Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: vIZgCAk43131IwxuAxB4JCak5sMlDBmBJWOEEQvxrQs=
Subject key identifier: D4:65:CF:87:07:2E:EB:F2:3A:6F:6E:1D:08:5B:93:B4:C8:B9:EB:48
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 019D265F8838290002F94F587732FDD428DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 02FF
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: dcD055JlPzhE0U2Qu8hWMM72FWA.roa (hash: VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=)
2: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (hash: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: lzjEx9G1Am9XAUMfLTikdiwcfhTSvhkV97PbKk/Gy+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:88:38:29:00:02:f9:4f:58:77:32:fd:d4:28:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=d465cf87072eebf23a6f6e1d085b93b4c8b9eb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:bd:e9:a7:9d:3b:13:27:68:8e:91:59:95:
e6:45:31:75:a1:e5:41:17:ea:a8:e8:e8:25:0b:f5:
ee:2f:b7:0f:8b:bf:90:84:1e:23:d4:14:51:4f:01:
d3:91:1a:ad:34:63:cb:a9:00:4d:a5:c9:01:33:54:
42:d1:c3:a7:3c:0f:07:0d:a8:fb:6b:39:03:50:69:
6a:06:3d:9c:40:d7:fb:72:1a:78:64:a6:c8:64:d3:
d0:25:4d:95:4e:2a:9d:d1:6d:9e:c2:fe:70:cf:78:
4f:99:cd:88:42:72:d2:93:b3:55:c9:4f:41:fd:45:
bd:29:8b:08:2e:d9:6c:5c:ed:0e:e8:2b:36:53:f5:
c3:fa:e8:5a:d8:1c:e4:54:d7:b3:6b:81:c5:c0:b0:
c0:89:75:47:1f:8d:7f:be:fe:9b:86:51:a0:43:25:
a0:9a:3b:8d:50:82:74:b5:73:d2:c6:92:1b:56:a7:
b7:31:85:45:d9:fb:e4:2f:a1:98:24:50:21:a0:4f:
93:b7:8c:6e:ff:a2:6b:66:b4:57:f4:73:56:f8:dd:
15:22:db:4d:89:09:58:82:34:96:3b:7b:cc:d7:39:
85:cd:f4:c4:9d:24:6b:4e:d5:9b:3c:de:91:9c:8f:
ff:21:47:39:45:07:3e:b8:7f:22:87:45:37:8e:f6:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:CF:87:07:2E:EB:F2:3A:6F:6E:1D:08:5B:93:B4:C8:B9:EB:48
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e0:00:23:31:b1:37:2f:39:f4:b9:f4:6e:54:f3:19:9d:3e:
4f:2e:2e:9c:53:26:be:93:63:44:01:ea:66:2d:1d:da:a1:21:
36:54:39:88:4f:cc:d9:70:79:8c:9c:ea:1a:49:69:57:c9:e1:
c7:d4:38:a9:65:71:c7:97:28:70:6b:91:51:83:29:62:3a:80:
d7:9b:9b:e0:7a:fb:fb:03:d8:df:7c:c0:3c:26:39:e2:5a:f3:
fc:3a:23:58:49:f1:ce:b1:43:27:75:c4:1e:c6:7c:7b:f3:a0:
ba:92:d2:ce:5e:99:7c:09:46:73:3e:76:c9:a5:b1:7d:d5:50:
0e:e3:50:3f:21:f1:6f:8f:3c:73:2f:40:30:36:7b:04:80:96:
2f:59:aa:b8:a7:90:5c:df:99:cc:a0:f7:1c:bb:c6:d2:f2:85:
7a:79:23:2d:29:59:21:8f:7e:c3:38:d2:08:71:44:cf:ae:7e:
df:de:a4:27:0f:19:e4:a9:b1:95:d2:b2:d4:33:34:7a:fc:a5:
89:18:23:f6:6f:07:2f:19:fe:8e:cc:a6:4d:12:d3:c2:09:f8:
1f:3a:ce:11:99:f1:bf:cb:eb:59:40:6e:3f:de:92:5b:7c:8c:
a0:73:fc:ea:0e:ac:64:32:28:67:6c:ef:c9:b4:bb:45:19:c9:
98:64:74:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX4g4KQAC+U9YdzL91CjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTFiOGI3YTFkYTY0MDM0ODQ5M2I5YzZmNGVhZDQ5NmUz
ODYxY2YwHhcNMjYwMzI1MTkwMTI4WhcNMjYwMzI2MTkwMTI4WjAzMTEwLwYDVQQD
EyhkNDY1Y2Y4NzA3MmVlYmYyM2E2ZjZlMWQwODViOTNiNGM4YjllYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rq96aedOxMnaI6RWZXmRTF1oeVB
F+qo6OglC/XuL7cPi7+QhB4j1BRRTwHTkRqtNGPLqQBNpckBM1RC0cOnPA8HDaj7
azkDUGlqBj2cQNf7chp4ZKbIZNPQJU2VTiqd0W2ewv5wz3hPmc2IQnLSk7NVyU9B
/UW9KYsILtlsXO0O6Cs2U/XD+uha2BzkVNeza4HFwLDAiXVHH41/vv6bhlGgQyWg
mjuNUIJ0tXPSxpIbVqe3MYVF2fvkL6GYJFAhoE+Tt4xu/6JrZrRX9HNW+N0VIttN
iQlYgjSWO3vM1zmFzfTEnSRrTtWbPN6RnI//IUc5RQc+uH8ih0U3jvY5UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRlz4cHLuvyOm9uHQhbk7TIuetIMB8GA1UdIwQY
MBaAFMDhuLeh2mQDSEk7nG9OrUluOGHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09HNHQ2SGFaQU5JU1R1Y2IwNnRTVzQ0WWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hZmNlZDgtNWM0OC00NzQwLWE2MzUt
MTYxMWM5MGJhMzNiLzEvd09HNHQ2SGFaQU5JU1R1Y2IwNnRTVzQ0WWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hZmNlZDgtNWM0OC00NzQwLWE2MzUtMTYxMWM5MGJhMzNi
LzEvd09HNHQ2SGFaQU5JU1R1Y2IwNnRTVzQ0WWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuAAIzGx
Ny859Ln0blTzGZ0+Ty4unFMmvpNjRAHqZi0d2qEhNlQ5iE/M2XB5jJzqGklpV8nh
x9Q4qWVxx5cocGuRUYMpYjqA15ub4Hr7+wPY33zAPCY54lrz/DojWEnxzrFDJ3XE
HsZ8e/OgupLSzl6ZfAlGcz52yaWxfdVQDuNQPyHxb488cy9AMDZ7BICWL1mquKeQ
XN+ZzKD3HLvG0vKFenkjLSlZIY9+wzjSCHFEz65+396kJw8Z5KmxldKy1DM0evyl
iRgj9m8HLxn+jsymTRLTwgn4HzrOEZnxv8vrWUBuP96SW3yMoHP86g6sZDIoZ2zv
ybS7RRnJmGR0jA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:49 2026 by rpki-client