Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: WMa1Ij3Me7oeuTuVm/ans6KTssFHcHMAW+8o3qsAwEY=
Subject key identifier: 2E:12:1E:36:EC:9C:3B:DA:52:19:06:C5:CE:79:9C:24:D8:99:14:7B
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 019D273B0DED80468CA7556A1C85EF850740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 0C32
Signing time: Wed 25 Mar 2026 23:01:14 +0000
Manifest this update: Wed 25 Mar 2026 23:01:14 +0000
Manifest next update: Thu 26 Mar 2026 23:01:14 +0000
Files and hashes: 1: C0FSud6nu0_Eyfo1MhLrfHdFT0M.roa (hash: tqmfcAHZDKuD6gEpt3xtWJydvSkzRm2I6adf38pIDlc=)
2: GkQO5rcPfgn2w75NaD9qydi-Rgw.roa (hash: p26ROjD8Y6lyqnpvxzkXIxQnFLDkFbszO+JOYh9DarQ=)
3: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: Hz1cNrbSH27kiLs5ezAJiUANZlJQ2tsKAgAZpfywTtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0d:ed:80:46:8c:a7:55:6a:1c:85:ef:85:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Mar 25 23:01:14 2026 GMT
Not After : Mar 26 23:01:14 2026 GMT
Subject: CN=2e121e36ec9c3bda521906c5ce799c24d899147b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f6:14:2a:6c:68:12:8e:60:3f:65:8b:e3:f2:
32:5d:b7:d5:68:58:a6:e6:e6:f3:a9:c4:a7:b6:e7:
6d:d2:eb:4b:41:33:af:46:42:21:9b:dd:8c:b4:9f:
f6:2f:b2:c5:d0:ea:32:a2:6a:97:23:55:30:0c:02:
40:9b:b9:56:a6:74:6f:e8:51:a1:53:d4:56:a6:27:
d9:a2:e1:10:8d:05:13:26:04:62:16:c6:bf:ea:4a:
92:4d:c5:8a:97:8a:7a:23:03:02:d2:00:71:b0:4d:
e0:41:65:d5:41:2d:45:39:ef:09:b1:3a:96:90:f5:
cc:82:f4:92:b3:3a:50:03:17:02:86:99:4f:ab:42:
b8:a6:1a:c3:ea:16:41:a9:45:fd:24:ca:d2:b5:d3:
b9:52:37:4a:95:7e:2e:dd:0b:ea:58:3f:2f:82:cf:
93:04:26:35:47:41:a3:62:21:a6:31:d9:99:21:91:
11:67:2a:55:db:64:84:ed:76:30:65:2f:b7:45:6a:
db:13:94:3d:bd:5b:29:c6:51:86:e8:4c:85:88:4a:
1d:8c:0b:e3:bb:8d:18:25:75:34:1a:8a:63:bd:06:
8b:a8:46:82:b8:73:c7:30:1f:ea:91:8c:94:a6:00:
07:29:24:8e:bc:03:26:ba:1e:a2:73:59:9b:32:1c:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:1E:36:EC:9C:3B:DA:52:19:06:C5:CE:79:9C:24:D8:99:14:7B
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e8:71:09:7d:53:c8:ee:56:1d:9d:91:79:55:07:97:48:a3:
1b:69:fc:4f:d2:10:b8:24:7f:b6:95:8d:03:c9:99:b3:7a:8d:
b2:54:a1:ed:18:40:4b:d7:c4:4e:8d:e1:b5:75:3f:37:84:af:
85:38:bc:e6:c8:91:71:e4:fe:e8:bb:d7:bf:8a:63:16:2d:08:
5a:ff:dd:01:0e:40:1b:b3:8b:2a:c1:d5:1e:13:9d:68:da:d6:
78:00:cb:96:61:bc:84:2b:20:83:8e:e9:fc:6f:d7:5d:5f:12:
cf:44:6b:6d:f1:26:c0:07:4e:d8:88:c6:0a:4f:c2:36:8d:e2:
48:bf:a4:27:d4:c0:8d:0a:fe:a5:d2:83:7c:94:f5:ff:65:79:
4a:e5:c5:81:2d:fc:8a:78:41:c8:c0:d0:3b:36:ff:19:4f:f4:
d4:b8:6c:68:9c:3a:df:a3:fa:2f:f6:2c:2e:fe:76:14:76:e6:
84:15:77:d7:22:75:53:25:f4:e7:f9:3e:02:ef:0d:05:3a:09:
15:96:8f:f2:df:c7:77:0b:28:48:fc:c3:5a:20:4e:7d:a1:af:
7f:7b:1b:88:77:cf:22:f7:a0:05:c1:47:64:a6:9c:d8:df:ba:
1c:8e:70:a1:7b:74:f4:53:19:06:75:71:a6:69:f4:55:20:62:
b5:d5:5f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOw3tgEaMp1VqHIXvhQdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy
N2IwYzkwHhcNMjYwMzI1MjMwMTE0WhcNMjYwMzI2MjMwMTE0WjAzMTEwLwYDVQQD
EygyZTEyMWUzNmVjOWMzYmRhNTIxOTA2YzVjZTc5OWMyNGQ4OTkxNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PYUKmxoEo5gP2WL4/IyXbfVaFim
5ubzqcSntudt0utLQTOvRkIhm92MtJ/2L7LF0OoyomqXI1UwDAJAm7lWpnRv6FGh
U9RWpifZouEQjQUTJgRiFsa/6kqSTcWKl4p6IwMC0gBxsE3gQWXVQS1FOe8JsTqW
kPXMgvSSszpQAxcChplPq0K4phrD6hZBqUX9JMrStdO5UjdKlX4u3QvqWD8vgs+T
BCY1R0GjYiGmMdmZIZERZypV22SE7XYwZS+3RWrbE5Q9vVspxlGG6EyFiEodjAvj
u40YJXU0GopjvQaLqEaCuHPHMB/qkYyUpgAHKSSOvAMmuh6ic1mbMhwt7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4SHjbsnDvaUhkGxc55nCTYmRR7MB8GA1UdIwQY
MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt
OWE4MDNmNzM2YzRhLzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh
LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOhxCX1T
yO5WHZ2ReVUHl0ijG2n8T9IQuCR/tpWNA8mZs3qNslSh7RhAS9fETo3htXU/N4Sv
hTi85siRceT+6LvXv4pjFi0IWv/dAQ5AG7OLKsHVHhOdaNrWeADLlmG8hCsgg47p
/G/XXV8Sz0RrbfEmwAdO2IjGCk/CNo3iSL+kJ9TAjQr+pdKDfJT1/2V5SuXFgS38
inhByMDQOzb/GU/01LhsaJw636P6L/YsLv52FHbmhBV31yJ1UyX05/k+Au8NBToJ
FZaP8t/HdwsoSPzDWiBOfaGvf3sbiHfPIvegBcFHZKac2N+6HI5woXt09FMZBnVx
pmn0VSBitdVf6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:41 2026 by rpki-client