Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
File: Wva8LaPCxkKxSuEpwb__JnhS1vw.mft (raw, json)
Hash identifier: w5ag/yy3qvcmeBOCFmeeTQpCMTzFT6Uef+1L4EfKm78=
Subject key identifier: CF:54:2A:04:BE:D1:41:E6:D7:C3:AC:0D:06:28:87:89:96:9A:73:15
Authority key identifier: 5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC
Certificate issuer: /CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc
Certificate serial: 019D2A3B960E2B83595A69F38000143B23FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
Manifest number: 02AD
Signing time: Thu 26 Mar 2026 13:00:41 +0000
Manifest this update: Thu 26 Mar 2026 13:00:41 +0000
Manifest next update: Fri 27 Mar 2026 13:00:41 +0000
Files and hashes: 1: K4OipTcwUR5GHe48dIx0uYunkgU.roa (hash: 4X8maR7BlRFLa0y2Jq93U8WPeZASLwROy9eW+4OpHmY=)
2: Wva8LaPCxkKxSuEpwb__JnhS1vw.crl (hash: rbxUD3VEZjNwmFM/0o7Ac9JGSR+9FtllbINDf6Jn8J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:96:0e:2b:83:59:5a:69:f3:80:00:14:3b:23:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc
Validity
Not Before: Mar 26 13:00:41 2026 GMT
Not After : Mar 27 13:00:41 2026 GMT
Subject: CN=cf542a04bed141e6d7c3ac0d06288789969a7315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:6c:09:cf:c8:e2:b7:0c:1b:b2:1c:5a:f7:
f0:f0:95:10:e5:d7:6f:7e:4d:76:6f:90:61:8c:b1:
7c:b7:46:db:a5:01:9a:17:f1:f9:53:0b:d9:1c:b7:
d0:ca:2f:60:38:68:a3:d0:dc:51:16:6d:b7:77:f7:
4d:0b:91:f3:3f:aa:98:bf:64:ab:f2:c3:5c:48:d9:
18:f3:94:64:00:ad:71:7c:ff:d4:14:c5:bb:10:4b:
4e:79:02:ad:3f:0d:a9:d7:ed:5c:08:26:26:d0:7c:
d5:d6:47:ca:7d:47:e0:6d:83:29:e1:e3:bb:65:11:
24:0e:54:25:37:ba:a0:4b:f1:40:7f:6b:89:7d:cd:
45:65:47:0c:fd:d2:20:4b:1e:05:3f:48:b2:4b:e5:
56:8d:a0:ca:f8:d4:32:62:b0:b1:04:bd:18:52:64:
27:b2:77:ea:0d:f2:37:59:78:46:0f:b6:79:75:ea:
91:ba:91:6d:43:81:ba:80:db:07:9e:d6:39:d8:21:
0f:0b:86:8c:4e:83:00:45:96:28:f9:93:64:8e:d9:
b6:32:87:5e:fc:26:a3:5f:cc:a8:23:c4:fc:fd:13:
9b:19:28:8a:af:88:42:c7:75:e9:7e:63:13:3e:78:
f0:40:cc:64:69:a2:a2:ce:1b:a0:21:a1:7b:40:43:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:54:2A:04:BE:D1:41:E6:D7:C3:AC:0D:06:28:87:89:96:9A:73:15
X509v3 Authority Key Identifier:
keyid:5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1a:62:ab:f9:cb:db:3b:cf:e6:54:43:89:d9:f7:a5:14:db:
7a:e8:8a:1b:b9:03:80:be:74:3e:a3:d0:40:07:41:01:c7:e6:
32:c6:0f:b5:75:76:de:96:c7:0c:e0:c3:67:9f:a5:34:7d:19:
b7:6c:c1:4c:2f:b5:c3:a5:77:22:20:52:6b:d5:1b:48:fa:d5:
6e:9e:e3:91:ad:83:52:14:4d:c8:34:41:19:84:59:13:65:0b:
d4:99:df:2f:e9:21:c9:80:fa:5f:74:41:82:2a:3e:b6:c7:4e:
52:40:08:91:da:82:e2:9c:04:f2:90:b8:08:f5:c5:1f:28:92:
80:90:4e:15:72:10:35:ec:bf:c6:ca:db:17:a6:cb:9f:b8:09:
3d:6d:bc:f7:de:4a:bc:61:4a:82:4b:4f:91:4c:80:1e:0d:3c:
30:7d:46:4c:41:9f:18:e6:94:9d:c7:35:0e:e1:89:10:07:ba:
00:69:3d:03:e7:7d:76:a0:5f:cd:dd:d1:0e:7b:03:6b:4e:bb:
0d:1d:64:14:f6:0b:d1:d1:74:68:44:e4:ba:28:83:84:3c:37:
5b:02:9a:ac:a6:d4:2e:53:b8:40:26:6f:aa:65:af:21:0c:c3:
81:67:59:9c:bb:9a:d9:d2:f8:af:2c:b6:18:41:b8:96:89:90:
69:fd:ef:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO5YOK4NZWmnzgAAUOyP8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjZiYzJkYTNjMmM2NDJiMTRhZTEyOWMxYmZmZjI2Nzg1
MmQ2ZmMwHhcNMjYwMzI2MTMwMDQxWhcNMjYwMzI3MTMwMDQxWjAzMTEwLwYDVQQD
EyhjZjU0MmEwNGJlZDE0MWU2ZDdjM2FjMGQwNjI4ODc4OTk2OWE3MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAJsCc/I4rcMG7IcWvfw8JUQ5ddv
fk12b5BhjLF8t0bbpQGaF/H5UwvZHLfQyi9gOGij0NxRFm23d/dNC5HzP6qYv2Sr
8sNcSNkY85RkAK1xfP/UFMW7EEtOeQKtPw2p1+1cCCYm0HzV1kfKfUfgbYMp4eO7
ZREkDlQlN7qgS/FAf2uJfc1FZUcM/dIgSx4FP0iyS+VWjaDK+NQyYrCxBL0YUmQn
snfqDfI3WXhGD7Z5deqRupFtQ4G6gNsHntY52CEPC4aMToMARZYo+ZNkjtm2Mode
/CajX8yoI8T8/RObGSiKr4hCx3XpfmMTPnjwQMxkaaKizhugIaF7QEPTWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9UKgS+0UHm18OsDQYoh4mWmnMVMB8GA1UdIwQY
MBaAFFr2vC2jwsZCsUrhKcG//yZ4Utb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTkt
OWFkYWE0YjJiMTk2LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTktOWFkYWE0YjJiMTk2
LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABpiq/nL
2zvP5lRDidn3pRTbeuiKG7kDgL50PqPQQAdBAcfmMsYPtXV23pbHDODDZ5+lNH0Z
t2zBTC+1w6V3IiBSa9UbSPrVbp7jka2DUhRNyDRBGYRZE2UL1JnfL+khyYD6X3RB
gio+tsdOUkAIkdqC4pwE8pC4CPXFHyiSgJBOFXIQNey/xsrbF6bLn7gJPW28995K
vGFKgktPkUyAHg08MH1GTEGfGOaUncc1DuGJEAe6AGk9A+d9dqBfzd3RDnsDa067
DR1kFPYL0dF0aETkuiiDhDw3WwKarKbULlO4QCZvqmWvIQzDgWdZnLua2dL4ryy2
GEG4lomQaf3vsA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:54 2026 by rpki-client