Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier: WVwKfRv2wwMcM7+qDKcrjhFW5ju9BG67dxp9V+4cSUg=
Subject key identifier: E3:23:65:E3:DB:44:58:55:5C:1B:D8:EB:F5:E0:97:7F:01:E7:1E:E4
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial: 019D2583538E84551C1D8E18C1246A55DBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number: 0628
Signing time: Wed 25 Mar 2026 15:00:56 +0000
Manifest this update: Wed 25 Mar 2026 15:00:56 +0000
Manifest next update: Thu 26 Mar 2026 15:00:56 +0000
Files and hashes: 1: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (hash: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc=)
2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: NVQ0GjebMsEOLY6RzSweXJ1Eib/bnqczC9OzdHg0LYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:53:8e:84:55:1c:1d:8e:18:c1:24:6a:55:db:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Validity
Not Before: Mar 25 15:00:56 2026 GMT
Not After : Mar 26 15:00:56 2026 GMT
Subject: CN=e32365e3db4458555c1bd8ebf5e0977f01e71ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:d2:3b:4a:ec:7d:7e:8f:9b:c4:11:38:f5:
76:ca:2a:7f:5e:d2:a4:39:66:d5:22:96:6b:19:19:
96:01:df:1f:0e:82:50:c6:17:1a:f9:21:55:6f:bf:
cb:38:02:76:4b:6f:b4:3e:4c:ac:66:ea:89:c4:9e:
ac:96:ac:60:f7:f3:18:24:9b:1f:58:c7:a7:cf:db:
cd:c9:36:ac:00:d2:6d:3e:d1:8c:5e:fe:16:48:ec:
ed:f3:08:d1:0f:a5:b9:e6:e2:55:8e:88:98:81:a6:
c8:1d:82:2b:a8:f8:cc:71:4f:61:a1:4a:52:93:e2:
9b:55:87:3b:43:33:77:78:e3:af:06:57:43:84:93:
12:84:6d:74:0d:eb:a0:9a:33:f8:83:ef:30:52:e4:
a5:c6:c3:83:2c:ee:20:b1:a0:06:50:ea:ef:96:0c:
ef:60:61:ec:d5:10:ce:7c:b9:08:44:30:1c:dc:cc:
c0:ff:d5:a4:bd:99:82:50:da:65:3c:47:e4:cd:43:
2b:4f:fd:17:f8:ec:40:6d:33:86:a2:e5:a1:b1:02:
bb:57:dd:31:6b:26:e5:09:59:f1:b5:de:2a:48:8f:
fd:e6:c5:ac:5e:82:ba:5e:ca:28:3e:15:78:f8:19:
09:a0:9e:a7:1e:b3:9a:71:b0:55:00:24:27:1c:c3:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:65:E3:DB:44:58:55:5C:1B:D8:EB:F5:E0:97:7F:01:E7:1E:E4
X509v3 Authority Key Identifier:
keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:00:7d:27:cb:f5:56:11:80:01:37:d4:db:c6:c5:88:05:70:
57:43:5b:fb:2b:91:19:69:1c:14:87:1a:3f:da:fc:ad:99:1c:
8e:f7:0e:03:e9:58:fa:a9:89:8b:87:3a:f6:4c:e1:ac:0a:ee:
e8:94:55:ac:99:9e:43:25:89:4e:c6:2a:54:f2:19:94:6a:fa:
76:62:a8:05:48:a9:59:1d:91:60:59:9f:6b:46:0c:a9:c3:5e:
b6:1e:db:df:20:6c:01:6d:6a:b6:41:95:db:c2:6f:6b:71:a1:
a3:24:57:56:3d:50:86:02:89:26:0b:2f:b3:95:a6:89:a8:b4:
94:a2:24:e8:14:14:62:4a:1a:dc:d1:b7:62:1c:53:0f:55:4b:
fc:ae:08:00:e8:98:b7:48:e8:6c:2b:41:f5:b7:fa:58:d6:55:
71:ef:5e:72:d1:3c:92:23:1a:82:6e:97:ba:9f:f8:80:8c:2b:
c8:13:07:4f:f9:b5:8f:fa:b1:8d:9b:71:5e:33:66:3b:df:50:
cd:90:ee:ac:aa:5e:06:35:69:19:dd:44:dc:f2:6e:c5:ed:8a:
0c:64:28:cd:5f:c7:2a:a1:17:18:46:26:34:92:d0:f4:41:89:
b4:40:9a:85:3d:03:88:da:31:65:85:b0:ba:19:b5:c4:29:0f:
42:d3:e1:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg1OOhFUcHY4YwSRqVdvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZDA0MzdjZGY3Y2JhOWYzOTY3ZWIzMjhhMDg2ODZkMDZl
NDdkNTYwHhcNMjYwMzI1MTUwMDU2WhcNMjYwMzI2MTUwMDU2WjAzMTEwLwYDVQQD
EyhlMzIzNjVlM2RiNDQ1ODU1NWMxYmQ4ZWJmNWUwOTc3ZjAxZTcxZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6TSO0rsfX6Pm8QROPV2yip/XtKk
OWbVIpZrGRmWAd8fDoJQxhca+SFVb7/LOAJ2S2+0PkysZuqJxJ6slqxg9/MYJJsf
WMenz9vNyTasANJtPtGMXv4WSOzt8wjRD6W55uJVjoiYgabIHYIrqPjMcU9hoUpS
k+KbVYc7QzN3eOOvBldDhJMShG10DeugmjP4g+8wUuSlxsODLO4gsaAGUOrvlgzv
YGHs1RDOfLkIRDAc3MzA/9WkvZmCUNplPEfkzUMrT/0X+OxAbTOGouWhsQK7V90x
ayblCVnxtd4qSI/95sWsXoK6XsooPhV4+BkJoJ6nHrOacbBVACQnHMOS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMjZePbRFhVXBvY6/Xgl38B5x7kMB8GA1UdIwQY
MBaAFMDQQ3zffLqfOWfrMooIaG0G5H1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQt
YzYxOGRlYzA3NDYyLzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQtYzYxOGRlYzA3NDYy
LzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQB9J8v1
VhGAATfU28bFiAVwV0Nb+yuRGWkcFIcaP9r8rZkcjvcOA+lY+qmJi4c69kzhrAru
6JRVrJmeQyWJTsYqVPIZlGr6dmKoBUipWR2RYFmfa0YMqcNeth7b3yBsAW1qtkGV
28Jva3GhoyRXVj1QhgKJJgsvs5Wmiai0lKIk6BQUYkoa3NG3YhxTD1VL/K4IAOiY
t0jobCtB9bf6WNZVce9ectE8kiMagm6Xup/4gIwryBMHT/m1j/qxjZtxXjNmO99Q
zZDurKpeBjVpGd1E3PJuxe2KDGQozV/HKqEXGEYmNJLQ9EGJtECahT0DiNoxZYWw
uhm1xCkPQtPhYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:15 2026 by rpki-client