Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier: YDMtw6RE69KnHjitbxjGp0M8aPCuy/N3TVWDewiYIzc=
Subject key identifier: 9E:8A:31:EE:CB:5A:73:49:DB:19:F0:AB:14:6F:E7:0F:52:7F:F4:A1
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 019D273A9DD0D60C45BA067591EDD8B308D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number: 0875
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: JlmnFaROi5T304MtHTA71UjxRy0.roa (hash: WacUNUJcf2dZiJ0rjzTFqXu+Ypi8vybjU4bLACTaUYw=)
2: chRqXv4l8jU9phwlrQ8CaAOFK_Y.roa (hash: uN3QCljvhH/hI1ryljX3s/pkHZPxweJQBqNIl5lLmBQ=)
3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: KfKryNytzirDod/PZ4sJ2wxEKoIlbE2QJUJsI/Ux4NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9d:d0:d6:0c:45:ba:06:75:91:ed:d8:b3:08:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=9e8a31eecb5a7349db19f0ab146fe70f527ff4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:0f:d1:c0:07:d4:1c:5f:5c:c1:c9:c9:cc:
23:c8:65:90:ab:f9:78:aa:fc:a8:ba:4c:4b:53:19:
0b:29:f0:2a:f4:b5:d4:e2:8c:04:e0:1a:d1:00:3e:
48:72:b4:3b:b9:13:dd:9f:cb:3f:9b:f2:e6:a4:f0:
75:20:71:b0:77:d1:4c:43:fa:b3:a1:a9:a1:be:0c:
b0:0d:bb:b5:6d:34:2c:93:af:9c:55:88:08:a2:bf:
07:c3:fa:ee:c0:45:ff:d7:c4:91:79:45:c5:24:54:
8b:c1:9c:b4:26:24:b4:ca:f9:bd:d3:98:4f:7a:1f:
a5:d4:76:df:a9:21:4b:fa:46:21:58:c8:b8:e3:3e:
ed:d0:78:4f:2d:12:2a:77:35:bf:96:49:3e:2e:92:
03:2b:08:c4:dd:d2:81:2f:47:47:26:a4:8b:78:8f:
f0:ca:0b:c1:0c:df:f2:6a:2f:10:c6:4e:7c:44:23:
23:4a:5d:d8:57:7b:61:a8:c6:68:73:8f:a3:75:ed:
fc:ff:fc:18:2e:31:25:dd:b1:e8:81:7d:7c:4f:e9:
19:6a:eb:2c:37:4d:88:b1:14:a5:db:56:61:5a:b1:
a2:5c:31:19:dc:b4:9d:2b:3a:7c:86:9b:51:cd:20:
10:e2:f1:3e:6f:5a:4f:4b:ec:93:a5:85:07:5d:28:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8A:31:EE:CB:5A:73:49:DB:19:F0:AB:14:6F:E7:0F:52:7F:F4:A1
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:19:d8:c6:ec:6e:07:a4:ba:1c:9e:a3:e6:75:24:8d:fe:10:
8f:b9:24:77:d4:2b:1c:84:9d:3c:47:be:e7:8a:db:b2:67:f0:
0d:bc:27:20:7d:8a:d9:7f:6d:7a:c3:f2:a0:37:3f:95:25:12:
df:f9:e4:7f:25:a3:ad:b8:e6:00:5a:6e:56:6e:e7:cd:4b:9e:
99:5a:ec:d6:7b:a8:b5:bf:29:96:d7:35:56:83:f1:9a:31:25:
dc:ed:40:e9:aa:97:5a:8b:fe:3c:97:51:b6:9f:8d:51:a7:1a:
3c:45:85:e0:4f:31:a1:cc:bd:c3:8e:07:65:0a:21:01:b2:55:
4b:91:3c:48:9a:0c:57:39:ed:46:c8:92:f2:de:b9:3c:76:54:
56:fd:8f:18:67:31:c0:a9:84:1c:5d:ef:2a:6c:59:20:e5:20:
87:ca:11:4e:bb:8e:f7:51:d7:99:6c:e5:0b:67:e7:04:e2:82:
5b:75:d2:3c:a5:5f:9a:2f:2b:57:00:21:b5:b0:9a:b7:e2:92:
b9:b2:03:4e:d6:28:a5:a9:5e:33:e4:56:74:b9:c3:cc:33:de:
09:8c:57:70:fc:74:8d:3c:85:0a:82:db:96:df:c0:4f:f0:eb:
6f:22:08:1b:39:79:1f:e1:b8:ba:b3:f2:79:2b:0a:fc:f1:38:
a3:d1:51:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOp3Q1gxFugZ1ke3YswjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTI5Y2M1MTgwMTBmNzY3NjM1M2ZmMjk2NjQ0ZDliZDRh
MzU1Y2IwHhcNMjYwMzI1MjMwMDQ2WhcNMjYwMzI2MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZThhMzFlZWNiNWE3MzQ5ZGIxOWYwYWIxNDZmZTcwZjUyN2ZmNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqoP0cAH1BxfXMHJycwjyGWQq/l4
qvyoukxLUxkLKfAq9LXU4owE4BrRAD5IcrQ7uRPdn8s/m/LmpPB1IHGwd9FMQ/qz
oamhvgywDbu1bTQsk6+cVYgIor8Hw/ruwEX/18SReUXFJFSLwZy0JiS0yvm905hP
eh+l1HbfqSFL+kYhWMi44z7t0HhPLRIqdzW/lkk+LpIDKwjE3dKBL0dHJqSLeI/w
ygvBDN/yai8Qxk58RCMjSl3YV3thqMZoc4+jde38//wYLjEl3bHogX18T+kZauss
N02IsRSl21ZhWrGiXDEZ3LSdKzp8hptRzSAQ4vE+b1pPS+yTpYUHXSiImQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6KMe7LWnNJ2xnwqxRv5w9Sf/ShMB8GA1UdIwQY
MBaAFMKinMUYAQ92djU/8pZkTZvUo1XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOWVkZTEtYmZlMS00NzJlLTg3NGMt
N2MxZjBjZGZjZTc3LzEvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zOWVkZTEtYmZlMS00NzJlLTg3NGMtN2MxZjBjZGZjZTc3
LzEvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxnYxuxu
B6S6HJ6j5nUkjf4Qj7kkd9QrHISdPEe+54rbsmfwDbwnIH2K2X9tesPyoDc/lSUS
3/nkfyWjrbjmAFpuVm7nzUuemVrs1nuotb8pltc1VoPxmjEl3O1A6aqXWov+PJdR
tp+NUacaPEWF4E8xocy9w44HZQohAbJVS5E8SJoMVzntRsiS8t65PHZUVv2PGGcx
wKmEHF3vKmxZIOUgh8oRTruO91HXmWzlC2fnBOKCW3XSPKVfmi8rVwAhtbCat+KS
ubIDTtYopaleM+RWdLnDzDPeCYxXcPx0jTyFCoLblt/AT/DrbyIIGzl5H+G4urPy
eSsK/PE4o9FRPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:23 2026 by rpki-client