Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File: wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier: exwkwRfZqXSO1v1uunIE2iXFzAAhhUpFBiq6x/KpIYU=
Subject key identifier: FB:54:B9:0D:40:5B:7E:89:60:2F:F9:0D:9D:90:C2:A9:A9:96:F9:0C
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer: /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial: 019D2816859788AE8B4E07E41BBC93A3AD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number: 0A20
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: B0Uzs5RoulMpxtKQXud6u4TA0PM.roa (hash: mR2i4aLtlRQUg0BXj5ANdcDouKnEouJa0KGOvU/8HYM=)
2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: NzTZ/l+rVykZEhryL3FUQVVnkdLN7Vtbgco38JICnzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:85:97:88:ae:8b:4e:07:e4:1b:bc:93:a3:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=fb54b90d405b7e89602ff90d9d90c2a9a996f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:2a:35:17:ac:92:9c:e6:bd:a8:3b:44:58:
c6:0f:09:52:0c:95:cd:8a:05:af:da:b6:24:3e:00:
2e:7e:43:52:ed:64:e7:37:fe:77:75:76:9e:b6:ee:
5b:07:d5:ca:9d:eb:d0:47:22:1c:49:08:41:1b:74:
37:89:e1:6c:3d:16:db:9b:d3:cf:8c:6f:62:9f:3c:
7a:cb:81:68:5d:b8:63:c5:bf:0b:b8:0d:e9:18:8b:
ec:f6:9f:d0:25:2d:49:d5:49:a7:3a:5d:31:8a:51:
59:6e:67:94:bc:05:3a:74:7e:c3:b7:0d:08:7b:45:
04:6f:e3:c0:56:ae:3f:e4:47:c0:07:0c:7c:7c:9c:
04:c3:6d:2b:2e:69:f1:54:ce:72:b1:ad:95:04:aa:
de:bd:e1:44:5e:0b:a7:bc:89:18:64:3a:0d:e3:da:
cb:af:7d:bb:20:07:50:e5:0e:69:e3:70:a8:0e:a8:
de:28:8c:27:6b:cb:0a:60:06:f7:b9:60:df:8c:02:
14:a6:c2:ef:5b:12:30:49:cf:74:7b:d8:ff:fb:bd:
ad:2a:e9:d9:26:63:36:15:8f:3c:82:a1:d4:66:31:
20:95:2f:ba:f2:c4:4d:8c:e0:dc:7f:c4:51:17:fb:
74:90:59:c2:43:a3:fa:7c:b0:7c:45:71:73:8d:06:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:B9:0D:40:5B:7E:89:60:2F:F9:0D:9D:90:C2:A9:A9:96:F9:0C
X509v3 Authority Key Identifier:
keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:7f:4a:10:61:b6:37:c9:db:0d:12:3a:ef:7b:a9:b3:1e:
4d:54:ab:ff:05:a0:f3:25:4a:8c:34:17:cb:e5:2c:e5:da:72:
77:d8:fe:93:95:ae:f4:30:b1:62:73:f6:5b:c0:44:65:17:d6:
69:f9:f4:f3:e2:13:13:b3:cc:d5:f7:d6:d0:72:93:b7:ff:40:
d2:9b:fb:f8:88:03:ff:2e:55:a3:f5:2d:38:4d:b0:ab:d2:12:
ab:7f:b6:d0:26:dc:b5:68:c2:ac:69:33:83:cf:18:f8:45:82:
bb:af:39:cd:e8:5f:8b:41:d3:a6:60:99:d9:58:eb:8f:de:0a:
7e:3b:f6:c4:47:cf:08:4f:fc:54:fa:4c:18:61:66:d7:16:57:
ae:68:94:66:8b:3b:13:14:47:d8:83:1e:b4:b2:9f:09:fa:a4:
00:c4:16:e6:b9:16:31:b4:79:ec:27:20:7d:17:1f:79:11:9f:
23:fb:30:f5:6c:4d:28:89:61:ed:b8:73:a6:16:24:10:f5:86:
88:4d:5b:69:82:be:a1:1c:55:25:18:18:bf:05:bc:3d:84:ea:
ad:54:55:d1:42:1f:3a:ad:d6:8d:58:3c:cb:d9:6e:05:e3:34:
c4:4c:a2:c4:9d:a4:0c:f6:8d:a4:4c:a4:dd:a4:08:18:28:29:
e3:87:a1:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFoWXiK6LTgfkG7yTo60fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDRjZThlMzNmNzA4NGIwOGM0NWFhMTc3ZjJlMzNmNjkw
ODE3YTAwHhcNMjYwMzI2MDMwMDU3WhcNMjYwMzI3MDMwMDU3WjAzMTEwLwYDVQQD
EyhmYjU0YjkwZDQwNWI3ZTg5NjAyZmY5MGQ5ZDkwYzJhOWE5OTZmOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPQqNReskpzmvag7RFjGDwlSDJXN
igWv2rYkPgAufkNS7WTnN/53dXaetu5bB9XKnevQRyIcSQhBG3Q3ieFsPRbbm9PP
jG9inzx6y4FoXbhjxb8LuA3pGIvs9p/QJS1J1UmnOl0xilFZbmeUvAU6dH7Dtw0I
e0UEb+PAVq4/5EfABwx8fJwEw20rLmnxVM5ysa2VBKreveFEXgunvIkYZDoN49rL
r327IAdQ5Q5p43CoDqjeKIwna8sKYAb3uWDfjAIUpsLvWxIwSc90e9j/+72tKunZ
JmM2FY88gqHUZjEglS+68sRNjODcf8RRF/t0kFnCQ6P6fLB8RXFzjQbdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtUuQ1AW36JYC/5DZ2QwqmplvkMMB8GA1UdIwQY
MBaAFMHUzo4z9whLCMRaoXfy4z9pCBegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMt
YzQ1YjI4YWFiYzFhLzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMtYzQ1YjI4YWFiYzFh
LzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRR/ShBh
tjfJ2w0SOu97qbMeTVSr/wWg8yVKjDQXy+Us5dpyd9j+k5Wu9DCxYnP2W8BEZRfW
afn08+ITE7PM1ffW0HKTt/9A0pv7+IgD/y5Vo/UtOE2wq9ISq3+20CbctWjCrGkz
g88Y+EWCu685zehfi0HTpmCZ2Vjrj94Kfjv2xEfPCE/8VPpMGGFm1xZXrmiUZos7
ExRH2IMetLKfCfqkAMQW5rkWMbR57CcgfRcfeRGfI/sw9WxNKIlh7bhzphYkEPWG
iE1baYK+oRxVJRgYvwW8PYTqrVRV0UIfOq3WjVg8y9luBeM0xEyixJ2kDPaNpEyk
3aQIGCgp44ehvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:06 2026 by rpki-client