcmySTkiALJy7aSQPaQADWjVwT3fCbiOf6R3GCwca1SqHmEz27kv
H6Xq1AKb6N7FeTcf5QtEipMOygmpJxnlWeuDb0/xv8ChKHWYadm4CRGC7YdZ3Zjo
+qQQ4mqey6IoAfo0sycESTlM0WCeVeSUfqwQVeEsZ/r/lp3Pc3IYG42Ngehx/MAY
CqN25rcEMTOsHiHu/SZ0us56UZx47F3YE5KC+NiyNp/2/DsS62LAqgc4bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWO9rrKGkGcLBQU4IB5Gw1zVRygMB8GA1UdIwQY
MBaAFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQt
MDkwNmRhMWIyM2E2LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQtMDkwNmRhMWIyM2E2
LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUY1uyQc
sPetsEidByN5k+mAgXOl/0FgsmLr4ttA5DngC4ywVBlwFESMKxNxeFrXN/gj44oZ
99W8/yBjwZIeaYfmufTKFPhNpEDu/ETOjBmd8UDGgAM3kDoQlfMP53B7UKoKZfOg
iY9CuQYF0TG9iiwXu5mf7zrUTqDn7xGrfUdjvE3acXPY2LCCy/M0iwsMtbCYEURc
XXYb3mS7Vd0jrycTgey2BttMovAJt4YPTZiUz9eDKkt8TQTwY+U45boUfld/9s55
NMC/yUk2KHQxoV9Bn6Hoh32UrTkvVhr/gRmtEHrAjXqJuStPiiADfOW6NY9xYx/x
pWQjcRzQVsrIQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:56 2026 by rpki-client