Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
File: wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json)
Hash identifier: 6t9HQIMDOM53yCPzVSRBc/NXIJTeNlMcX/ojDj+JnOw=
Subject key identifier: E5:6C:A8:D3:71:B5:89:ED:DC:44:59:82:81:98:67:E7:06:74:74:4C
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial: 019D25BACD5CB4F18F0FE3FFC067935E7062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 16:01:32 +0000
Manifest this update: Wed 25 Mar 2026 16:01:32 +0000
Manifest next update: Thu 26 Mar 2026 16:01:32 +0000
Files and hashes: 1: GNET8erU57mgyDh7ImpYc6fkvwM.roa (hash: DXXzixavqJF8Gp9K7MXm73N5IWVM9uhvEAJhF4isZ+w=)
2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: Ik8t8+g/myMa4cr2ZsjzobOmmsz3qLcgsn449kUkPBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:cd:5c:b4:f1:8f:0f:e3:ff:c0:67:93:5e:70:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Validity
Not Before: Mar 25 16:01:32 2026 GMT
Not After : Mar 26 16:01:32 2026 GMT
Subject: CN=e56ca8d371b589eddc445982819867e70674744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:c4:88:30:d3:fb:be:99:f2:f9:23:34:c3:
24:8a:6f:88:e2:52:01:be:fe:46:28:c4:47:72:98:
3c:a8:e3:5a:72:61:33:24:c0:2d:03:26:82:11:d8:
c0:8b:f1:66:fb:be:10:e6:66:c5:1e:e6:0e:91:15:
09:60:1f:2f:29:d8:be:f8:ad:b0:cf:1b:76:79:1d:
42:47:0a:2f:d3:ce:86:07:c0:fc:e1:34:d8:31:72:
03:cb:cd:27:30:ed:0a:8d:5d:a7:e1:35:52:6d:93:
09:0a:e9:56:b3:0d:5b:82:35:73:33:94:c5:da:8d:
c1:e2:e7:e5:f5:a4:00:4a:da:57:bf:dd:95:50:b3:
96:9c:9b:83:b6:7c:1f:be:9e:93:64:53:d0:5c:01:
4a:7c:92:55:c6:be:bb:d3:0f:b8:2e:be:ad:b7:1e:
21:0f:e2:e7:49:09:7b:05:f3:02:7b:55:ee:65:32:
36:0b:e4:5c:78:fb:aa:cc:f9:04:e5:7e:83:a6:cf:
e0:7a:a4:aa:11:fa:d9:f9:1c:3c:42:b3:f5:34:ef:
c8:00:b6:21:96:ac:ce:ab:41:5d:19:8e:f6:b0:da:
5b:b7:40:16:8f:0a:38:09:c8:1c:28:fc:ce:c4:84:
8b:5f:5f:c5:a1:51:76:50:d3:75:d5:d3:89:e9:02:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:A8:D3:71:B5:89:ED:DC:44:59:82:81:98:67:E7:06:74:74:4C
X509v3 Authority Key Identifier:
keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4c:97:b1:98:a3:bb:d9:e9:be:80:61:ce:3d:cb:07:eb:77:
6f:81:b5:69:c4:8e:cf:56:14:c4:0a:17:18:d3:c8:2f:db:d8:
b9:0d:f8:a2:01:75:a3:50:ec:22:21:49:9c:86:b4:c1:16:59:
82:55:15:24:b6:1a:e8:ca:15:33:a8:8b:0a:5f:a8:c9:72:a5:
ec:c5:6e:1c:1d:ee:09:fd:bc:83:55:c9:c6:05:94:5f:4f:5a:
61:d8:93:ee:5b:49:83:d5:07:78:c1:ba:42:e3:06:e2:6f:5c:
f2:95:2d:a4:37:02:75:21:7b:a6:54:07:a4:f6:a8:39:29:dd:
5e:95:cb:b4:03:16:f6:0c:03:90:32:99:4a:59:5b:d7:bc:59:
38:06:9c:51:44:bf:d0:d0:b6:6d:43:91:9a:63:e1:3f:ee:b3:
c8:b3:e9:43:41:04:5e:6f:d5:38:6a:b7:81:76:43:b9:53:5d:
3e:ed:ee:7d:ef:59:97:03:2e:00:82:33:80:80:1d:a9:39:7a:
7f:1c:dd:6d:f8:0e:a9:ba:8f:81:cf:74:aa:f2:00:75:f1:45:
70:0d:1a:e7:f6:0a:9b:e8:42:92:6a:db:d6:de:b1:28:9e:41:
4f:87:7c:d4:72:52:e3:d6:18:65:86:20:75:03:57:c0:32:a7:
e6:bf:9c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lus1ctPGPD+P/wGeTXnBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZjVmZDMwMjMwNTUyNDlmMjEzZDE1Y2JhMDAwY2EwMjZi
YjZmYTMwHhcNMjYwMzI1MTYwMTMyWhcNMjYwMzI2MTYwMTMyWjAzMTEwLwYDVQQD
EyhlNTZjYThkMzcxYjU4OWVkZGM0NDU5ODI4MTk4NjdlNzA2NzQ3NDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKTEiDDT+76Z8vkjNMMkim+I4lIB
vv5GKMRHcpg8qONacmEzJMAtAyaCEdjAi/Fm+74Q5mbFHuYOkRUJYB8vKdi++K2w
zxt2eR1CRwov086GB8D84TTYMXIDy80nMO0KjV2n4TVSbZMJCulWsw1bgjVzM5TF
2o3B4ufl9aQAStpXv92VULOWnJuDtnwfvp6TZFPQXAFKfJJVxr670w+4Lr6ttx4h
D+LnSQl7BfMCe1XuZTI2C+RcePuqzPkE5X6Dps/geqSqEfrZ+Rw8QrP1NO/IALYh
lqzOq0FdGY72sNpbt0AWjwo4CcgcKPzOxISLX1/FoVF2UNN11dOJ6QLk6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVsqNNxtYnt3ERZgoGYZ+cGdHRMMB8GA1UdIwQY
MBaAFML1/TAjBVJJ8hPRXLoADKAmu2+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jYzAyZTEtOGIzNi00MmEzLWI3NTYt
YmUzNDg1NzA2YTdmLzEvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jYzAyZTEtOGIzNi00MmEzLWI3NTYtYmUzNDg1NzA2YTdm
LzEvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkyXsZij
u9npvoBhzj3LB+t3b4G1acSOz1YUxAoXGNPIL9vYuQ34ogF1o1DsIiFJnIa0wRZZ
glUVJLYa6MoVM6iLCl+oyXKl7MVuHB3uCf28g1XJxgWUX09aYdiT7ltJg9UHeMG6
QuMG4m9c8pUtpDcCdSF7plQHpPaoOSndXpXLtAMW9gwDkDKZSllb17xZOAacUUS/
0NC2bUORmmPhP+6zyLPpQ0EEXm/VOGq3gXZDuVNdPu3ufe9ZlwMuAIIzgIAdqTl6
fxzdbfgOqbqPgc90qvIAdfFFcA0a5/YKm+hCkmrb1t6xKJ5BT4d81HJS49YYZYYg
dQNXwDKn5r+cdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:15 2026 by rpki-client