Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/W71IGEEVS878rKezBFwL70pzTbI.mft
File: W71IGEEVS878rKezBFwL70pzTbI.mft (raw, json)
Hash identifier: 1LmhPPh0oqg9ZuOn5vfQ43kQ19VsR0cNOi4OIbsM6Lo=
Subject key identifier: 2A:05:CD:14:B3:4B:B0:9C:49:73:94:B7:93:94:19:D9:1F:03:49:07
Authority key identifier: 5B:BD:48:18:41:15:4B:CE:FC:AC:A7:B3:04:5C:0B:EF:4A:73:4D:B2
Certificate issuer: /CN=5bbd481841154bcefcaca7b3045c0bef4a734db2
Certificate serial: 019D27726F6A556DEB9E18C0EFCBAEAA4A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71IGEEVS878rKezBFwL70pzTbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/W71IGEEVS878rKezBFwL70pzTbI.mft
Manifest number: 0239
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: NPY5R79BjDs2BN9ZK1iHmFXoWXk.roa (hash: s2DNO9mL4NaiBwxc12CWZhJRXCSSZJIfWr7Kxeaj0qg=)
2: W71IGEEVS878rKezBFwL70pzTbI.crl (hash: +6tJUnDk7OAAtfOUzBAEB9M0kXoUAin83/LATtlzgLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/W71IGEEVS878rKezBFwL70pzTbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/W71IGEEVS878rKezBFwL70pzTbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71IGEEVS878rKezBFwL70pzTbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6f:6a:55:6d:eb:9e:18:c0:ef:cb:ae:aa:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd481841154bcefcaca7b3045c0bef4a734db2
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=2a05cd14b34bb09c497394b7939419d91f034907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:e1:7d:e0:8a:25:98:7b:0c:a9:fc:dd:85:
e2:02:88:6a:69:d7:0f:a5:b7:97:40:40:1d:06:ba:
de:67:a8:b0:a5:8f:40:4d:2a:1f:06:ce:fd:90:43:
28:e3:32:38:db:6c:54:1d:63:2a:fd:4b:f4:96:69:
c0:b8:01:1b:17:dd:c0:0c:0f:69:87:a1:bb:67:af:
33:0f:1d:11:7e:ce:d9:f8:7f:58:9d:1e:f1:40:c2:
a5:7e:6e:91:c9:23:20:9f:ae:a9:77:e5:99:40:c1:
72:eb:89:e2:c4:4d:58:e2:a7:a2:7b:07:c8:ef:e4:
4c:8e:b9:a2:6a:3d:a4:10:27:8f:e5:98:e4:00:52:
0d:96:8a:ab:96:d3:8e:18:2b:88:35:67:9c:b4:e2:
b7:03:39:9d:6b:a2:2a:9b:a8:b9:c0:a6:30:a3:ab:
27:4f:c7:47:83:c5:08:cb:c3:bb:2f:0e:5e:17:bf:
37:08:fd:d7:0f:e6:a4:c2:df:b9:c5:d9:8f:44:ed:
67:6e:63:e8:73:c9:81:70:ad:6b:c8:75:a9:7a:67:
b4:df:9b:ca:9a:78:16:35:79:e2:76:39:b2:3f:63:
9c:68:fa:bf:e9:26:50:b3:64:97:cb:44:ff:1a:48:
bb:6e:d6:a2:2c:9a:d7:95:76:9d:d9:5f:5a:08:17:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:CD:14:B3:4B:B0:9C:49:73:94:B7:93:94:19:D9:1F:03:49:07
X509v3 Authority Key Identifier:
