Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: VgO5yvZ2Did/xFnyWRbqicIOYYCZgQljjAS3tm10/uw=
Subject key identifier: 0F:07:F6:FC:9C:02:54:C9:71:26:C5:1D:88:48:F1:2A:25:60:B6:3A
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 019D296087AB07E1DC07B5F7267BB525CD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 16B9
Signing time: Thu 26 Mar 2026 09:01:24 +0000
Manifest this update: Thu 26 Mar 2026 09:01:24 +0000
Manifest next update: Fri 27 Mar 2026 09:01:24 +0000
Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: H9Ed6vc/9aWQT7VCPSg92ysxin4/IKqWMEQVbqg0EUs=)
2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:87:ab:07:e1:dc:07:b5:f7:26:7b:b5:25:cd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Mar 26 09:01:24 2026 GMT
Not After : Mar 27 09:01:24 2026 GMT
Subject: CN=0f07f6fc9c0254c97126c51d8848f12a2560b63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:61:39:68:ad:ca:80:1e:20:27:19:cf:85:
49:e5:da:9b:b8:3c:1f:dd:9a:33:76:d9:76:aa:d1:
0d:c7:ed:50:c6:6a:12:30:7d:f6:c3:87:a4:04:7c:
17:29:eb:88:6f:6c:d1:d3:e1:cc:cc:aa:c2:67:9f:
92:b0:06:08:6e:15:96:78:de:d8:47:7b:96:df:7a:
49:5f:ce:f1:b3:f9:3f:b3:9b:68:77:78:37:4a:e5:
c3:06:76:6c:cb:14:be:74:b8:9d:58:6f:58:ef:85:
e0:00:67:4e:80:ba:01:1f:3e:40:bc:6c:34:f2:9f:
4e:d2:8a:ab:66:be:06:be:07:45:66:ea:74:c6:4b:
be:31:7f:4a:be:ca:d7:32:34:9c:57:6b:4f:f4:ba:
a3:af:aa:4d:5f:cd:9d:7a:40:8b:6a:15:8e:8e:e5:
21:01:42:ce:52:9c:fa:99:9b:6f:70:b5:cc:32:13:
2d:45:37:66:de:59:d2:03:39:e1:13:e3:7b:0d:40:
06:b7:2b:42:b8:ea:dd:5b:5d:b2:e0:8a:78:c5:45:
60:2a:9f:28:48:3f:fe:15:a5:c9:d5:3f:eb:2d:72:
50:91:f4:5f:68:52:f8:35:14:d9:fd:69:b9:ef:cd:
d8:db:3b:fe:d8:7b:a0:59:12:22:07:82:44:96:22:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:F6:FC:9C:02:54:C9:71:26:C5:1D:88:48:F1:2A:25:60:B6:3A
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:77:9a:7e:4f:c8:ed:0d:16:55:29:7c:0c:88:b6:8e:aa:76:
e8:a5:01:24:87:bf:d6:f1:54:00:b1:90:d2:d6:5a:8e:3c:e3:
23:91:cb:d9:fb:7c:cd:e8:0a:05:e1:94:18:a9:8b:37:c0:18:
d4:51:b9:57:b5:58:de:87:3a:aa:3f:1b:ae:c0:39:c6:17:74:
6e:17:95:fa:e3:c5:f7:8d:4f:24:6b:fc:9a:94:c2:8f:e8:d5:
94:f2:94:ca:c9:ce:ac:3b:45:dd:5f:d9:8a:66:9f:86:b7:83:
fc:fa:a0:ec:0a:cd:3b:70:2f:9d:d1:8b:79:e5:41:be:cc:30:
60:49:9d:8e:37:f7:43:d3:7f:5a:38:63:04:f3:bf:45:81:b6:
3f:2d:34:fa:c6:97:22:94:4d:6b:00:d2:77:9e:23:b7:9c:38:
22:5e:56:75:e2:4a:50:4c:b4:24:ba:e4:31:76:4e:8b:90:7c:
15:61:96:5f:27:a1:cc:79:1e:86:65:dd:eb:d3:d6:fd:0c:a2:
46:58:76:3a:07:f8:34:30:3f:c0:f1:cf:e4:cc:c4:38:98:68:
19:eb:51:7c:b7:16:0a:dc:a7:d2:30:1c:91:63:8d:06:36:fb:
1e:6c:92:75:22:2a:d8:e3:06:10:2a:f7:e7:be:74:31:10:c9:
cd:cd:de:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYIerB+HcB7X3Jnu1Jc0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl
NGJhYWEwHhcNMjYwMzI2MDkwMTI0WhcNMjYwMzI3MDkwMTI0WjAzMTEwLwYDVQQD
EygwZjA3ZjZmYzljMDI1NGM5NzEyNmM1MWQ4ODQ4ZjEyYTI1NjBiNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKphOWityoAeICcZz4VJ5dqbuDwf
3Zozdtl2qtENx+1QxmoSMH32w4ekBHwXKeuIb2zR0+HMzKrCZ5+SsAYIbhWWeN7Y
R3uW33pJX87xs/k/s5tod3g3SuXDBnZsyxS+dLidWG9Y74XgAGdOgLoBHz5AvGw0
8p9O0oqrZr4GvgdFZup0xku+MX9KvsrXMjScV2tP9Lqjr6pNX82dekCLahWOjuUh
AULOUpz6mZtvcLXMMhMtRTdm3lnSAznhE+N7DUAGtytCuOrdW12y4Ip4xUVgKp8o
SD/+FaXJ1T/rLXJQkfRfaFL4NRTZ/Wm5783Y2zv+2HugWRIiB4JEliLAywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8H9vycAlTJcSbFHYhI8SolYLY6MB8GA1UdIwQY
MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt
ZmVjMjVkMmU5MThkLzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk
LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASneafk/I
7Q0WVSl8DIi2jqp26KUBJIe/1vFUALGQ0tZajjzjI5HL2ft8zegKBeGUGKmLN8AY
1FG5V7VY3oc6qj8brsA5xhd0bheV+uPF941PJGv8mpTCj+jVlPKUysnOrDtF3V/Z
imafhreD/Pqg7ArNO3AvndGLeeVBvswwYEmdjjf3Q9N/WjhjBPO/RYG2Py00+saX
IpRNawDSd54jt5w4Il5WdeJKUEy0JLrkMXZOi5B8FWGWXyehzHkehmXd69PW/Qyi
Rlh2Ogf4NDA/wPHP5MzEOJhoGetRfLcWCtyn0jAckWONBjb7HmySdSIq2OMGECr3
5750MRDJzc3euQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:06 2026 by rpki-client