Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier: b0sQvSy4A/1qKPcGdnVevyVhLqvpOc6uS5htdb19oTA=
Subject key identifier: 59:E6:56:A9:E3:F6:95:DA:84:28:D0:23:22:19:29:36:4B:55:BE:B9
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial: 019D29CDC05EE39D7418A65C4E6C4A361538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number: 078B
Signing time: Thu 26 Mar 2026 11:00:43 +0000
Manifest this update: Thu 26 Mar 2026 11:00:43 +0000
Manifest next update: Fri 27 Mar 2026 11:00:43 +0000
Files and hashes: 1: IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa (hash: N2VSLUJTgIas4vbaZK4n5fSPJQ+7roJjvsDns30p6Kc=)
2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: Mo2u5orgpq5XaOpnEHJOws2fomD6hF7ZoZn3oowu1+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c0:5e:e3:9d:74:18:a6:5c:4e:6c:4a:36:15:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Validity
Not Before: Mar 26 11:00:43 2026 GMT
Not After : Mar 27 11:00:43 2026 GMT
Subject: CN=59e656a9e3f695da8428d023221929364b55beb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:1e:80:73:e1:4b:d2:dc:e8:53:36:01:9f:
f5:e1:a6:5b:cc:52:b7:8f:61:a9:10:8c:10:1c:91:
0d:f0:2d:f4:27:eb:1b:0d:9c:79:f0:20:d5:72:6c:
dc:3b:f4:ea:37:88:0c:91:73:f4:89:e5:22:c0:3d:
19:a9:30:7d:50:80:af:91:c8:6e:c1:4e:80:12:7c:
60:e9:41:f3:0b:c5:b8:70:a7:b0:ed:6b:f7:73:b9:
e9:69:dd:42:c2:f1:a0:70:68:80:74:4b:cd:91:79:
58:8b:d1:c6:a6:33:8c:24:79:38:e8:f2:b0:4f:f5:
7d:14:02:d4:84:78:86:0b:29:32:dc:f0:e5:c8:92:
34:c5:86:76:ff:dd:04:83:d7:18:2f:6f:02:8c:ae:
5e:ea:23:ab:70:85:fa:b6:50:ee:76:34:94:12:ae:
57:1a:a5:62:31:a1:2c:b5:43:04:f9:c7:59:c2:10:
dc:25:3d:b6:5b:8e:42:26:e2:1a:fb:55:cf:dd:ed:
eb:1c:c0:6d:2c:71:bc:ee:ad:61:e3:3c:d3:5e:6f:
93:39:de:47:67:9f:3f:72:a0:b5:d9:38:c0:84:78:
6b:17:58:02:8d:d9:db:d2:91:01:3d:31:af:5d:c2:
5e:9e:e7:81:13:51:6b:b4:c2:42:db:f9:7b:d4:49:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E6:56:A9:E3:F6:95:DA:84:28:D0:23:22:19:29:36:4B:55:BE:B9
X509v3 Authority Key Identifier:
keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fe:7d:52:12:f7:3c:2b:72:39:62:a1:b9:dd:52:21:15:22:
49:2f:9f:35:2b:f8:5f:a1:9e:f8:7b:b6:e4:14:5a:c6:96:84:
6f:a5:45:d0:62:0b:45:2e:7c:cc:af:d3:86:7e:02:67:7f:0a:
27:1f:a0:87:a6:d8:70:54:d1:a1:24:35:e5:af:d5:5b:85:b1:
2e:e5:8b:7f:11:9e:6a:fa:89:26:5c:38:c6:54:b2:60:ad:e6:
d5:c2:f1:96:cc:63:39:56:7d:50:91:2d:81:7f:ee:7e:ac:de:
b5:09:61:4c:fe:40:d6:c2:4e:61:9d:50:b3:4c:06:6c:5a:af:
61:35:d2:f0:5d:28:53:ee:c7:42:ff:41:97:d3:49:d0:b2:5e:
f5:9c:f5:8b:4f:5a:95:87:18:c8:17:8a:52:1b:e1:1b:66:98:
da:5d:a2:59:28:54:52:3b:82:e4:bc:8f:0c:98:b7:06:ed:47:
fb:58:88:70:d1:99:84:8f:90:e7:ee:e6:b7:c1:40:0c:0c:6b:
4c:3b:45:0a:95:c0:83:2f:4d:49:8d:56:e0:f1:8e:9b:1a:2a:
e9:ad:f7:39:21:74:ea:de:46:43:18:1b:70:0a:be:29:3c:3b:
55:aa:0c:bd:cc:6e:7c:25:fd:a8:07:75:0a:f8:71:75:20:27:
74:4b:80:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzcBe4510GKZcTmxKNhU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGE4OGQ3ZTVhNTY1ZWE3MTljZmM0MGQ4YmI2M2VlMTY3
MTg1NmEwHhcNMjYwMzI2MTEwMDQzWhcNMjYwMzI3MTEwMDQzWjAzMTEwLwYDVQQD
Eyg1OWU2NTZhOWUzZjY5NWRhODQyOGQwMjMyMjE5MjkzNjRiNTViZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRIegHPhS9Lc6FM2AZ/14aZbzFK3
j2GpEIwQHJEN8C30J+sbDZx58CDVcmzcO/TqN4gMkXP0ieUiwD0ZqTB9UICvkchu
wU6AEnxg6UHzC8W4cKew7Wv3c7npad1CwvGgcGiAdEvNkXlYi9HGpjOMJHk46PKw
T/V9FALUhHiGCyky3PDlyJI0xYZ2/90Eg9cYL28CjK5e6iOrcIX6tlDudjSUEq5X
GqViMaEstUME+cdZwhDcJT22W45CJuIa+1XP3e3rHMBtLHG87q1h4zzTXm+TOd5H
Z58/cqC12TjAhHhrF1gCjdnb0pEBPTGvXcJenueBE1FrtMJC2/l71ElGewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnmVqnj9pXahCjQIyIZKTZLVb65MB8GA1UdIwQY
MBaAFMAKiNflpWXqcZz8QNi7Y+4WcYVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYt
ZGUzYzhkOTUzZWM1LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYtZGUzYzhkOTUzZWM1
LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP59UhL3
PCtyOWKhud1SIRUiSS+fNSv4X6Ge+Hu25BRaxpaEb6VF0GILRS58zK/Thn4CZ38K
Jx+gh6bYcFTRoSQ15a/VW4WxLuWLfxGeavqJJlw4xlSyYK3m1cLxlsxjOVZ9UJEt
gX/ufqzetQlhTP5A1sJOYZ1Qs0wGbFqvYTXS8F0oU+7HQv9Bl9NJ0LJe9Zz1i09a
lYcYyBeKUhvhG2aY2l2iWShUUjuC5LyPDJi3Bu1H+1iIcNGZhI+Q5+7mt8FADAxr
TDtFCpXAgy9NSY1W4PGOmxoq6a33OSF06t5GQxgbcAq+KTw7VaoMvcxufCX9qAd1
CvhxdSAndEuAmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:07 2026 by rpki-client