Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
File: P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json)
Hash identifier: QrvEp+OCT106urxXG6rwM88DhIWrLsgLAVY1MNMSnIs=
Subject key identifier: 3E:7B:FD:7B:A2:22:6A:4A:CD:91:D7:30:4C:F3:18:32:D5:CF:1F:E2
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial: 019D28BB2EE5B9E26017347327BA7B8432CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
Manifest number: 0335
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: 1xVEjhQE9q20oXVNNhsn5zEoY7Q.roa (hash: 8p4K4uwRtctRWOC7mSCiV88ZU41loGPvxjZBmuT5O8M=)
2: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: oQxxusqERxjVFzPbw5ai7p1bKuQijleRQvOSsCMatFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2e:e5:b9:e2:60:17:34:73:27:ba:7b:84:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=3e7bfd7ba2226a4acd91d7304cf31832d5cf1fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:ec:d5:bb:03:d9:b4:2b:99:86:b1:ef:67:
1e:12:70:1b:ba:90:ef:a2:2f:a0:5e:8b:de:da:4d:
cd:1b:58:52:9c:b5:fe:11:8f:77:1f:f8:81:2b:0f:
fa:7e:90:06:77:19:2c:03:b9:26:38:24:50:03:c2:
4a:6a:1e:fb:98:3e:16:09:f8:23:46:af:37:3a:52:
7a:38:7e:c7:8f:5d:47:41:e0:5d:fc:fa:0c:fc:3c:
73:37:ad:73:63:bf:5e:ab:30:f4:d6:bb:f9:c7:d3:
72:77:af:df:29:05:b7:79:d6:59:04:f7:69:d8:fe:
75:7a:fe:c2:8c:d7:29:c3:4a:98:41:b8:d5:13:86:
ff:f9:34:50:f1:c2:80:60:0e:9f:c7:e4:2f:84:e3:
e6:e6:49:0c:ca:6e:2c:81:2e:e8:fb:ec:fd:de:29:
6a:6d:c4:a0:74:82:58:7c:c9:8b:5e:97:d5:40:2d:
66:89:e5:1b:62:52:7e:da:da:9e:5a:0d:5a:7f:6e:
3e:c2:bf:67:d8:73:a7:62:8b:13:cd:b3:d7:72:42:
9e:47:d9:b0:b4:0e:81:1e:a0:4c:37:16:7f:2b:ed:
37:68:29:fc:56:6e:bd:4a:67:ec:c3:72:73:d8:1a:
55:1b:60:dc:cb:3d:ef:c5:91:4b:02:0c:83:33:f7:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7B:FD:7B:A2:22:6A:4A:CD:91:D7:30:4C:F3:18:32:D5:CF:1F:E2
X509v3 Authority Key Identifier:
keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:a7:5a:d4:55:94:f9:e6:d3:03:4f:f9:37:89:d0:4e:b8:
f8:86:fb:e5:d7:7d:37:35:54:2d:f9:ef:8f:6b:a1:4f:0c:07:
d7:3c:1b:c1:c3:80:fe:59:99:80:bf:91:9b:ba:82:30:f1:5c:
3d:3c:9e:b2:13:b5:e6:0f:66:46:b3:3e:fe:43:d9:c5:98:f0:
fe:3e:4d:55:b9:73:de:c1:9d:bc:7f:3a:1d:c2:a1:2b:c5:a3:
aa:88:99:6e:f3:70:5d:56:a1:5c:21:19:90:06:2c:03:8d:ff:
1f:dd:86:0e:fd:e2:69:31:4e:a9:dc:78:ec:cf:6c:5b:d6:1c:
d9:b5:9e:1d:7a:51:53:02:80:d1:db:a0:87:3b:f1:0c:8f:d7:
d4:db:3d:56:93:25:66:67:9b:16:92:1a:c8:16:95:79:bd:6f:
cb:fd:71:df:23:d6:2b:9d:9e:53:4f:5e:80:01:7d:48:3b:15:
3d:83:aa:3f:65:fb:ba:31:f1:42:aa:86:ab:38:0b:4a:1b:a0:
82:90:a2:e1:a9:9f:e6:ba:47:6c:4d:37:52:55:39:71:3c:20:
6c:6d:f1:d9:46:2a:8e:d6:d7:64:a0:99:f8:a4:a7:eb:cb:38:
79:fe:92:48:a3:8a:d3:e3:aa:33:a1:0d:15:df:eb:a0:33:08:
e4:bb:89:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouy7lueJgFzRzJ7p7hDLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZjU4N2U0ZTA3YWNkZmIzODllMjU5MTYxZGExODZiMzg2
YjRmNjMwHhcNMjYwMzI2MDYwMDQ4WhcNMjYwMzI3MDYwMDQ4WjAzMTEwLwYDVQQD
EygzZTdiZmQ3YmEyMjI2YTRhY2Q5MWQ3MzA0Y2YzMTgzMmQ1Y2YxZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpvs1bsD2bQrmYax72ceEnAbupDv
oi+gXove2k3NG1hSnLX+EY93H/iBKw/6fpAGdxksA7kmOCRQA8JKah77mD4WCfgj
Rq83OlJ6OH7Hj11HQeBd/PoM/DxzN61zY79eqzD01rv5x9Nyd6/fKQW3edZZBPdp
2P51ev7CjNcpw0qYQbjVE4b/+TRQ8cKAYA6fx+QvhOPm5kkMym4sgS7o++z93ilq
bcSgdIJYfMmLXpfVQC1mieUbYlJ+2tqeWg1af24+wr9n2HOnYosTzbPXckKeR9mw
tA6BHqBMNxZ/K+03aCn8Vm69Smfsw3Jz2BpVG2Dcyz3vxZFLAgyDM/fCPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD57/XuiImpKzZHXMEzzGDLVzx/iMB8GA1UdIwQY
MBaAFD/1h+Tges37OJ4lkWHaGGs4a09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEt
NTZmYTA2YzQzMTgwLzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEtNTZmYTA2YzQzMTgw
LzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe6nWtRV
lPnm0wNP+TeJ0E64+Ib75dd9NzVULfnvj2uhTwwH1zwbwcOA/lmZgL+Rm7qCMPFc
PTyeshO15g9mRrM+/kPZxZjw/j5NVblz3sGdvH86HcKhK8WjqoiZbvNwXVahXCEZ
kAYsA43/H92GDv3iaTFOqdx47M9sW9Yc2bWeHXpRUwKA0dughzvxDI/X1Ns9VpMl
ZmebFpIayBaVeb1vy/1x3yPWK52eU09egAF9SDsVPYOqP2X7ujHxQqqGqzgLShug
gpCi4amf5rpHbE03UlU5cTwgbG3x2UYqjtbXZKCZ+KSn68s4ef6SSKOK0+OqM6EN
Fd/roDMI5LuJ1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:51 2026 by rpki-client