Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: 8ooM+ehZAIsXJn5I0dD95SiOAI8nVH6XbQ/wBlp5kss=
Subject key identifier: F9:DB:79:F0:94:BD:75:E1:DC:C6:73:58:A3:11:9E:E6:79:C5:4D:AF
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 019D2A3C5AA999917607F7798D96C81E44AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0F2C
Signing time: Thu 26 Mar 2026 13:01:31 +0000
Manifest this update: Thu 26 Mar 2026 13:01:31 +0000
Manifest next update: Fri 27 Mar 2026 13:01:31 +0000
Files and hashes: 1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=)
2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: wUfoYuJ0Bil8VUzwi98qWsn0QMeAaAmybW1iWMvUq1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:5a:a9:99:91:76:07:f7:79:8d:96:c8:1e:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Mar 26 13:01:31 2026 GMT
Not After : Mar 27 13:01:31 2026 GMT
Subject: CN=f9db79f094bd75e1dcc67358a3119ee679c54daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:8d:02:0d:7c:6f:69:d5:3e:16:08:12:ec:
82:f7:9b:5a:a7:ce:36:af:9d:a3:8d:79:49:dd:c3:
6f:3a:49:8c:99:24:31:24:ca:6f:08:73:24:c2:e8:
91:30:04:c9:cc:8f:d4:05:ed:76:1f:6f:80:58:66:
aa:76:33:99:12:22:2a:61:fe:63:20:12:2c:34:b9:
6e:2f:89:80:c0:b5:3e:aa:12:1e:96:e4:83:6e:54:
60:75:54:af:86:ac:b1:f2:2c:5d:f5:62:5e:67:1f:
d1:93:56:9d:8a:13:c7:25:d8:39:15:e1:6b:60:7b:
ad:1e:f7:54:44:b6:5b:70:e6:e0:1e:d8:1f:e2:c2:
4a:ff:12:1c:69:0a:91:b6:c1:04:4b:5f:2a:51:aa:
76:18:9a:48:5b:c8:22:ab:e4:cc:e0:87:83:af:99:
ba:4d:d7:2b:b8:0d:32:19:80:36:1d:bb:61:71:dd:
f6:12:ea:28:04:fa:14:7e:08:75:3a:8c:87:9b:21:
d1:dc:1c:dc:56:ea:58:bd:03:42:27:89:72:39:c9:
84:8f:04:27:53:86:d3:0a:72:88:cb:88:97:f5:c5:
93:0a:47:db:cb:8e:9c:29:88:88:28:93:f3:a3:98:
26:89:99:cc:dd:f6:8b:db:b3:96:b9:7a:0e:f5:7a:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:79:F0:94:BD:75:E1:DC:C6:73:58:A3:11:9E:E6:79:C5:4D:AF
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:19:1a:9d:9a:7e:c0:8a:99:a8:fc:a0:bd:5b:10:73:4a:5b:
5a:1d:9d:6d:88:37:91:43:4e:95:b7:02:55:5b:21:ea:ee:e3:
15:4a:1a:86:59:0c:33:d2:26:7f:d0:af:92:81:d0:c1:b9:01:
47:0b:d7:41:e1:1f:03:2a:5a:fd:ed:00:e4:a4:bf:6b:a1:98:
18:be:a7:1e:2d:45:f8:84:f7:f3:60:8b:3f:78:fd:50:13:89:
80:50:b4:7b:84:8b:d0:5c:48:0f:d5:80:d6:cf:0f:24:10:17:
0d:84:e0:38:f1:fd:79:4d:c2:94:5d:6a:3e:27:18:55:f1:b4:
f4:c9:38:af:fc:a9:ea:8f:5f:60:99:b7:a6:c9:90:37:07:98:
b3:6d:97:08:9c:a7:f0:fc:b8:b0:ce:df:c8:2d:6a:fe:d6:c0:
5d:6f:96:49:4d:fb:da:c9:da:28:20:20:b2:88:34:66:b0:40:
67:22:2d:f6:33:64:fe:fd:55:1e:cd:55:6b:46:de:df:74:1d:
cf:64:67:f9:c7:10:3e:1c:38:a5:39:de:2f:48:ae:a0:a1:19:
c8:49:e3:99:01:af:2f:a0:7c:14:93:60:7d:7d:ba:93:f9:18:
8f:a8:fb:c4:d0:e7:90:30:8a:6e:02:c1:9a:af:7a:33:e1:2c:
89:5b:79:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPFqpmZF2B/d5jZbIHkSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Nzg1YTIxZTJkMDdjNjhmZjMxNzU1OGM2OWVmMTE4Y2M3
NTgwNWEwHhcNMjYwMzI2MTMwMTMxWhcNMjYwMzI3MTMwMTMxWjAzMTEwLwYDVQQD
EyhmOWRiNzlmMDk0YmQ3NWUxZGNjNjczNThhMzExOWVlNjc5YzU0ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8qNAg18b2nVPhYIEuyC95tap842
r52jjXlJ3cNvOkmMmSQxJMpvCHMkwuiRMATJzI/UBe12H2+AWGaqdjOZEiIqYf5j
IBIsNLluL4mAwLU+qhIeluSDblRgdVSvhqyx8ixd9WJeZx/Rk1adihPHJdg5FeFr
YHutHvdURLZbcObgHtgf4sJK/xIcaQqRtsEES18qUap2GJpIW8giq+TM4IeDr5m6
TdcruA0yGYA2Hbthcd32EuooBPoUfgh1OoyHmyHR3BzcVupYvQNCJ4lyOcmEjwQn
U4bTCnKIy4iX9cWTCkfby46cKYiIKJPzo5gmiZnM3faL27OWuXoO9XrknQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnbefCUvXXh3MZzWKMRnuZ5xU2vMB8GA1UdIwQY
MBaAFFl4WiHi0Hxo/zF1WMae8RjMdYBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTct
NzVmNGZjYTg2YWU0LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTctNzVmNGZjYTg2YWU0
LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhkanZp+
wIqZqPygvVsQc0pbWh2dbYg3kUNOlbcCVVsh6u7jFUoahlkMM9Imf9CvkoHQwbkB
RwvXQeEfAypa/e0A5KS/a6GYGL6nHi1F+IT382CLP3j9UBOJgFC0e4SL0FxID9WA
1s8PJBAXDYTgOPH9eU3ClF1qPicYVfG09Mk4r/yp6o9fYJm3psmQNweYs22XCJyn
8Py4sM7fyC1q/tbAXW+WSU372snaKCAgsog0ZrBAZyIt9jNk/v1VHs1Va0be33Qd
z2Rn+ccQPhw4pTneL0iuoKEZyEnjmQGvL6B8FJNgfX26k/kYj6j7xNDnkDCKbgLB
mq96M+EsiVt5Dg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:00:11 2026 by rpki-client