Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json)
Hash identifier: O/RHSVrrtn9YGSFANDXlA6f6MGLszRSLVa/cOAsKa/g=
Subject key identifier: B5:88:12:9C:9D:2F:E4:3C:E4:47:DC:51:A9:CB:94:6C:BB:51:49:FF
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial: 019D322C147DCAEE3EDDFE89249CD0B92748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
Manifest number: 11E0
Signing time: Sat 28 Mar 2026 02:00:42 +0000
Manifest this update: Sat 28 Mar 2026 02:00:42 +0000
Manifest next update: Sun 29 Mar 2026 02:00:42 +0000
Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: ineUpufpSMJ/wJWVi1IxFt1VYDldFkgUJcTGq/i/QdE=)
2: ezjL16dggZPPKxT8c5ZTz4CAcj0.roa (hash: 1cWlyvLQe8uN9nQ0JnxAhB7NOox/3OfJkDuBy1sf4Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:14:7d:ca:ee:3e:dd:fe:89:24:9c:d0:b9:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Validity
Not Before: Mar 28 02:00:42 2026 GMT
Not After : Mar 29 02:00:42 2026 GMT
Subject: CN=b588129c9d2fe43ce447dc51a9cb946cbb5149ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:cb:31:de:15:a9:f2:e0:8d:09:3e:ec:13:
c8:8a:a0:e6:81:d9:b5:ba:13:ee:f9:40:90:9d:22:
62:7e:d2:17:c4:e2:a3:fa:46:aa:5b:62:1c:4a:0c:
74:47:c1:24:bb:4f:b8:b8:83:85:c8:d0:ed:51:45:
a2:9e:5b:0f:63:15:ad:96:6d:66:ca:47:5c:60:02:
8f:a8:fa:73:2f:ca:e6:1d:d2:d9:67:b3:c8:d3:45:
09:0f:85:47:4c:5e:d8:cb:e6:ed:6f:4c:3e:4e:94:
c1:5e:a5:09:a6:12:d5:e6:5b:41:55:c6:3e:86:03:
f5:e2:a2:b4:0e:d8:4b:87:0d:70:39:f3:05:9c:fa:
cf:5c:cd:7d:63:6e:8f:92:a8:54:ed:0f:78:98:60:
7e:09:c7:85:65:69:4f:a9:1e:3f:9f:92:b1:12:62:
6c:c4:63:7c:7f:e4:f7:f3:4d:27:5c:0a:37:f9:64:
9d:a7:70:dd:96:ce:71:3d:aa:31:4c:82:fd:ea:61:
27:a4:6c:f6:9f:87:d0:34:e3:f7:ef:41:18:cd:f6:
d9:b4:3b:0d:1f:c2:c7:49:09:95:77:40:22:38:ea:
be:3a:4c:29:a7:9b:b6:72:31:ee:7d:bc:c5:65:0d:
6f:72:c3:18:7c:89:af:82:cb:a4:3c:d3:a2:ea:dc:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:12:9C:9D:2F:E4:3C:E4:47:DC:51:A9:CB:94:6C:BB:51:49:FF
X509v3 Authority Key Identifier:
keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d8:63:fd:44:bf:9a:e1:83:c7:35:93:49:a8:35:a5:68:bf:
78:c1:bb:32:d0:ed:30:9f:fa:d3:d6:20:00:3a:bc:42:5b:ec:
74:76:bf:e9:5a:55:b3:30:5e:5b:cf:04:c6:4d:56:a3:6b:2a:
73:b3:4b:b0:6c:18:f6:b2:3c:32:e2:2d:a9:f4:31:e1:81:3d:
61:a4:33:2e:76:3f:3d:ca:54:27:a3:98:6e:5f:5e:e2:f7:f4:
01:bc:f4:1e:c9:5e:cf:1f:b1:f4:96:59:91:39:89:24:f8:6e:
86:2d:77:d1:3c:8e:d3:91:c2:13:9e:d6:80:72:31:dc:49:d4:
02:2e:f5:7a:26:90:bd:82:21:5f:a1:c6:11:73:c6:c8:10:65:
61:92:d2:fd:81:03:09:9c:92:ad:f4:3f:e0:0f:ce:a4:f0:a1:
1e:f5:3e:cb:45:c6:28:8c:64:58:93:d8:c6:77:1f:58:c8:82:
b6:74:45:bf:7c:83:d4:f8:a3:f2:48:2a:77:03:27:c3:6b:cc:
3d:88:63:5b:ca:69:3d:4a:04:cc:ad:59:3f:cf:8e:c3:67:88:
ca:61:bb:f9:d6:43:ea:f1:8d:d0:ea:aa:5a:70:a6:1e:02:6b:
26:cc:81:f7:9d:a0:c4:72:a5:0f:2d:78:00:72:1b:52:82:95:
73:df:45:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yLBR9yu4+3f6JJJzQuSdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ1ZDlhMWEyMjQxNjgzM2RlNTlhNWU2MTlkMTIwOTZk
MDk2OWUwHhcNMjYwMzI4MDIwMDQyWhcNMjYwMzI5MDIwMDQyWjAzMTEwLwYDVQQD
EyhiNTg4MTI5YzlkMmZlNDNjZTQ0N2RjNTFhOWNiOTQ2Y2JiNTE0OWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdDLMd4VqfLgjQk+7BPIiqDmgdm1
uhPu+UCQnSJiftIXxOKj+kaqW2IcSgx0R8Eku0+4uIOFyNDtUUWinlsPYxWtlm1m
ykdcYAKPqPpzL8rmHdLZZ7PI00UJD4VHTF7Yy+btb0w+TpTBXqUJphLV5ltBVcY+
hgP14qK0DthLhw1wOfMFnPrPXM19Y26PkqhU7Q94mGB+CceFZWlPqR4/n5KxEmJs
xGN8f+T3800nXAo3+WSdp3Ddls5xPaoxTIL96mEnpGz2n4fQNOP370EYzfbZtDsN
H8LHSQmVd0AiOOq+Okwpp5u2cjHufbzFZQ1vcsMYfImvgsukPNOi6tyMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWIEpydL+Q85EfcUanLlGy7UUn/MB8GA1UdIwQY
MBaAFFrEXZoaIkFoM95ZpeYZ0SCW0JaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMt
M2EwMDMxMzVhYWQxLzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMtM2EwMDMxMzVhYWQx
LzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9hj/US/
muGDxzWTSag1pWi/eMG7MtDtMJ/609YgADq8QlvsdHa/6VpVszBeW88Exk1Wo2sq
c7NLsGwY9rI8MuItqfQx4YE9YaQzLnY/PcpUJ6OYbl9e4vf0Abz0Hslezx+x9JZZ
kTmJJPhuhi130TyO05HCE57WgHIx3EnUAi71eiaQvYIhX6HGEXPGyBBlYZLS/YED
CZySrfQ/4A/OpPChHvU+y0XGKIxkWJPYxncfWMiCtnRFv3yD1Pij8kgqdwMnw2vM
PYhjW8ppPUoEzK1ZP8+Ow2eIymG7+dZD6vGN0OqqWnCmHgJrJsyB952gxHKlDy14
AHIbUoKVc99FIw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:55 2026 by rpki-client