Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
File: wy7UX86pxxu-9WpTJcKXyvrpHm4.mft (raw, json)
Hash identifier: D5CRcjo6PKJJbaEzx1p7DCQ/5WGxRxlfB3/Qu7wcJwE=
Subject key identifier: 8E:69:BE:20:40:D1:9A:29:8C:65:FC:1E:91:78:43:75:7A:E1:E0:CF
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial: 019D28BB866B680FE2320A76991F486E7707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: k5xccdAgWXUIBYQzUy_Y_5kVFBM.roa (hash: G3OJEnXc7wLE0YQ5zBZyEB+XHB1m/x2BVeVnHOMikX8=)
2: wy7UX86pxxu-9WpTJcKXyvrpHm4.crl (hash: tWNhNBVfclq2Mna6GEO/EjrLxwufcCPQk8N9VRQGlPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:86:6b:68:0f:e2:32:0a:76:99:1f:48:6e:77:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=8e69be2040d19a298c65fc1e917843757ae1e0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:45:d7:73:dd:3b:48:aa:5e:47:04:83:b2:
dc:a2:1d:00:9a:e4:09:fd:ad:8e:38:cc:7d:e2:ca:
7c:f1:a8:37:4b:ef:e2:17:4f:5f:7c:af:50:69:07:
c4:d2:29:40:db:62:df:30:8c:23:30:72:7e:f4:10:
3b:45:b7:a6:d9:b5:f3:20:5d:70:24:77:09:e5:da:
ba:00:61:a9:a1:88:c3:e6:84:f6:45:ae:69:10:43:
b2:6e:c0:62:a2:0e:eb:95:b1:93:22:64:62:40:a4:
98:d8:c6:90:38:46:e2:99:9b:51:9b:54:e9:75:82:
34:90:50:0f:6b:3c:3c:89:5f:a2:7b:22:25:87:8a:
7a:a0:96:78:30:6e:1a:69:b9:04:2f:6e:c3:f9:bc:
31:2c:82:46:69:b6:7e:8f:95:f5:c6:25:a4:2e:34:
05:aa:20:9c:37:74:50:53:d8:d9:c2:66:04:7f:b2:
a7:6c:2c:2c:0b:ab:fc:6b:4e:24:6a:78:b8:bd:1a:
53:1c:be:4e:52:51:be:a4:bd:bc:95:ab:95:59:cb:
de:08:98:68:f6:5e:2e:21:42:a5:9a:74:58:01:c8:
c2:41:b9:24:a1:26:d9:54:86:ac:62:54:ec:b8:95:
35:0f:5b:6a:dd:7e:ad:e5:2c:95:f7:0a:5a:76:ad:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:69:BE:20:40:D1:9A:29:8C:65:FC:1E:91:78:43:75:7A:E1:E0:CF
X509v3 Authority Key Identifier:
keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e7:7e:d7:7f:08:f0:d0:a4:ef:e0:2c:57:01:01:5b:cb:d3:
0f:e8:ac:57:35:e3:38:a9:2d:5e:32:22:21:9a:8c:f0:97:62:
e9:85:dc:53:ec:dc:3d:26:64:b7:ea:bb:f4:7b:d5:5c:ca:92:
24:88:b4:14:cd:a2:b4:6d:ef:dd:85:dc:a5:89:dc:cd:fa:f5:
9e:df:bb:60:a2:4a:85:d4:a5:2b:6b:56:27:b8:12:47:45:1e:
af:99:30:6f:93:d9:a3:0a:b8:40:15:4e:49:22:f6:30:1d:f2:
bb:7c:85:d4:28:a8:5a:ca:a0:33:ed:4f:1a:4c:a3:94:22:f5:
9a:4a:8f:e5:dd:28:4d:3c:21:44:6d:60:30:96:f3:e6:07:d0:
32:aa:cf:b6:a2:a1:9d:c6:d7:48:4d:ae:e2:64:57:e8:80:59:
6c:a7:5a:fc:47:ca:19:a0:f2:50:7a:57:af:54:9b:9a:8d:24:
ea:f1:7c:77:80:84:96:12:bc:b7:98:f8:82:e9:7f:79:84:34:
ff:90:43:d1:d7:6b:c5:50:1d:b2:fb:e5:e1:bf:02:ae:a3:72:
3f:96:25:46:ba:c4:27:75:16:a6:7f:e7:00:cd:6b:09:04:c4:
39:d8:b4:cf:50:94:04:b1:0c:2e:c0:12:77:8a:60:bd:f0:bb:
af:e8:09:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou4ZraA/iMgp2mR9IbncHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMmVkNDVmY2VhOWM3MWJiZWY1NmE1MzI1YzI5N2NhZmFl
OTFlNmUwHhcNMjYwMzI2MDYwMTExWhcNMjYwMzI3MDYwMTExWjAzMTEwLwYDVQQD
Eyg4ZTY5YmUyMDQwZDE5YTI5OGM2NWZjMWU5MTc4NDM3NTdhZTFlMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySRF13PdO0iqXkcEg7Lcoh0AmuQJ
/a2OOMx94sp88ag3S+/iF09ffK9QaQfE0ilA22LfMIwjMHJ+9BA7Rbem2bXzIF1w
JHcJ5dq6AGGpoYjD5oT2Ra5pEEOybsBiog7rlbGTImRiQKSY2MaQOEbimZtRm1Tp
dYI0kFAPazw8iV+ieyIlh4p6oJZ4MG4aabkEL27D+bwxLIJGabZ+j5X1xiWkLjQF
qiCcN3RQU9jZwmYEf7KnbCwsC6v8a04kani4vRpTHL5OUlG+pL28lauVWcveCJho
9l4uIUKlmnRYAcjCQbkkoSbZVIasYlTsuJU1D1tq3X6t5SyV9wpadq3V6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5pviBA0ZopjGX8HpF4Q3V64eDPMB8GA1UdIwQY
MBaAFMMu1F/OqccbvvVqUyXCl8r66R5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3k3VVg4NnB4eHUtOVdwVEpjS1h5dnJwSG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wYTZlY2ItYmJkZi00ZTk5LTk0YzMt
ODc3NDQ2ZTg4ZTQwLzEvd3k3VVg4NnB4eHUtOVdwVEpjS1h5dnJwSG00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wYTZlY2ItYmJkZi00ZTk5LTk0YzMtODc3NDQ2ZTg4ZTQw
LzEvd3k3VVg4NnB4eHUtOVdwVEpjS1h5dnJwSG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOd+138I
8NCk7+AsVwEBW8vTD+isVzXjOKktXjIiIZqM8Jdi6YXcU+zcPSZkt+q79HvVXMqS
JIi0FM2itG3v3YXcpYnczfr1nt+7YKJKhdSlK2tWJ7gSR0Uer5kwb5PZowq4QBVO
SSL2MB3yu3yF1CioWsqgM+1PGkyjlCL1mkqP5d0oTTwhRG1gMJbz5gfQMqrPtqKh
ncbXSE2u4mRX6IBZbKda/EfKGaDyUHpXr1Sbmo0k6vF8d4CElhK8t5j4gul/eYQ0
/5BD0ddrxVAdsvvl4b8CrqNyP5YlRrrEJ3UWpn/nAM1rCQTEOdi0z1CUBLEMLsAS
d4pgvfC7r+gJhA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:59:58 2026 by rpki-client