Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: RIw/xy4mLhfyfyeinJdXv/IBI14c8caooa7yAPL7Lig=
Subject key identifier: 8D:64:A9:57:DF:45:37:03:6E:C8:C9:B5:72:BA:D6:C4:64:CC:BB:4E
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 019D29CEDFD9D0115F7945068587563C1BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0EE9
Signing time: Thu 26 Mar 2026 11:01:56 +0000
Manifest this update: Thu 26 Mar 2026 11:01:56 +0000
Manifest next update: Fri 27 Mar 2026 11:01:56 +0000
Files and hashes: 1: Djf7eMxemXeY18cP9FoHdLT6XA8.roa (hash: mDiReFu2hqiNWv0C31jbzdbUciZxBU6AMY/TrXH/b64=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: BvPAsdBXQoQIhn5vZfzfDM6SZXOLLVyd0FE3HiCDR30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:df:d9:d0:11:5f:79:45:06:85:87:56:3c:1b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Mar 26 11:01:56 2026 GMT
Not After : Mar 27 11:01:56 2026 GMT
Subject: CN=8d64a957df4537036ec8c9b572bad6c464ccbb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:30:c5:ab:be:e9:83:7c:a5:26:08:2e:c0:
48:54:32:26:78:71:7e:0b:ef:b6:8f:32:56:27:a7:
a3:b4:4f:c5:4b:1e:46:25:e7:56:0a:8f:60:67:35:
77:1c:3b:3b:85:3f:25:13:d1:85:87:4c:d7:7b:a2:
56:45:fe:34:2f:50:13:e1:b5:1e:da:cb:32:8c:68:
e8:4b:b6:a7:1b:ad:98:ed:df:4a:d3:a6:a2:00:02:
61:3e:46:b4:40:ac:f7:fb:15:6d:2f:a8:96:1f:3a:
f1:94:f5:c9:9f:14:05:1a:9e:86:63:05:34:95:40:
f5:37:07:be:41:b1:4d:29:96:5a:2f:d8:26:dc:5c:
e6:09:dd:29:cc:23:3c:bc:28:32:5e:9d:56:26:fa:
17:7e:3e:2e:3e:b8:65:a2:de:61:e7:b3:7b:16:b4:
0c:b6:9a:9c:35:63:f8:1e:e9:ee:d3:21:27:56:29:
8b:1e:13:9c:8f:14:3c:68:86:bf:cb:d8:2c:51:56:
43:8a:a6:a1:16:69:4a:37:d0:90:bf:a7:c7:d4:11:
a8:57:22:c1:1c:68:d3:78:83:94:62:1b:ec:25:30:
31:b5:d9:f7:da:78:39:ce:4a:77:22:6d:4f:48:1b:
b8:f7:4e:e9:9e:64:4b:23:db:ea:58:b1:56:c0:74:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:64:A9:57:DF:45:37:03:6E:C8:C9:B5:72:BA:D6:C4:64:CC:BB:4E
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:69:18:0c:c0:56:ea:f3:7f:0c:1c:e2:10:75:3a:8e:66:8c:
ed:15:05:3e:f5:46:cf:11:69:b0:98:c5:fd:f3:a6:44:93:32:
5f:30:e0:01:8b:52:82:25:d7:7b:f9:95:78:42:8e:47:c9:43:
a7:58:2f:e1:d9:40:d7:6e:e2:e8:10:5e:e3:83:70:96:21:bf:
dc:d1:55:4e:d2:b0:26:40:81:3c:e9:95:e6:64:7a:15:96:33:
1f:92:01:df:5c:d1:d7:c7:e1:7e:bb:7b:8c:21:f6:00:80:97:
5f:b6:a2:e5:7a:f6:74:37:5f:b9:e2:84:76:2a:87:80:5c:2a:
10:fa:b3:fd:21:b0:1e:c7:bc:b5:b3:8e:19:68:00:26:07:25:
00:19:26:76:76:71:b4:c8:60:e5:c3:98:7f:1f:ca:ac:df:6f:
dd:0d:5b:98:29:45:f5:6a:a7:d9:e9:6f:ac:cb:e3:43:a9:1a:
8f:06:f4:9e:e0:a1:96:bb:e0:d7:5d:bd:2d:53:6f:53:1c:6d:
ad:86:39:ed:c4:4e:8d:fb:ad:66:9f:cc:b8:ee:99:00:cd:4a:
0c:4d:da:20:e4:5d:ea:ee:c3:0d:73:29:35:47:66:d5:cf:f5:
c7:d3:ff:73:2b:ae:fc:57:b3:c3:0d:e3:f5:d6:32:fd:8c:10:
0a:ab:bb:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzt/Z0BFfeUUGhYdWPBu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTA3NDg3N2Y3OGRiZjQ5YmQzN2EyMTU0OTFlNjlhMGY4
YjZlNDMwHhcNMjYwMzI2MTEwMTU2WhcNMjYwMzI3MTEwMTU2WjAzMTEwLwYDVQQD
Eyg4ZDY0YTk1N2RmNDUzNzAzNmVjOGM5YjU3MmJhZDZjNDY0Y2NiYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIcwxau+6YN8pSYILsBIVDImeHF+
C++2jzJWJ6ejtE/FSx5GJedWCo9gZzV3HDs7hT8lE9GFh0zXe6JWRf40L1AT4bUe
2ssyjGjoS7anG62Y7d9K06aiAAJhPka0QKz3+xVtL6iWHzrxlPXJnxQFGp6GYwU0
lUD1Nwe+QbFNKZZaL9gm3FzmCd0pzCM8vCgyXp1WJvoXfj4uPrhlot5h57N7FrQM
tpqcNWP4Hunu0yEnVimLHhOcjxQ8aIa/y9gsUVZDiqahFmlKN9CQv6fH1BGoVyLB
HGjTeIOUYhvsJTAxtdn32ng5zkp3Im1PSBu4907pnmRLI9vqWLFWwHRzBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1kqVffRTcDbsjJtXK61sRkzLtOMB8GA1UdIwQY
MBaAFMBQdId/eNv0m9N6IVSR5poPi25DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWIt
NzhjMDRiY2VkYWQzLzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWItNzhjMDRiY2VkYWQz
LzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWkYDMBW
6vN/DBziEHU6jmaM7RUFPvVGzxFpsJjF/fOmRJMyXzDgAYtSgiXXe/mVeEKOR8lD
p1gv4dlA127i6BBe44NwliG/3NFVTtKwJkCBPOmV5mR6FZYzH5IB31zR18fhfrt7
jCH2AICXX7ai5Xr2dDdfueKEdiqHgFwqEPqz/SGwHse8tbOOGWgAJgclABkmdnZx
tMhg5cOYfx/KrN9v3Q1bmClF9Wqn2elvrMvjQ6kajwb0nuChlrvg1129LVNvUxxt
rYY57cROjfutZp/MuO6ZAM1KDE3aIORd6u7DDXMpNUdm1c/1x9P/cyuu/Fezww3j
9dYy/YwQCqu7Ag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:01 2026 by rpki-client