Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier: L5nxIlVNxlJPY1C3dNRJHO05Df+pYbXi81dVL66+H30=
Subject key identifier: 12:35:39:02:BF:02:57:F0:FF:9A:B1:44:20:2C:2A:DE:E6:3A:E4:CD
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial: 019D273AD6AF0D7DBB053941F092FF138C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number: 07A8
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: haqc/3Uw2bN3nDjBo2d6u2DYuXXfmBpvpmK/RYbo7l4=)
2: uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa (hash: n7rmT7eWhWaDz6MLyzDuXY6l9WnAuvoKMn9XsT5ZVWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d6:af:0d:7d:bb:05:39:41:f0:92:ff:13:8c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=12353902bf0257f0ff9ab144202c2adee63ae4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:96:d0:8e:e7:2d:00:fb:3a:53:28:25:5f:
bf:4f:d0:08:cd:ef:c2:73:3c:5c:f9:51:8e:6e:ee:
bb:05:01:7f:86:5e:04:53:f3:1e:36:f5:91:29:c8:
4f:db:47:15:35:19:7c:8d:57:92:4f:ea:35:ba:05:
38:21:15:9e:a5:b8:d9:3d:f4:1a:23:42:00:89:68:
b8:8c:99:83:ca:1c:fa:b7:28:08:23:36:59:a7:a6:
c1:43:0c:27:c4:21:e0:72:04:09:21:a8:36:27:d2:
86:ba:35:1a:f8:3d:6c:f7:5f:78:65:5e:c7:19:b0:
6e:13:00:da:3a:a0:b1:f0:99:2f:f6:0e:00:d7:76:
3a:f0:2f:2e:b2:0c:e2:8e:f4:1e:0c:6a:d2:f8:92:
61:bb:1b:47:5d:24:72:68:7e:68:d5:94:55:42:26:
68:3b:53:c1:b6:98:45:c9:f2:8b:91:29:16:d1:a5:
f2:4a:3f:70:e2:51:1c:84:a4:79:91:72:ea:f4:07:
d8:c9:8e:c8:75:f4:6a:45:86:5e:36:aa:e0:5d:b2:
6b:00:24:f3:ef:b2:64:af:3e:00:2a:ef:d1:8a:aa:
93:f4:ee:95:f8:9e:1f:09:84:73:26:df:ee:9b:ae:
f1:a4:af:f1:44:07:53:6f:92:0f:d3:e9:91:d3:a5:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:39:02:BF:02:57:F0:FF:9A:B1:44:20:2C:2A:DE:E6:3A:E4:CD
X509v3 Authority Key Identifier:
keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2d:5e:97:69:54:d3:a8:94:13:e7:6a:82:77:6d:9e:5a:7b:
1a:59:14:9a:d0:5a:25:08:be:12:21:32:4a:97:1e:6a:32:47:
96:af:2d:c1:0c:87:ad:b0:8d:84:6b:6b:7a:d2:6c:d7:ef:f3:
a1:86:c6:f8:35:49:0f:b3:84:f6:37:59:87:13:43:de:1b:1e:
bb:2f:73:29:71:f1:1a:db:3b:cc:6b:5c:c3:41:3b:d5:91:43:
d9:96:8d:ad:63:cd:43:99:64:12:31:58:a2:c4:04:87:7e:a8:
66:3d:0f:55:7e:b6:9e:65:70:85:f9:f5:ea:da:c8:29:5e:e5:
e1:fb:00:83:08:54:96:1b:f6:aa:6a:59:13:e9:18:c4:e7:b6:
ca:2a:d5:65:ac:1c:e6:73:3f:38:a2:26:6d:48:4a:70:a5:39:
48:12:57:53:26:97:d6:42:ba:f7:ee:c3:f7:bc:42:e9:f9:2e:
f9:ef:24:d2:ab:a3:01:f5:12:ce:20:f5:2a:10:ad:69:cb:a2:
86:06:03:94:dd:9b:61:37:e5:b5:df:f4:ab:81:c4:3f:6e:7a:
c4:94:e1:9d:45:2a:cb:bc:93:7a:c2:3a:00:0d:a1:85:a3:47:
74:83:0a:4d:9e:ca:c0:ac:27:da:99:14:3f:56:7d:b3:16:93:
49:ac:18:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtavDX27BTlB8JL/E4xiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YmM1MmIxNTA2OWMxYzQ3YjU0ZTk3YjlmNTY5NGI3NTVi
NWNlYjEwHhcNMjYwMzI1MjMwMTAwWhcNMjYwMzI2MjMwMTAwWjAzMTEwLwYDVQQD
EygxMjM1MzkwMmJmMDI1N2YwZmY5YWIxNDQyMDJjMmFkZWU2M2FlNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K6W0I7nLQD7OlMoJV+/T9AIze/C
czxc+VGObu67BQF/hl4EU/MeNvWRKchP20cVNRl8jVeST+o1ugU4IRWepbjZPfQa
I0IAiWi4jJmDyhz6tygIIzZZp6bBQwwnxCHgcgQJIag2J9KGujUa+D1s9194ZV7H
GbBuEwDaOqCx8Jkv9g4A13Y68C8usgzijvQeDGrS+JJhuxtHXSRyaH5o1ZRVQiZo
O1PBtphFyfKLkSkW0aXySj9w4lEchKR5kXLq9AfYyY7IdfRqRYZeNqrgXbJrACTz
77Jkrz4AKu/RiqqT9O6V+J4fCYRzJt/um67xpK/xRAdTb5IP0+mR06Xx0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBI1OQK/Alfw/5qxRCAsKt7mOuTNMB8GA1UdIwQY
MBaAFFm8UrFQacHEe1Tpe59WlLdVtc6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEt
MmMxMGIxOWQ0YzJhLzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEtMmMxMGIxOWQ0YzJh
LzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS1el2lU
06iUE+dqgndtnlp7GlkUmtBaJQi+EiEySpceajJHlq8twQyHrbCNhGtretJs1+/z
oYbG+DVJD7OE9jdZhxND3hseuy9zKXHxGts7zGtcw0E71ZFD2ZaNrWPNQ5lkEjFY
osQEh36oZj0PVX62nmVwhfn16trIKV7l4fsAgwhUlhv2qmpZE+kYxOe2yirVZawc
5nM/OKImbUhKcKU5SBJXUyaX1kK69+7D97xC6fku+e8k0qujAfUSziD1KhCtacui
hgYDlN2bYTfltd/0q4HEP256xJThnUUqy7yTesI6AA2hhaNHdIMKTZ7KwKwn2pkU
P1Z9sxaTSawY/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:14 2026 by rpki-client