Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: hClnFWFZ1sB1I9qOIk/o74czjPd4n146xholikLr3/Y=
Subject key identifier: 3C:AE:4E:3C:FB:1B:43:E5:DF:31:9B:A1:6D:64:C3:89:13:9C:79:89
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 019D2AE12F5E2BFBA35C76CF8272294CC287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 1405
Signing time: Thu 26 Mar 2026 16:01:33 +0000
Manifest this update: Thu 26 Mar 2026 16:01:33 +0000
Manifest next update: Fri 27 Mar 2026 16:01:33 +0000
Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: nXe3FlKbV1OTP+9AOJmJbYMaQG7hyfeuKO/2UPROZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:2f:5e:2b:fb:a3:5c:76:cf:82:72:29:4c:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Mar 26 16:01:33 2026 GMT
Not After : Mar 27 16:01:33 2026 GMT
Subject: CN=3cae4e3cfb1b43e5df319ba16d64c389139c7989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:18:8a:a4:28:63:ca:79:f0:c5:b2:7a:52:
a7:6b:7d:52:51:81:16:46:b0:49:b7:ce:f5:b8:1c:
56:12:5c:38:d7:e8:df:b6:8d:b7:2d:a1:f1:6b:07:
75:f3:3d:9f:1d:62:ae:ff:16:09:6e:f1:68:0c:c6:
0f:15:0b:82:94:89:f5:f9:9f:9b:dd:9b:5d:6d:d8:
fb:74:f3:2a:30:86:45:91:9f:9f:83:4b:0e:1a:ce:
c9:61:c4:06:ab:1e:f2:20:e9:ec:d3:5d:e6:38:4d:
90:ab:85:5b:66:4f:d3:62:7e:02:28:68:d6:52:30:
53:37:6b:98:c8:a3:e7:2c:16:56:0b:5f:6d:a6:c9:
58:34:40:d9:0d:9c:f7:87:eb:3e:d2:df:83:78:e5:
db:45:09:33:3f:4f:08:ad:88:3d:1b:59:0b:ae:8d:
a8:89:51:7a:e6:60:41:50:2c:70:1e:21:b2:ee:3b:
9b:6b:21:a6:3f:a5:85:76:2e:21:b6:a7:5c:3e:a4:
5f:4a:ab:0b:fd:06:3c:bc:20:0f:b7:6a:06:5d:23:
73:b8:b1:7a:b4:53:49:94:f2:d4:5a:9f:0b:d9:7e:
b7:54:6e:67:7c:8f:77:17:a8:95:e5:33:8f:0a:95:
c1:9d:9c:5f:f9:72:41:f6:df:18:2a:79:89:5a:19:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AE:4E:3C:FB:1B:43:E5:DF:31:9B:A1:6D:64:C3:89:13:9C:79:89
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d1:46:1e:95:17:ad:8b:ce:64:a5:82:09:12:69:03:ba:b3:
fe:79:47:a8:51:09:53:24:18:f5:f6:18:66:e7:3e:7f:ce:b1:
e0:fb:ff:ab:99:96:38:13:38:2d:ce:84:12:00:a2:0f:96:1a:
fa:e2:e3:1a:7b:92:89:15:62:1d:e0:d0:17:2c:e8:87:a0:47:
2f:65:ba:00:78:06:ce:be:49:e9:7e:18:a0:9a:98:22:38:c3:
ca:23:d5:7c:b9:e6:3c:87:f1:54:b2:d8:df:0a:0e:b8:04:8e:
49:e6:58:5c:6a:06:4b:7a:aa:ce:08:3f:56:0f:67:36:f2:ae:
f3:b4:88:ef:d4:04:6b:c3:b3:1b:97:c5:5a:0f:78:d8:e3:43:
e9:96:c5:31:2b:69:cb:8e:c4:74:79:3e:d3:27:c9:da:c9:40:
5e:5c:33:c1:07:07:a7:a4:5c:32:ab:5b:08:3b:fb:9f:88:12:
c5:15:27:74:f2:ce:9d:15:1b:93:cb:5f:9f:54:21:4a:c8:f5:
56:a0:b5:3f:75:0c:0e:1e:5a:92:f8:01:18:76:c9:05:ab:26:
2f:47:e5:91:73:b1:68:5d:96:ca:57:45:80:29:36:cb:e1:8b:
ef:29:e1:7a:bd:c1:e1:2c:31:42:05:6b:22:bf:ad:57:f9:12:
68:6d:e8:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4S9eK/ujXHbPgnIpTMKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1
NTcyODgwHhcNMjYwMzI2MTYwMTMzWhcNMjYwMzI3MTYwMTMzWjAzMTEwLwYDVQQD
EygzY2FlNGUzY2ZiMWI0M2U1ZGYzMTliYTE2ZDY0YzM4OTEzOWM3OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzsYiqQoY8p58MWyelKna31SUYEW
RrBJt871uBxWElw41+jfto23LaHxawd18z2fHWKu/xYJbvFoDMYPFQuClIn1+Z+b
3Ztdbdj7dPMqMIZFkZ+fg0sOGs7JYcQGqx7yIOns013mOE2Qq4VbZk/TYn4CKGjW
UjBTN2uYyKPnLBZWC19tpslYNEDZDZz3h+s+0t+DeOXbRQkzP08IrYg9G1kLro2o
iVF65mBBUCxwHiGy7jubayGmP6WFdi4htqdcPqRfSqsL/QY8vCAPt2oGXSNzuLF6
tFNJlPLUWp8L2X63VG5nfI93F6iV5TOPCpXBnZxf+XJB9t8YKnmJWhm6OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyuTjz7G0Pl3zGboW1kw4kTnHmJMB8GA1UdIwQY
MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt
OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh
LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9FGHpUX
rYvOZKWCCRJpA7qz/nlHqFEJUyQY9fYYZuc+f86x4Pv/q5mWOBM4Lc6EEgCiD5Ya
+uLjGnuSiRViHeDQFyzoh6BHL2W6AHgGzr5J6X4YoJqYIjjDyiPVfLnmPIfxVLLY
3woOuASOSeZYXGoGS3qqzgg/Vg9nNvKu87SI79QEa8OzG5fFWg942OND6ZbFMStp
y47EdHk+0yfJ2slAXlwzwQcHp6RcMqtbCDv7n4gSxRUndPLOnRUbk8tfn1QhSsj1
VqC1P3UMDh5akvgBGHbJBasmL0flkXOxaF2WyldFgCk2y+GL7ynher3B4SwxQgVr
Ir+tV/kSaG3ofw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:31 2026 by rpki-client