Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: 6Z1sVJmhepyShqG8VI/SOXaIKP2jhOmEq8wGG9ld+0Y=
Subject key identifier: A0:65:64:1F:5B:C0:A3:6E:A1:74:54:D3:D8:DB:DA:49:13:EF:B1:0C
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019D2A72BC24F92F78A176566093B72A35D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 12E7
Signing time: Thu 26 Mar 2026 14:00:55 +0000
Manifest this update: Thu 26 Mar 2026 14:00:55 +0000
Manifest next update: Fri 27 Mar 2026 14:00:55 +0000
Files and hashes: 1: T0aHsGGmn41WObWp0hdVliZ14-U.roa (hash: Gf+S5d8Ft2GtIs0CvyHUXjNQ/e8ZLOumNWc87eL8OVc=)
2: pBheYp73SEtAdhEMIPW7iRhovW4.roa (hash: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ=)
3: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: o7qxBA+Pau/WgxWZu/DV8Rbl41VO5u/Me7JiQ/LvpkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:bc:24:f9:2f:78:a1:76:56:60:93:b7:2a:35:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Mar 26 14:00:55 2026 GMT
Not After : Mar 27 14:00:55 2026 GMT
Subject: CN=a065641f5bc0a36ea17454d3d8dbda4913efb10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:83:16:ff:6a:36:7a:48:da:0b:15:94:31:
e1:20:22:02:7c:d2:d3:79:68:19:4f:09:18:96:a5:
c2:ed:71:3b:30:a7:f6:b2:da:03:2e:be:31:4a:fa:
c6:28:a7:3f:e2:c4:5e:58:e9:a0:9a:45:73:27:e3:
7d:1a:81:19:59:21:74:70:bc:1f:78:ba:43:ba:46:
dd:de:98:b5:40:54:df:2a:60:73:a4:77:f9:40:77:
6d:01:b3:17:e2:28:71:eb:e4:67:77:24:8e:4b:36:
ac:1c:aa:cc:6c:b9:8c:10:c3:d9:4b:b0:0a:15:54:
41:5f:0d:41:c6:6a:44:29:e5:ca:50:24:c0:bb:af:
43:40:b2:11:ee:d0:69:62:58:52:fd:a0:d2:34:a3:
a7:a6:9e:86:75:47:60:74:1c:40:6f:46:f6:43:f4:
2e:6c:b7:04:31:76:7c:b4:57:ed:30:db:ad:c0:8c:
6b:47:1b:7e:eb:12:7d:94:36:2f:77:06:bf:eb:39:
37:6c:1b:af:0d:82:fc:25:51:36:12:38:a5:de:e9:
db:ce:c9:0b:df:4d:9e:e4:26:78:33:a6:85:0b:83:
5c:62:f9:d5:2b:e8:99:b6:4c:bc:81:bc:bb:8a:66:
09:35:86:db:aa:d7:e4:fd:a4:c0:54:38:2c:1b:b1:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:64:1F:5B:C0:A3:6E:A1:74:54:D3:D8:DB:DA:49:13:EF:B1:0C
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c9:5f:7c:87:20:b7:2a:4a:c4:d7:c8:44:f8:81:c7:75:99:
78:e4:fe:76:73:1c:c2:a8:a1:d8:cc:a5:69:2c:62:1e:14:e8:
50:a7:2c:5a:fc:6b:d9:1f:2b:8d:e2:4b:72:36:99:60:0c:9c:
6f:73:6c:31:ad:86:ac:dc:22:5e:37:ea:93:24:3d:ad:46:4f:
d2:20:e1:b8:8b:64:63:73:24:a7:7a:92:d1:4b:5d:0e:f6:cd:
42:6d:bf:e3:e7:17:42:0f:d2:80:c3:08:6c:87:ae:6e:91:29:
c8:9f:40:0a:44:a7:80:14:cc:27:86:ef:6f:4e:d1:99:f2:73:
f8:a2:c1:f2:d7:35:87:e3:82:7e:73:dc:ac:e6:f6:d7:ad:0c:
31:ad:52:e1:eb:6a:54:7f:38:5c:c7:34:b1:29:b3:dd:51:44:
84:05:66:56:ff:da:0b:e1:d5:9f:ae:e2:9f:e3:17:8b:c6:3b:
f9:b4:fe:ce:90:5a:b7:a8:4d:8f:69:72:1b:b8:f1:83:71:24:
76:a3:72:54:cb:79:8c:18:dc:65:7a:0e:0c:69:8e:7d:29:cf:
39:2d:3c:88:56:26:47:50:4c:19:41:67:10:bd:2d:22:a1:58:
47:6e:fc:ea:87:eb:9f:b9:c3:e0:59:33:a0:65:e7:16:8e:99:
60:15:fd:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcrwk+S94oXZWYJO3KjXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzQ2Y2NiN2U3M2E5Y2MzMGVmMDRlZGQ3Y2YxNmNjMWQ5
NDY4OTQwHhcNMjYwMzI2MTQwMDU1WhcNMjYwMzI3MTQwMDU1WjAzMTEwLwYDVQQD
EyhhMDY1NjQxZjViYzBhMzZlYTE3NDU0ZDNkOGRiZGE0OTEzZWZiMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMWDFv9qNnpI2gsVlDHhICICfNLT
eWgZTwkYlqXC7XE7MKf2stoDLr4xSvrGKKc/4sReWOmgmkVzJ+N9GoEZWSF0cLwf
eLpDukbd3pi1QFTfKmBzpHf5QHdtAbMX4ihx6+RndySOSzasHKrMbLmMEMPZS7AK
FVRBXw1BxmpEKeXKUCTAu69DQLIR7tBpYlhS/aDSNKOnpp6GdUdgdBxAb0b2Q/Qu
bLcEMXZ8tFftMNutwIxrRxt+6xJ9lDYvdwa/6zk3bBuvDYL8JVE2Ejil3unbzskL
302e5CZ4M6aFC4NcYvnVK+iZtky8gby7imYJNYbbqtfk/aTAVDgsG7E8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBlZB9bwKNuoXRU09jb2kkT77EMMB8GA1UdIwQY
MBaAFMJ0bMt+c6nMMO8E7dfPFswdlGiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2Et
OTNlOTE4ZDEwZWM1LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2EtOTNlOTE4ZDEwZWM1
LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjclffIcg
typKxNfIRPiBx3WZeOT+dnMcwqih2MylaSxiHhToUKcsWvxr2R8rjeJLcjaZYAyc
b3NsMa2GrNwiXjfqkyQ9rUZP0iDhuItkY3Mkp3qS0UtdDvbNQm2/4+cXQg/SgMMI
bIeubpEpyJ9ACkSngBTMJ4bvb07RmfJz+KLB8tc1h+OCfnPcrOb2160MMa1S4etq
VH84XMc0sSmz3VFEhAVmVv/aC+HVn67in+MXi8Y7+bT+zpBat6hNj2lyG7jxg3Ek
dqNyVMt5jBjcZXoODGmOfSnPOS08iFYmR1BMGUFnEL0tIqFYR2786ofrn7nD4Fkz
oGXnFo6ZYBX9xA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:55:56 2026 by rpki-client