Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
File: WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json)
Hash identifier: 5bEDvEjvGwwKPq0GiV/Sv8GAksPofQZpKKurVln59R0=
Subject key identifier: EC:0D:FB:CE:51:96:CB:A4:60:F0:D8:52:69:F1:87:E0:D6:7F:11:68
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial: 019D284E517F1C78A23D0CCC59F3A09DA311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
Manifest number: 0316
Signing time: Thu 26 Mar 2026 04:01:54 +0000
Manifest this update: Thu 26 Mar 2026 04:01:54 +0000
Manifest next update: Fri 27 Mar 2026 04:01:54 +0000
Files and hashes: 1: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: SY+Bvu2N1VsX+C/nxY7ybhop8frEgGVnek/4/TVZ7dI=)
2: e1NZm3XKE7xcFABvZP0BCejzf1s.roa (hash: j0g+97meVg3ce9VbKXkz531r7nEoX07hUsET3+Mmkt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:51:7f:1c:78:a2:3d:0c:cc:59:f3:a0:9d:a3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
Validity
Not Before: Mar 26 04:01:54 2026 GMT
Not After : Mar 27 04:01:54 2026 GMT
Subject: CN=ec0dfbce5196cba460f0d85269f187e0d67f1168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:5c:39:b9:be:3f:f8:cf:0f:10:3c:1f:3f:
b0:b3:83:53:03:20:16:a1:c5:1a:f3:ee:b3:30:a9:
db:75:26:ea:63:80:e1:87:65:81:1a:68:46:5e:57:
45:03:aa:44:9d:4b:77:7e:a0:4a:27:9c:47:07:98:
44:b6:43:e4:40:c0:65:4a:a5:e6:13:56:4e:de:7a:
a4:9b:00:46:99:40:0a:68:1b:7c:36:cf:86:a8:23:
7d:0a:ad:fb:5e:8b:d5:9a:50:d5:61:f0:2a:44:eb:
9b:4a:c6:97:52:2e:8d:7e:12:d8:e4:86:c6:e7:95:
06:88:39:b6:76:14:fd:f4:75:cc:88:1e:c5:54:00:
4f:ca:6c:c6:60:72:3e:5d:67:e7:20:c1:69:fe:c8:
31:6f:4b:51:5b:45:42:97:53:f5:30:5c:8d:38:9d:
f1:23:a8:6e:41:97:69:11:df:fd:cb:f1:40:44:31:
31:7a:3c:a4:3b:51:a4:02:f1:2d:c9:c4:e6:00:ad:
6c:41:d1:8d:34:c1:12:a4:47:b5:c4:fb:73:63:a3:
77:37:ce:8a:6a:9f:9c:48:50:ca:7c:4c:6c:90:07:
87:a1:96:9a:78:7e:6f:32:0f:81:6c:83:00:97:99:
70:0b:f4:c7:53:3f:42:58:79:79:83:86:41:70:ff:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:FB:CE:51:96:CB:A4:60:F0:D8:52:69:F1:87:E0:D6:7F:11:68
X509v3 Authority Key Identifier:
keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a4:41:a5:ea:13:35:f2:5e:de:f6:56:c0:73:17:a6:cf:dd:
75:a2:27:1a:fd:76:9f:ba:47:d1:5e:6e:9a:7d:91:47:c8:e8:
da:14:fb:21:ec:fb:84:2f:62:92:86:f2:1b:e3:fe:38:04:cc:
47:77:f7:85:33:7f:01:f1:30:0e:bd:d8:c4:03:bf:7f:42:46:
b3:da:1e:11:76:19:12:98:58:50:1e:33:24:c5:73:ff:04:1b:
5e:4d:76:c3:eb:26:bf:a2:0b:e8:7c:8f:55:45:d0:c2:05:e1:
13:6b:8b:91:fb:8a:ee:54:1d:64:69:36:b4:f1:2a:c4:3e:bd:
87:3b:76:4d:c1:3d:67:69:77:f5:e4:89:53:11:4e:23:d5:5f:
20:c4:e9:25:49:e2:8a:ce:f1:53:ff:f2:7f:31:54:5e:3a:12:
bd:a9:83:01:b2:18:7e:ce:5f:8e:25:5a:47:db:4c:64:83:c0:
81:3f:9b:74:43:6b:cd:85:44:3a:e8:55:9d:c5:b2:45:70:00:
0f:45:bb:eb:06:b4:42:de:ea:fe:40:74:7b:34:0f:da:f7:fd:
4b:46:f5:51:13:46:ee:ef:ac:ff:7c:81:d3:54:6a:93:5b:c4:
37:43:dc:5b:89:ec:d8:3a:ab:7d:b3:ad:2e:be:7f:d6:00:0b:
ee:c3:9a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTlF/HHiiPQzMWfOgnaMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmFlODAzZGYyMmIwNTVjNzRlNWZlOGYxMWQ5NDQwODk1
NjBlZDIwHhcNMjYwMzI2MDQwMTU0WhcNMjYwMzI3MDQwMTU0WjAzMTEwLwYDVQQD
EyhlYzBkZmJjZTUxOTZjYmE0NjBmMGQ4NTI2OWYxODdlMGQ2N2YxMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkVcObm+P/jPDxA8Hz+ws4NTAyAW
ocUa8+6zMKnbdSbqY4Dhh2WBGmhGXldFA6pEnUt3fqBKJ5xHB5hEtkPkQMBlSqXm
E1ZO3nqkmwBGmUAKaBt8Ns+GqCN9Cq37XovVmlDVYfAqROubSsaXUi6NfhLY5IbG
55UGiDm2dhT99HXMiB7FVABPymzGYHI+XWfnIMFp/sgxb0tRW0VCl1P1MFyNOJ3x
I6huQZdpEd/9y/FARDExejykO1GkAvEtycTmAK1sQdGNNMESpEe1xPtzY6N3N86K
ap+cSFDKfExskAeHoZaaeH5vMg+BbIMAl5lwC/THUz9CWHl5g4ZBcP/+FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwN+85RlsukYPDYUmnxh+DWfxFoMB8GA1UdIwQY
MBaAFFgq6APfIrBVx05f6PEdlECJVg7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lZjA0NmQtZjk1OS00Nzk4LTk2Yjgt
Y2ZlMTY0N2VhODY1LzEvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lZjA0NmQtZjk1OS00Nzk4LTk2YjgtY2ZlMTY0N2VhODY1
LzEvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6RBpeoT
NfJe3vZWwHMXps/ddaInGv12n7pH0V5umn2RR8jo2hT7Iez7hC9ikobyG+P+OATM
R3f3hTN/AfEwDr3YxAO/f0JGs9oeEXYZEphYUB4zJMVz/wQbXk12w+smv6IL6HyP
VUXQwgXhE2uLkfuK7lQdZGk2tPEqxD69hzt2TcE9Z2l39eSJUxFOI9VfIMTpJUni
is7xU//yfzFUXjoSvamDAbIYfs5fjiVaR9tMZIPAgT+bdENrzYVEOuhVncWyRXAA
D0W76wa0Qt7q/kB0ezQP2vf9S0b1URNG7u+s/3yB01Rqk1vEN0PcW4ns2DqrfbOt
Lr5/1gAL7sOayw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:55 2026 by rpki-client