Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: HnNTzKcex0XnrX79bc+gjGbJetMvQXWbaCm48DB7o+0=
Subject key identifier: 1D:39:52:10:77:35:F3:63:BD:B8:04:55:0B:BC:98:7A:FD:1E:D8:D2
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019D26283515EEEAF8F3455C8738E1710676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0E8A
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: OLM8rEIbQLm-mhf083sHPA1vezE.roa (hash: eeeVPvGHr6jUSKOltuDwskpQGg614WlG4/Y753adIhs=)
2: bAhXIw4o-K6aXN8tJ7hf4z8mRUo.roa (hash: uotsY5ugmiZrSYWh3ucoWfhUQq8CHWPejt75nystkiU=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: DtA7/IzQLNNxu3rGBtN8ZogaaXIM4VTjbq+kN0qpD8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:35:15:ee:ea:f8:f3:45:5c:87:38:e1:71:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=1d3952107735f363bdb804550bbc987afd1ed8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:05:74:e0:8c:61:ec:aa:0f:81:43:e0:fe:
53:9b:3d:92:21:55:ec:c9:a1:63:c0:c0:cc:27:47:
9c:ad:bd:78:cf:29:58:18:0b:20:7d:02:7b:69:5d:
d1:f6:d0:e7:65:c3:19:33:ce:aa:e7:0e:d5:15:79:
b9:32:b4:32:67:40:a4:b6:b4:cd:96:3b:b6:30:36:
63:e9:3c:8a:f3:2c:e9:e5:c4:19:30:3a:f4:95:e2:
56:62:dc:bb:1b:30:37:7b:ec:69:a2:dc:15:c9:41:
e9:6e:06:aa:15:9f:45:a8:7b:d8:e7:e1:52:2f:a2:
8d:11:3d:fb:c1:c4:66:25:95:08:a2:53:f9:04:12:
fd:08:06:d1:59:6e:4e:97:27:b9:45:57:fa:5e:bc:
b6:ee:ed:c1:31:0c:b5:ff:57:41:3a:fd:9f:e1:61:
03:6c:48:c1:a3:f9:4c:62:ba:84:b9:75:fd:2d:fd:
8c:e0:41:15:17:33:bd:4a:f6:1f:73:b1:1c:da:2f:
46:a5:c4:36:5a:37:da:94:99:22:47:dc:29:d7:23:
ac:c9:69:f6:fd:e7:e1:29:4b:e8:bf:f8:2a:f3:2e:
44:55:54:46:09:8a:a5:dc:9b:17:9d:fb:d9:f8:04:
e7:91:86:94:59:3d:8b:70:b4:0c:45:d5:bf:f8:a2:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:52:10:77:35:F3:63:BD:B8:04:55:0B:BC:98:7A:FD:1E:D8:D2
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7d:ff:f8:c3:3b:8a:5a:42:bb:72:c4:c1:13:41:a2:59:c5:
d6:b2:2a:73:a7:da:35:a3:00:ac:0c:4b:ed:97:c5:c7:7a:ee:
38:c1:bd:eb:4d:4d:7d:8d:d4:9a:ad:46:d3:1e:f4:f0:67:d8:
26:59:92:ef:72:17:a4:03:3e:3a:26:79:3b:42:2d:dd:c2:0b:
77:cf:2d:b4:24:b6:68:44:74:3e:ee:68:dc:33:be:21:3d:ea:
7d:7d:82:58:86:f1:9a:1e:28:f1:25:ee:c2:a2:b2:00:83:1f:
e2:74:44:46:20:11:ea:86:05:d7:40:8f:a5:ad:53:70:13:a1:
2f:ff:d5:2e:87:42:ef:27:3c:35:99:0a:7f:dc:7b:42:f0:0f:
62:76:d9:c4:0a:78:84:09:be:b0:c0:65:0a:95:06:63:15:be:
09:9f:d6:a5:23:67:5f:60:83:3c:bc:08:8e:60:e8:34:96:4a:
13:5b:0a:69:14:ef:c5:49:25:6d:ce:df:0c:aa:d1:3b:8b:d1:
0f:bc:7d:03:9d:e8:f8:fa:cc:a9:60:36:c9:a5:7f:cd:10:df:
8d:47:22:c0:ab:84:e1:57:fc:b8:41:b6:f6:f8:04:89:d8:b7:
4d:20:38:47:4c:6d:2d:c0:5d:19:00:59:01:35:2e:f4:70:8e:
98:fb:5a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKDUV7ur480VchzjhcQZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZmQyYzc0YWQ2ZmFlMmRkZDBmNmU5YzM5ZmRlODMxODkz
YWU2ZjkwHhcNMjYwMzI1MTgwMTAyWhcNMjYwMzI2MTgwMTAyWjAzMTEwLwYDVQQD
EygxZDM5NTIxMDc3MzVmMzYzYmRiODA0NTUwYmJjOTg3YWZkMWVkOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/EFdOCMYeyqD4FD4P5Tmz2SIVXs
yaFjwMDMJ0ecrb14zylYGAsgfQJ7aV3R9tDnZcMZM86q5w7VFXm5MrQyZ0CktrTN
lju2MDZj6TyK8yzp5cQZMDr0leJWYty7GzA3e+xpotwVyUHpbgaqFZ9FqHvY5+FS
L6KNET37wcRmJZUIolP5BBL9CAbRWW5Olye5RVf6Xry27u3BMQy1/1dBOv2f4WED
bEjBo/lMYrqEuXX9Lf2M4EEVFzO9SvYfc7Ec2i9GpcQ2WjfalJkiR9wp1yOsyWn2
/efhKUvov/gq8y5EVVRGCYql3JsXnfvZ+ATnkYaUWT2LcLQMRdW/+KLTJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB05UhB3NfNjvbgEVQu8mHr9HtjSMB8GA1UdIwQY
MBaAFML9LHStb64t3Q9unDn96DGJOub5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NDI2MDMtNTQ2Mi00YjhkLThiYzQt
NTM1Y2MwYzEwMmYwLzEvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NDI2MDMtNTQ2Mi00YjhkLThiYzQtNTM1Y2MwYzEwMmYw
LzEvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHH3/+MM7
ilpCu3LEwRNBolnF1rIqc6faNaMArAxL7ZfFx3ruOMG9601NfY3Umq1G0x708GfY
JlmS73IXpAM+OiZ5O0It3cILd88ttCS2aER0Pu5o3DO+IT3qfX2CWIbxmh4o8SXu
wqKyAIMf4nRERiAR6oYF10CPpa1TcBOhL//VLodC7yc8NZkKf9x7QvAPYnbZxAp4
hAm+sMBlCpUGYxW+CZ/WpSNnX2CDPLwIjmDoNJZKE1sKaRTvxUklbc7fDKrRO4vR
D7x9A53o+PrMqWA2yaV/zRDfjUciwKuE4Vf8uEG29vgEidi3TSA4R0xtLcBdGQBZ
ATUu9HCOmPtaRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:53 2026 by rpki-client