Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: cQtR4H/o8hu6rtr9U4rH2loMbXSXPcccbOOVJhy5SmY=
Subject key identifier: E0:BD:60:2B:91:7F:1E:62:6D:62:A5:81:3D:A2:65:AE:42:03:03:B6
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 019D29CDEF6EE6EDF6C980C4189AA189E081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 1027
Signing time: Thu 26 Mar 2026 11:00:55 +0000
Manifest this update: Thu 26 Mar 2026 11:00:55 +0000
Manifest next update: Fri 27 Mar 2026 11:00:55 +0000
Files and hashes: 1: G7RZoTOwTcKPekHKI4U7pubMxTo.roa (hash: hkFq7H3atVzzygJHfrNdoE+NINNolqqepS5P7kn64YA=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: ioOp3tjuvAJg8zCOWvPKylJHw9s+FUbZ8V56P/WIIEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ef:6e:e6:ed:f6:c9:80:c4:18:9a:a1:89:e0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Mar 26 11:00:55 2026 GMT
Not After : Mar 27 11:00:55 2026 GMT
Subject: CN=e0bd602b917f1e626d62a5813da265ae420303b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:5d:43:97:36:54:b1:db:e4:14:72:cb:c8:
43:1e:da:fe:1f:55:6c:8e:1d:6c:43:bf:af:57:fc:
86:32:cc:7c:bb:e9:41:db:1e:c3:24:a3:4a:06:5b:
3f:dc:4e:23:77:92:db:d8:d0:77:94:36:31:05:fb:
76:d1:48:2d:e1:ba:cd:3f:51:b5:7a:f7:d1:24:98:
b5:54:3e:5e:30:a3:4e:e1:e9:28:d3:33:4c:ef:47:
e0:28:ca:78:d5:69:82:d7:66:f7:f3:8b:e5:9b:94:
73:d2:41:c1:dd:f6:38:b5:9a:08:21:93:bc:bd:c3:
4e:f7:55:03:c4:25:5e:fe:06:e3:08:64:b9:f0:f2:
79:b0:c3:71:be:33:5a:2b:ce:3d:b3:ea:53:6b:ff:
ee:ab:1c:16:88:93:d6:ba:12:16:eb:b6:73:88:37:
76:5e:1f:02:f3:41:b1:b1:1c:34:c4:93:d1:09:db:
06:97:a9:f2:2f:fe:09:f8:26:11:c0:e6:37:9d:85:
b8:88:1d:06:a1:aa:17:69:d8:40:55:07:4b:05:93:
da:4f:69:f4:9c:26:79:d3:a0:63:c7:27:3a:45:ab:
af:2e:73:bc:58:44:71:ef:29:b3:d5:94:9b:d1:57:
0f:fd:ca:49:e7:aa:c5:cb:da:fa:49:35:94:64:93:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:60:2B:91:7F:1E:62:6D:62:A5:81:3D:A2:65:AE:42:03:03:B6
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:7b:72:4e:3e:3e:79:21:82:c2:d1:f7:f4:eb:f6:d9:d6:
9a:38:14:52:57:ae:b8:e2:81:c9:95:1d:25:b3:64:70:cc:46:
f8:e8:4d:0b:db:98:69:12:5f:60:33:ba:2d:0d:65:94:b2:e0:
92:38:e4:10:83:44:cb:b1:55:53:2b:32:b1:a1:6f:cd:9d:5c:
e5:af:62:9e:c1:96:0a:98:b3:d0:4c:d0:40:98:8a:12:9b:2c:
79:67:8a:b8:3c:b5:5e:a4:de:54:52:7d:b3:94:80:01:c1:93:
ff:55:46:98:0d:45:a4:c0:43:36:f4:f8:2e:20:2b:9a:c8:95:
b6:0c:33:a3:f8:dd:d8:a1:42:01:bd:14:0a:ba:50:1d:e3:05:
06:8e:af:cd:a7:ac:70:69:b5:c9:ae:86:24:e9:58:fe:07:cf:
1b:e4:19:b1:21:3b:bc:6b:35:c2:75:f8:bf:ff:e0:15:5b:bd:
16:44:80:9f:01:be:a5:97:e4:23:ab:3a:da:8d:1f:95:67:aa:
28:13:25:32:73:60:39:59:4f:82:8d:bb:c2:19:30:9d:67:bd:
bc:03:60:52:ca:d4:8a:58:fd:f9:50:b9:fe:a3:6e:01:ac:9b:
f2:6f:c6:c2:ee:98:7b:3f:da:03:8b:81:55:50:ac:5c:e3:33:
87:61:bc:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pze9u5u32yYDEGJqhieCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGM0Zjk2YWE1YTAyY2FkYTgzZDRiODhkNDllNmE3M2Fi
ZDI1ZjAwHhcNMjYwMzI2MTEwMDU1WhcNMjYwMzI3MTEwMDU1WjAzMTEwLwYDVQQD
EyhlMGJkNjAyYjkxN2YxZTYyNmQ2MmE1ODEzZGEyNjVhZTQyMDMwM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdldQ5c2VLHb5BRyy8hDHtr+H1Vs
jh1sQ7+vV/yGMsx8u+lB2x7DJKNKBls/3E4jd5Lb2NB3lDYxBft20Ugt4brNP1G1
evfRJJi1VD5eMKNO4eko0zNM70fgKMp41WmC12b384vlm5Rz0kHB3fY4tZoIIZO8
vcNO91UDxCVe/gbjCGS58PJ5sMNxvjNaK849s+pTa//uqxwWiJPWuhIW67ZziDd2
Xh8C80GxsRw0xJPRCdsGl6nyL/4J+CYRwOY3nYW4iB0GoaoXadhAVQdLBZPaT2n0
nCZ506Bjxyc6RauvLnO8WERx7ymz1ZSb0VcP/cpJ56rFy9r6STWUZJODPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC9YCuRfx5ibWKlgT2iZa5CAwO2MB8GA1UdIwQY
MBaAFFpMT5aqWgLK2oPUuI1J5qc6vSXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMt
OGE5MjEwOTk4OWVmLzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMtOGE5MjEwOTk4OWVm
LzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYJ7ck4+
PnkhgsLR9/Tr9tnWmjgUUleuuOKByZUdJbNkcMxG+OhNC9uYaRJfYDO6LQ1llLLg
kjjkEINEy7FVUysysaFvzZ1c5a9insGWCpiz0EzQQJiKEpsseWeKuDy1XqTeVFJ9
s5SAAcGT/1VGmA1FpMBDNvT4LiArmsiVtgwzo/jd2KFCAb0UCrpQHeMFBo6vzaes
cGm1ya6GJOlY/gfPG+QZsSE7vGs1wnX4v//gFVu9FkSAnwG+pZfkI6s62o0flWeq
KBMlMnNgOVlPgo27whkwnWe9vANgUsrUilj9+VC5/qNuAayb8m/Gwu6Yez/aA4uB
VVCsXOMzh2G8ew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:20 2026 by rpki-client