Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: Q3wca+Wy/dj/0V+kgaR1kTUqk+te43tuSN47SGl2D64=
Subject key identifier: A4:15:7A:8D:99:39:45:C9:5D:7F:F4:DF:23:C0:10:22:7E:EF:FD:E3
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 019D265FAE65CBE04DAECF07A9DA6F5D4DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0EB2
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: bsmu6EXsbatpBAoWe2d8r+P+tUHELio1B1crImB/nGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ae:65:cb:e0:4d:ae:cf:07:a9:da:6f:5d:4d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=a4157a8d993945c95d7ff4df23c010227eeffde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:73:d2:8a:46:dd:b5:25:19:3e:a2:06:be:
9a:b2:22:c4:05:a6:48:b2:a4:8e:e0:4e:c8:f0:59:
1b:e6:d3:cf:ee:e7:99:7d:bf:6c:e5:c5:87:f6:d1:
40:e3:f0:e3:71:e0:a4:f3:18:90:4b:ca:55:3c:64:
62:a9:4e:4f:56:0f:cd:23:1c:bb:e3:f8:09:03:e3:
fa:09:c1:c0:28:1e:eb:16:35:cd:52:30:71:33:6e:
c7:9d:5f:ee:89:47:a6:e6:eb:65:20:88:13:11:69:
c7:23:51:f8:db:b1:6e:80:96:13:54:42:8a:49:8e:
36:b4:9a:1d:c9:bf:6d:ab:86:70:47:69:08:0a:a2:
e1:a8:88:87:9d:bf:e8:dc:ef:b0:7c:fa:b2:96:11:
27:53:9e:20:0a:f2:9c:cc:48:33:56:6c:de:8e:a8:
08:02:63:b7:6a:57:e1:3a:cb:d8:95:a6:78:ea:01:
1d:c7:44:08:99:68:1e:3e:4c:3b:85:5c:0c:5a:14:
2c:88:0c:09:e6:af:b7:08:5b:03:f3:9e:dc:c3:9a:
ad:89:8c:5f:1d:3f:f5:6a:d6:e4:a0:df:f1:76:08:
d6:ef:56:fa:1b:12:71:8f:25:7d:32:0f:03:65:34:
9a:62:ee:e3:b3:8c:c5:1e:f5:3d:ac:01:db:f0:08:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:15:7A:8D:99:39:45:C9:5D:7F:F4:DF:23:C0:10:22:7E:EF:FD:E3
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e6:9b:ff:9d:77:90:2e:cd:27:a2:5e:85:26:5e:cf:34:a6:
d2:2e:59:35:b3:7d:42:6a:36:0d:13:e9:db:5c:a0:23:4a:19:
f0:30:26:ed:bf:cd:1b:fc:4f:dd:0a:24:3f:d1:7d:31:86:79:
dc:09:e8:f0:b3:06:a0:db:c6:ba:ab:35:3b:4d:68:a8:f6:3a:
88:50:04:3c:72:41:a4:e5:51:ee:6b:f0:c8:e0:e3:22:4f:6e:
a3:c6:1f:e5:c3:77:89:41:4f:c3:91:3a:05:77:46:fb:7c:8e:
cf:79:4c:80:93:7b:d4:95:32:d6:68:b5:76:25:21:5b:50:c3:
8f:ce:d5:81:3b:98:15:9a:a9:03:aa:75:c9:61:3a:10:7d:5d:
85:29:49:78:7d:39:96:5f:f0:cd:b0:60:98:e7:83:c9:75:82:
b0:20:2f:b0:75:67:f6:a6:8e:40:7b:89:56:b1:cd:ca:0a:51:
6e:f4:a5:4f:5d:20:45:d7:6d:fc:f5:03:b2:ef:d6:e7:57:15:
ca:bb:ff:b2:d3:4e:a1:69:22:e2:c7:eb:a8:3d:8a:63:6d:1c:
3f:4e:75:2d:55:38:f3:aa:41:bd:6e:41:fd:b1:00:a3:4d:a0:
94:67:8d:83:a4:3e:b1:99:d8:65:c1:ef:43:95:38:83:59:a4:
03:ec:86:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX65ly+BNrs8HqdpvXU36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNjhkOWY1MmJjNzk1MmRkZjBhN2RmODFhMTFlZTE0M2Yz
MzI3MGEwHhcNMjYwMzI1MTkwMTM3WhcNMjYwMzI2MTkwMTM3WjAzMTEwLwYDVQQD
EyhhNDE1N2E4ZDk5Mzk0NWM5NWQ3ZmY0ZGYyM2MwMTAyMjdlZWZmZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIVz0opG3bUlGT6iBr6asiLEBaZI
sqSO4E7I8Fkb5tPP7ueZfb9s5cWH9tFA4/DjceCk8xiQS8pVPGRiqU5PVg/NIxy7
4/gJA+P6CcHAKB7rFjXNUjBxM27HnV/uiUem5utlIIgTEWnHI1H427FugJYTVEKK
SY42tJodyb9tq4ZwR2kICqLhqIiHnb/o3O+wfPqylhEnU54gCvKczEgzVmzejqgI
AmO3alfhOsvYlaZ46gEdx0QImWgePkw7hVwMWhQsiAwJ5q+3CFsD857cw5qtiYxf
HT/1atbkoN/xdgjW71b6GxJxjyV9Mg8DZTSaYu7js4zFHvU9rAHb8AhE1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQVeo2ZOUXJXX/03yPAECJ+7/3jMB8GA1UdIwQY
MBaAFP1o2fUrx5Ut3wp9+BoR7hQ/MycKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMmI3MDktYjg0My00MjA1LWJhMzEt
ZDUwNDVjNTAxNzA3LzEvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lMmI3MDktYjg0My00MjA1LWJhMzEtZDUwNDVjNTAxNzA3
LzEvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeab/513
kC7NJ6JehSZezzSm0i5ZNbN9Qmo2DRPp21ygI0oZ8DAm7b/NG/xP3QokP9F9MYZ5
3Ano8LMGoNvGuqs1O01oqPY6iFAEPHJBpOVR7mvwyODjIk9uo8Yf5cN3iUFPw5E6
BXdG+3yOz3lMgJN71JUy1mi1diUhW1DDj87VgTuYFZqpA6p1yWE6EH1dhSlJeH05
ll/wzbBgmOeDyXWCsCAvsHVn9qaOQHuJVrHNygpRbvSlT10gRddt/PUDsu/W51cV
yrv/stNOoWki4sfrqD2KY20cP051LVU486pBvW5B/bEAo02glGeNg6Q+sZnYZcHv
Q5U4g1mkA+yGag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:37 2026 by rpki-client