Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: wXzAkOicaPmENmsIknXVxXWHb8xm0/N1bZXN05pefa8=
Subject key identifier: B9:3E:51:0B:7A:76:B5:47:73:3C:52:1E:12:FE:BC:30:17:C2:23:9D
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 019D2772C7F41F453BB245A519C8598D1180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 0536
Signing time: Thu 26 Mar 2026 00:02:06 +0000
Manifest this update: Thu 26 Mar 2026 00:02:06 +0000
Manifest next update: Fri 27 Mar 2026 00:02:06 +0000
Files and hashes: 1: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: NuW5jIBg3h8dWiME0qDWnJ7SafSN8es2zBKxknkm+hc=)
2: sFO9X8d0Bx_2aIHVFCIHpaGqYP0.roa (hash: oq/KxEUUzKF1vMqboj5ZmQdOj47aimAfTePT45c7Ho8=)
3: t59DTwtpsezlr8EDU-BygwzxAls.roa (hash: x2nikxPQqGzwSgfTDKs6YhYnWV/ZCJ22eSxvnYU38CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c7:f4:1f:45:3b:b2:45:a5:19:c8:59:8d:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Mar 26 00:02:06 2026 GMT
Not After : Mar 27 00:02:06 2026 GMT
Subject: CN=b93e510b7a76b547733c521e12febc3017c2239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:32:42:83:2e:92:1e:dc:e7:fd:d2:33:b0:
de:11:d9:69:15:96:ab:0a:f1:7a:3e:c8:4a:06:96:
2e:0c:6f:1a:4a:e3:ed:e7:63:1c:36:e8:87:7b:74:
37:89:7e:99:39:dc:1d:f5:d9:d3:df:30:74:4d:68:
e7:68:ae:12:09:00:f6:90:72:b2:70:83:fa:a0:a0:
68:95:bb:2b:f7:dc:cb:ae:6b:c5:12:61:2e:18:29:
9e:ac:8b:b3:2f:2f:02:74:c3:4e:93:b5:4e:a7:0a:
68:ee:bb:69:6a:63:d5:ac:5d:9f:15:10:7c:fc:84:
fb:84:ed:eb:89:09:85:f7:97:aa:38:b1:d3:1a:8f:
17:49:e0:87:20:8c:2f:bf:99:5b:6f:73:60:35:12:
75:de:ba:f0:5b:80:12:af:64:d8:68:e6:b9:5b:0e:
e4:57:83:dd:d4:12:62:e9:e7:84:c2:87:7c:c6:f2:
9c:ed:ed:41:7c:38:89:5f:3e:3e:90:81:fb:12:ef:
4e:e4:13:c1:aa:c4:9e:7f:56:08:af:69:a4:db:ec:
0c:96:5f:a0:bb:68:33:ef:29:a6:ae:27:92:c2:af:
cf:3d:07:f0:8c:80:1b:c8:da:f3:d7:98:1a:cc:c7:
03:c9:a0:fd:7a:01:51:d9:4a:7b:93:27:1b:ac:f0:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3E:51:0B:7A:76:B5:47:73:3C:52:1E:12:FE:BC:30:17:C2:23:9D
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d2:54:3e:ae:60:11:4d:d1:7d:ef:ba:45:2c:3c:4e:c3:82:
6a:ee:a9:47:5b:27:31:08:21:18:46:fd:12:c9:08:46:5f:fc:
6a:2e:1a:a4:8a:10:36:e4:1f:97:29:33:da:27:fd:c3:4b:97:
5e:1d:55:83:d3:5b:20:34:3a:e8:f9:17:f3:76:3d:6e:ca:be:
67:f0:44:63:33:20:19:0a:d2:58:22:b3:4b:0f:0b:98:ed:ed:
63:fd:c5:0c:c5:62:75:f7:90:23:56:43:f5:ef:49:36:45:eb:
5f:0a:7f:c0:33:1d:3b:11:0d:fe:11:6e:3e:d7:af:3e:ef:16:
7f:05:05:be:98:c7:77:b7:66:0a:4e:54:9e:39:10:aa:b5:30:
df:25:c8:09:30:08:2a:c9:49:c0:42:c1:b1:7d:98:22:67:4a:
77:37:3e:6f:ea:26:29:c4:12:7b:d7:94:96:77:ce:c5:b3:7d:
2f:bc:41:e3:76:85:40:ee:63:b3:fe:03:22:c1:28:66:59:db:
d1:13:25:f3:92:ae:64:31:b3:d2:82:14:a7:16:94:af:47:de:
02:3d:16:a4:7d:ad:11:f3:ad:28:a0:fa:68:c7:f9:75:ef:ef:
89:5e:3d:93:21:bb:56:14:1b:93:85:83:0c:ba:09:ea:11:a4:
0e:2d:75:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsf0H0U7skWlGchZjRGAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYjJiYTlhYmY4MWQ2Y2Y4MDMzY2RjZGViYzhkZjhmN2Uy
MmMyOGMwHhcNMjYwMzI2MDAwMjA2WhcNMjYwMzI3MDAwMjA2WjAzMTEwLwYDVQQD
EyhiOTNlNTEwYjdhNzZiNTQ3NzMzYzUyMWUxMmZlYmMzMDE3YzIyMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0igyQoMukh7c5/3SM7DeEdlpFZar
CvF6PshKBpYuDG8aSuPt52McNuiHe3Q3iX6ZOdwd9dnT3zB0TWjnaK4SCQD2kHKy
cIP6oKBolbsr99zLrmvFEmEuGCmerIuzLy8CdMNOk7VOpwpo7rtpamPVrF2fFRB8
/IT7hO3riQmF95eqOLHTGo8XSeCHIIwvv5lbb3NgNRJ13rrwW4ASr2TYaOa5Ww7k
V4Pd1BJi6eeEwod8xvKc7e1BfDiJXz4+kIH7Eu9O5BPBqsSef1YIr2mk2+wMll+g
u2gz7ymmrieSwq/PPQfwjIAbyNrz15gazMcDyaD9egFR2Up7kycbrPCFeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLk+UQt6drVHczxSHhL+vDAXwiOdMB8GA1UdIwQY
MBaAFFqyupq/gdbPgDPNzevI349+IsKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hNjA4YzUtNDk2ZC00OTllLWFmNDEt
NmRmYmJkZTUyZGVhLzEvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hNjA4YzUtNDk2ZC00OTllLWFmNDEtNmRmYmJkZTUyZGVh
LzEvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdJUPq5g
EU3Rfe+6RSw8TsOCau6pR1snMQghGEb9EskIRl/8ai4apIoQNuQflykz2if9w0uX
Xh1Vg9NbIDQ66PkX83Y9bsq+Z/BEYzMgGQrSWCKzSw8LmO3tY/3FDMVidfeQI1ZD
9e9JNkXrXwp/wDMdOxEN/hFuPtevPu8WfwUFvpjHd7dmCk5UnjkQqrUw3yXICTAI
KslJwELBsX2YImdKdzc+b+omKcQSe9eUlnfOxbN9L7xB43aFQO5js/4DIsEoZlnb
0RMl85KuZDGz0oIUpxaUr0feAj0WpH2tEfOtKKD6aMf5de/viV49kyG7VhQbk4WD
DLoJ6hGkDi11aw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:54 2026 by rpki-client