Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier: 9OlkAPgtG41lLsBeNeEhpPDJQSaj/GfHf3fbjcf5v2M=
Subject key identifier: 8A:3F:2B:1B:C6:3B:A1:ED:80:63:09:08:6E:69:0B:91:B3:81:C3:B5
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial: 019D265EF6558B1AF1DB8199F53F83F6C1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: qfg126YnZbWOAD6xVjQ+JrMQ+BpDa+LLCMwbj4Skmvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f6:55:8b:1a:f1:db:81:99:f5:3f:83:f6:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=8a3f2b1bc63ba1ed806309086e690b91b381c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:65:c5:83:ca:cf:b8:1d:38:92:6f:88:fb:
a5:e1:43:93:38:02:be:06:26:14:03:8c:8f:bb:c2:
68:a3:8e:22:1e:53:23:e8:70:e1:dd:a7:d2:6c:f3:
52:70:b9:a5:8c:9f:f0:6a:4c:60:e1:ce:4f:68:da:
8d:32:0e:1a:d8:c1:78:ef:86:42:2b:fe:71:09:80:
d4:70:a8:5c:e9:c3:0d:c8:14:c3:a2:88:d0:a2:d0:
84:60:c1:f2:70:f8:0c:99:85:0e:38:d4:ae:3b:37:
72:b9:bd:f7:39:24:da:9a:fa:06:49:74:69:7e:06:
50:f7:12:c9:04:36:40:0e:6a:00:46:cf:d4:a8:4b:
ea:12:95:c4:28:d7:e7:12:11:af:13:51:48:0e:59:
0d:47:ea:66:76:8a:9c:13:18:74:b4:a2:9c:7e:c8:
34:0e:b2:89:ca:1f:40:02:bb:ed:1f:cf:1c:58:f4:
05:f4:47:a3:6a:35:bd:e0:f0:ba:e4:a3:8e:eb:7a:
b9:45:ef:ed:23:14:13:30:e9:cf:3d:93:0c:2e:93:
05:df:c1:b3:22:d2:54:3b:d7:54:88:c8:6d:e8:55:
4b:e9:41:0d:b6:72:7d:2d:1d:da:37:12:21:c4:64:
03:bd:f2:9d:92:7a:c4:2e:08:db:6a:26:10:22:c6:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:2B:1B:C6:3B:A1:ED:80:63:09:08:6E:69:0B:91:B3:81:C3:B5
X509v3 Authority Key Identifier:
keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4b:78:7a:78:1b:ee:af:95:3f:39:d0:8e:09:a2:9b:9a:ae:
13:21:f4:84:0b:82:f3:5f:75:c7:37:03:19:05:95:52:47:4c:
da:25:97:2d:89:43:b0:c6:d2:3c:38:99:ce:36:d4:48:3d:d3:
cf:8b:bf:0d:ec:84:9f:6a:b9:59:d1:aa:fc:e5:09:07:4d:ad:
59:55:5e:73:82:ad:24:ca:b0:70:43:6c:ab:ca:12:46:05:18:
99:44:f8:b5:64:8d:78:cd:1b:5f:fd:27:0d:5b:00:f5:4e:4f:
bd:2d:27:31:af:e0:ee:cd:6f:e8:93:f7:e9:ca:3d:9d:95:6f:
e8:c0:52:85:b8:b2:be:f2:55:fb:1a:46:21:70:d4:99:cf:57:
63:3f:bb:93:99:84:e8:69:74:bb:25:90:56:3f:5a:45:e1:93:
8e:fa:3b:0a:a5:0f:51:a3:47:d0:5b:cd:49:1c:1b:7c:7c:0d:
de:ec:2f:92:04:9f:4f:1e:6d:da:ca:39:01:68:8d:ee:0d:05:
b9:e7:29:96:57:2c:3e:69:d4:48:6c:2a:da:6a:99:54:6b:8e:
24:1f:13:9a:8f:ad:90:31:57:f5:cb:24:85:8d:bd:d3:5b:6c:
c3:23:74:2a:d4:78:18:58:62:11:33:bc:6e:77:d9:25:ff:4a:
5c:25:97:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXvZVixrx24GZ9T+D9sHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzU2ZWI0M2YyMjBlYjUxNDFlZDg2MTUzMGFmZjI1MjFi
MjFlZWQwHhcNMjYwMzI1MTkwMDUwWhcNMjYwMzI2MTkwMDUwWjAzMTEwLwYDVQQD
Eyg4YTNmMmIxYmM2M2JhMWVkODA2MzA5MDg2ZTY5MGI5MWIzODFjM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrdlxYPKz7gdOJJviPul4UOTOAK+
BiYUA4yPu8Joo44iHlMj6HDh3afSbPNScLmljJ/wakxg4c5PaNqNMg4a2MF474ZC
K/5xCYDUcKhc6cMNyBTDoojQotCEYMHycPgMmYUOONSuOzdyub33OSTamvoGSXRp
fgZQ9xLJBDZADmoARs/UqEvqEpXEKNfnEhGvE1FIDlkNR+pmdoqcExh0tKKcfsg0
DrKJyh9AArvtH88cWPQF9EejajW94PC65KOO63q5Re/tIxQTMOnPPZMMLpMF38Gz
ItJUO9dUiMht6FVL6UENtnJ9LR3aNxIhxGQDvfKdknrELgjbaiYQIsYFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo/KxvGO6HtgGMJCG5pC5GzgcO1MB8GA1UdIwQY
MBaAFMLFbrQ/Ig61FB7YYVMK/yUhsh7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEt
MDk4MmJiZDMxZGQ0LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEtMDk4MmJiZDMxZGQ0
LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckt4engb
7q+VPznQjgmim5quEyH0hAuC8191xzcDGQWVUkdM2iWXLYlDsMbSPDiZzjbUSD3T
z4u/DeyEn2q5WdGq/OUJB02tWVVec4KtJMqwcENsq8oSRgUYmUT4tWSNeM0bX/0n
DVsA9U5PvS0nMa/g7s1v6JP36co9nZVv6MBShbiyvvJV+xpGIXDUmc9XYz+7k5mE
6Gl0uyWQVj9aReGTjvo7CqUPUaNH0FvNSRwbfHwN3uwvkgSfTx5t2so5AWiN7g0F
uecpllcsPmnUSGwq2mqZVGuOJB8Tmo+tkDFX9cskhY2901tswyN0KtR4GFhiETO8
bnfZJf9KXCWXHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:20 2026 by rpki-client