Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: yszBgDxcxStjM2s/SAfyPv0MkPNTffCqu16nXSsRW0c=
Subject key identifier: 7A:9D:85:77:24:73:96:EB:7E:AF:B5:24:D1:9B:D8:7D:5B:62:E7:77
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 019D322C60167F1983A1374EC32F40D7B97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 02:01:02 +0000
Manifest this update: Sat 28 Mar 2026 02:01:02 +0000
Manifest next update: Sun 29 Mar 2026 02:01:02 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: Fl495I8JKbqDS9wf0VH4qJ5LP/AoAeyhlk0wWmH+iaw=)
2: o1zjZNlBpE66dvhTYzI4pj6m9jM.roa (hash: wVl4rNHZWCUbMyCjP/aG6EY9BIdfaxUELJ3NnDLrmak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:60:16:7f:19:83:a1:37:4e:c3:2f:40:d7:b9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Mar 28 02:01:02 2026 GMT
Not After : Mar 29 02:01:02 2026 GMT
Subject: CN=7a9d8577247396eb7eafb524d19bd87d5b62e777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:c3:a9:74:2d:fe:6b:8f:91:d8:c8:dc:6d:
dc:88:d5:35:2a:a0:1f:21:8e:eb:52:77:dd:78:45:
54:6c:aa:23:24:80:ce:81:bc:07:ef:72:2f:14:84:
f1:f0:94:a5:2a:10:57:ca:7a:61:fd:8f:04:43:87:
92:9d:cd:0b:0b:d7:0c:15:f5:74:ab:68:d2:70:cc:
4d:75:d5:32:d7:da:d0:25:9e:55:2b:16:3c:aa:39:
a2:1c:08:f2:9a:b0:e9:e1:3a:6f:ef:89:57:4b:f1:
b2:6a:cb:07:31:76:8e:60:08:73:b5:36:c7:d3:9f:
8f:83:40:ee:8b:3c:4e:0f:66:d6:cf:d0:65:f7:08:
fa:1f:51:46:e7:19:8b:f9:7b:22:17:77:8e:89:5b:
cb:0f:d2:cd:96:0f:3c:fe:5f:ac:7f:91:71:79:61:
9a:29:29:c6:1e:a4:5c:75:fa:8a:35:02:e0:ec:2d:
2b:b5:cf:2c:20:40:13:3b:ec:d1:85:11:c9:a8:9f:
57:94:04:3f:d6:c9:a8:b6:81:b4:37:7e:4b:66:fd:
ea:4b:7d:c3:1a:4f:8b:13:44:c6:43:42:70:d7:f2:
09:c6:30:57:34:a6:01:5b:b2:fc:23:c2:07:87:52:
38:06:80:93:da:a6:4b:72:51:a5:e6:be:3c:5f:bc:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:85:77:24:73:96:EB:7E:AF:B5:24:D1:9B:D8:7D:5B:62:E7:77
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:15:a2:f7:1a:0e:aa:a3:8d:0f:0c:4d:25:c1:93:32:c3:
7a:b1:a7:39:54:47:d6:d4:99:a3:0c:a7:a3:86:9b:28:cc:fc:
ab:9b:d5:c0:fe:bb:51:aa:d3:80:7b:c9:a8:a6:54:8c:db:12:
68:7b:eb:23:ad:85:aa:11:bb:eb:e6:8e:7b:62:51:b8:c3:1e:
57:d5:ca:20:f9:1e:c1:cb:a6:80:27:c1:f2:0e:6a:0c:77:fc:
89:03:13:47:cd:65:0b:84:a1:68:2c:d5:df:e1:35:40:d1:f9:
ca:86:47:25:d9:5e:c4:77:da:b8:ea:1a:d7:59:49:5c:91:bf:
db:9c:f0:f2:09:b0:3a:e5:97:69:c1:cb:3d:a2:12:49:2d:fc:
ee:64:63:91:cc:95:e4:4d:7c:de:26:5c:02:59:95:1b:3f:bf:
e7:22:96:7f:87:d2:a4:35:72:28:ef:e9:7d:5b:13:aa:1c:5a:
23:c2:d7:8e:27:e5:12:55:65:d5:8b:62:1a:42:2c:89:d0:23:
2b:ee:dd:d2:9f:69:7e:02:85:f1:5c:4d:34:a1:0e:78:b7:f1:
74:a1:ed:c7:a9:5b:b7:42:18:76:e2:c9:cf:29:b6:7d:e9:0f:
fa:c6:af:d7:e3:49:df:2d:92:45:2a:d8:07:cc:bc:57:70:5c:
b8:71:32:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yLGAWfxmDoTdOwy9A17l7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDJhMzU2YTU0NzgxNTViZWFhOGJjNjI1NmE4NmY2ZDVi
M2Y3M2MwHhcNMjYwMzI4MDIwMTAyWhcNMjYwMzI5MDIwMTAyWjAzMTEwLwYDVQQD
Eyg3YTlkODU3NzI0NzM5NmViN2VhZmI1MjRkMTliZDg3ZDViNjJlNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh7DqXQt/muPkdjI3G3ciNU1KqAf
IY7rUnfdeEVUbKojJIDOgbwH73IvFITx8JSlKhBXynph/Y8EQ4eSnc0LC9cMFfV0
q2jScMxNddUy19rQJZ5VKxY8qjmiHAjymrDp4Tpv74lXS/GyassHMXaOYAhztTbH
05+Pg0DuizxOD2bWz9Bl9wj6H1FG5xmL+XsiF3eOiVvLD9LNlg88/l+sf5FxeWGa
KSnGHqRcdfqKNQLg7C0rtc8sIEATO+zRhRHJqJ9XlAQ/1smotoG0N35LZv3qS33D
Gk+LE0TGQ0Jw1/IJxjBXNKYBW7L8I8IHh1I4BoCT2qZLclGl5r48X7x8twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqdhXckc5brfq+1JNGb2H1bYud3MB8GA1UdIwQY
MBaAFFjSo1alR4FVvqqLxiVqhvbVs/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQt
OTA1MzA1NGE1Y2FiLzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQtOTA1MzA1NGE1Y2Fi
LzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoIVovca
DqqjjQ8MTSXBkzLDerGnOVRH1tSZowyno4abKMz8q5vVwP67UarTgHvJqKZUjNsS
aHvrI62FqhG76+aOe2JRuMMeV9XKIPkewcumgCfB8g5qDHf8iQMTR81lC4ShaCzV
3+E1QNH5yoZHJdlexHfauOoa11lJXJG/25zw8gmwOuWXacHLPaISSS387mRjkcyV
5E183iZcAlmVGz+/5yKWf4fSpDVyKO/pfVsTqhxaI8LXjiflElVl1YtiGkIsidAj
K+7d0p9pfgKF8VxNNKEOeLfxdKHtx6lbt0IYduLJzym2fekP+sav1+NJ3y2SRSrY
B8y8V3BcuHEyIQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:58 2026 by rpki-client