keyid:5B:BD:48:18:41:15:4B:CE:FC:AC:A7:B3:04:5C:0B:EF:4A:73:4D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71IGEEVS878rKezBFwL70pzTbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/W71IGEEVS878rKezBFwL70pzTbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/W71IGEEVS878rKezBFwL70pzTbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:22:c4:ff:e2:d3:52:5d:6d:67:03:99:05:cb:e9:21:49:
19:d9:ca:cb:65:69:3f:2a:d4:88:bd:fb:62:af:b1:b3:b8:6e:
c1:9b:4a:b0:3a:24:87:72:0c:1c:44:85:f8:c5:56:3d:f8:36:
85:88:34:77:97:05:a1:c9:2e:4d:d5:db:a1:41:6e:01:09:e8:
38:7b:62:ea:8f:28:fb:0b:4f:15:f2:bf:64:35:1b:17:a7:6e:
b0:5d:a5:ce:e9:cc:aa:99:fe:5b:cd:d2:c3:f4:d7:09:6e:e9:
81:cb:16:f5:f8:d5:c6:f6:8d:46:3d:12:53:19:3f:ce:e3:be:
89:1f:85:29:db:c3:51:cc:4c:d1:c5:72:aa:b7:e6:3e:a5:04:
ad:1a:a4:9f:58:d1:0d:eb:69:3b:62:a6:39:50:c5:c8:9d:2b:
d6:02:45:1a:da:c6:46:97:5e:0d:0f:4d:44:be:47:68:10:20:
c1:75:ae:cb:3e:9b:e1:9f:b1:e1:35:5b:ea:9f:91:9b:94:b4:
48:b9:0d:d1:23:de:37:f2:e5:7d:f6:aa:22:3e:80:9d:98:42:
5f:32:ee:99:09:78:3e:36:a8:d6:8f:15:9e:d7:27:09:89:de:
ca:c8:c5:0e:24:7f:07:28:35:f3:fd:f1:71:09:f0:5f:7b:73:
4d:68:9c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncm9qVW3rnhjA78uuqkosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYmQ0ODE4NDExNTRiY2VmY2FjYTdiMzA0NWMwYmVmNGE3
MzRkYjIwHhcNMjYwMzI2MDAwMTQ0WhcNMjYwMzI3MDAwMTQ0WjAzMTEwLwYDVQQD
EygyYTA1Y2QxNGIzNGJiMDljNDk3Mzk0Yjc5Mzk0MTlkOTFmMDM0OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf3hfeCKJZh7DKn83YXiAohqadcP
pbeXQEAdBrreZ6iwpY9ATSofBs79kEMo4zI422xUHWMq/Uv0lmnAuAEbF93ADA9p
h6G7Z68zDx0Rfs7Z+H9YnR7xQMKlfm6RySMgn66pd+WZQMFy64nixE1Y4qeiewfI
7+RMjrmiaj2kECeP5ZjkAFINloqrltOOGCuINWectOK3Azmda6Iqm6i5wKYwo6sn
T8dHg8UIy8O7Lw5eF783CP3XD+akwt+5xdmPRO1nbmPoc8mBcK1ryHWpeme035vK
mngWNXnidjmyP2OcaPq/6SZQs2SXy0T/Gki7btaiLJrXlXad2V9aCBeRswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoFzRSzS7CcSXOUt5OUGdkfA0kHMB8GA1UdIwQY
MBaAFFu9SBhBFUvO/KynswRcC+9Kc02yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzcxSUdFRVZTODc4cktlekJGd0w3MHB6VGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81ZGMxOTUtMGQ5OS00ODNlLWI0NDkt
Y2UyMjcwNDJkZGEyLzEvVzcxSUdFRVZTODc4cktlekJGd0w3MHB6VGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81ZGMxOTUtMGQ5OS00ODNlLWI0NDktY2UyMjcwNDJkZGEy
LzEvVzcxSUdFRVZTODc4cktlekJGd0w3MHB6VGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR0ixP/i
01JdbWcDmQXL6SFJGdnKy2VpPyrUiL37Yq+xs7huwZtKsDokh3IMHESF+MVWPfg2
hYg0d5cFockuTdXboUFuAQnoOHti6o8o+wtPFfK/ZDUbF6dusF2lzunMqpn+W83S
w/TXCW7pgcsW9fjVxvaNRj0SUxk/zuO+iR+FKdvDUcxM0cVyqrfmPqUErRqkn1jR
DetpO2KmOVDFyJ0r1gJFGtrGRpdeDQ9NRL5HaBAgwXWuyz6b4Z+x4TVb6p+Rm5S0
SLkN0SPeN/LlffaqIj6AnZhCXzLumQl4Pjao1o8VntcnCYneysjFDiR/Byg18/3x
cQnwX3tzTWic0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:03 2026 by rpki-client