Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: nK/Qai3Y5ipAC/VRWgZIGaQKdPg3TzuBfzqh8nmiQl0=
Subject key identifier: A3:97:2E:CC:D9:3C:64:E7:08:C8:A3:21:FC:63:58:48:93:70:1B:1D
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 019D28F2F6A1FD6842C51A04343A71818843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 10A7
Signing time: Thu 26 Mar 2026 07:01:43 +0000
Manifest this update: Thu 26 Mar 2026 07:01:43 +0000
Manifest next update: Fri 27 Mar 2026 07:01:43 +0000
Files and hashes: 1: Ka7alFqI87s4EdJtZyqE-NGPHhs.roa (hash: 3RMOWVJO1ZQcH4d2j0ueEWLJLM5MekEDToq5QKnUUrM=)
2: VQIQLar7HwcjhVGKE5MtajsCN6g.roa (hash: SY7ZBqxQfy17eB+jMKdcaxNzW/pWzNXUCVDqxS62ZG4=)
3: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: 0iO4Q91ER+pBPYHSScmzCUuYaUCll1Gy0ZuAlJIt7O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f6:a1:fd:68:42:c5:1a:04:34:3a:71:81:88:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Mar 26 07:01:43 2026 GMT
Not After : Mar 27 07:01:43 2026 GMT
Subject: CN=a3972eccd93c64e708c8a321fc63584893701b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:ce:8b:2e:60:f6:f7:d0:37:85:40:3b:72:
b8:54:09:53:65:12:3f:53:b7:13:27:eb:25:55:d5:
71:d1:ed:be:7e:8c:54:8b:e6:3c:13:fe:87:29:f0:
28:67:4b:55:ea:b6:95:07:4c:4e:c3:2b:0e:59:31:
ad:9d:6f:95:9c:75:93:22:b7:69:53:b9:75:ca:5f:
d2:50:39:a1:17:2c:c6:9e:b4:9a:71:bf:19:34:f0:
06:76:cc:8e:4e:de:f7:5e:c7:0c:e0:81:44:64:33:
13:66:e1:47:a6:7b:ed:db:5a:fd:9d:2f:60:15:bc:
31:0b:e1:9d:ae:04:07:fe:c5:d8:dc:c1:8d:b9:c5:
81:3e:b3:59:34:12:07:98:32:d6:80:44:7b:c9:7b:
b3:de:13:6b:2d:68:e9:b5:6b:58:8e:e7:86:54:83:
cb:a0:d3:70:0d:a9:fa:d8:0c:f5:8d:4d:7a:e3:de:
5c:e2:8c:97:cd:98:34:91:b1:ad:fc:7c:56:48:af:
3e:15:19:1e:a0:17:26:1f:95:10:3c:c5:6f:e9:0f:
fd:93:dc:13:96:0a:b2:0d:81:9b:0d:f1:b1:82:71:
69:87:93:06:91:7e:78:34:5a:d7:90:7f:c5:76:85:
e2:e6:68:48:e9:8f:66:a6:aa:1a:92:0b:e9:93:f8:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:97:2E:CC:D9:3C:64:E7:08:C8:A3:21:FC:63:58:48:93:70:1B:1D
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cc:0f:ee:99:f9:31:7f:e2:89:fe:93:9b:99:40:9a:77:7c:
cb:54:a9:63:ee:16:17:e8:c5:47:f0:4e:5b:b8:03:08:76:06:
7e:b3:e8:65:97:1c:3d:80:f9:5b:81:65:b7:62:9a:69:c0:66:
f2:ef:94:a0:82:08:21:fa:70:bc:e6:ba:4b:04:49:ed:f4:f1:
58:7a:4e:7d:0f:89:ca:0b:27:99:68:fa:a4:8d:b7:a1:ca:80:
6b:af:93:41:e7:90:f6:7f:69:00:07:e5:f8:d4:b9:81:23:6a:
7d:b2:2f:62:3d:22:52:c1:5d:81:d3:2e:0a:17:15:6e:8d:18:
85:8b:aa:88:85:01:a3:9b:17:51:e8:ac:1b:22:8b:71:43:7f:
13:fd:2a:a2:fb:7d:21:ec:af:f1:d4:60:d6:8a:f3:70:5a:54:
55:bf:1a:42:92:bb:45:8c:37:ec:c3:c4:76:2f:39:4b:d5:a4:
6e:cd:40:d1:d9:ae:47:4c:35:4f:c1:00:14:2c:0a:ee:f2:6a:
01:32:44:59:79:cf:d4:eb:0e:65:e1:b9:21:81:a7:d8:8a:88:
6f:e9:1b:d0:16:8a:4d:c6:17:5e:0e:66:50:38:13:3e:1d:ae:
52:29:69:69:44:94:4d:a6:c6:5a:19:6c:57:c8:9c:78:4f:c5:
38:ee:29:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8vah/WhCxRoENDpxgYhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDBjNDFmZGU5OTY1MWIxMzI5MDZmZjA2MDJiNDdiNTYw
N2E1YmUwHhcNMjYwMzI2MDcwMTQzWhcNMjYwMzI3MDcwMTQzWjAzMTEwLwYDVQQD
EyhhMzk3MmVjY2Q5M2M2NGU3MDhjOGEzMjFmYzYzNTg0ODkzNzAxYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3zOiy5g9vfQN4VAO3K4VAlTZRI/
U7cTJ+slVdVx0e2+foxUi+Y8E/6HKfAoZ0tV6raVB0xOwysOWTGtnW+VnHWTIrdp
U7l1yl/SUDmhFyzGnrSacb8ZNPAGdsyOTt73XscM4IFEZDMTZuFHpnvt21r9nS9g
FbwxC+GdrgQH/sXY3MGNucWBPrNZNBIHmDLWgER7yXuz3hNrLWjptWtYjueGVIPL
oNNwDan62Az1jU16495c4oyXzZg0kbGt/HxWSK8+FRkeoBcmH5UQPMVv6Q/9k9wT
lgqyDYGbDfGxgnFph5MGkX54NFrXkH/FdoXi5mhI6Y9mpqoakgvpk/jbGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOXLszZPGTnCMijIfxjWEiTcBsdMB8GA1UdIwQY
MBaAFFrQxB/emWUbEykG/wYCtHtWB6W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWIt
MzM1YTdlNDM4NGIxLzEvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWItMzM1YTdlNDM4NGIx
LzEvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMwP7pn5
MX/iif6Tm5lAmnd8y1SpY+4WF+jFR/BOW7gDCHYGfrPoZZccPYD5W4Flt2KaacBm
8u+UoIIIIfpwvOa6SwRJ7fTxWHpOfQ+JygsnmWj6pI23ocqAa6+TQeeQ9n9pAAfl
+NS5gSNqfbIvYj0iUsFdgdMuChcVbo0YhYuqiIUBo5sXUeisGyKLcUN/E/0qovt9
Ieyv8dRg1orzcFpUVb8aQpK7RYw37MPEdi85S9Wkbs1A0dmuR0w1T8EAFCwK7vJq
ATJEWXnP1OsOZeG5IYGn2IqIb+kb0BaKTcYXXg5mUDgTPh2uUilpaUSUTabGWhls
V8iceE/FOO4p7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:58 2026 by rpki-client