Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: DRgeOD70F+DbTeBN74nQNpNCX3oEY+XTr6mWVeSh6IU=
Subject key identifier: 3B:CE:FF:BA:64:33:58:5C:07:8A:0A:1E:40:3E:C9:37:86:24:EC:90
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 019D26CCF80F932380B149FCE03FA68B087F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0DD5
Signing time: Wed 25 Mar 2026 21:01:00 +0000
Manifest this update: Wed 25 Mar 2026 21:01:00 +0000
Manifest next update: Thu 26 Mar 2026 21:01:00 +0000
Files and hashes: 1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=)
2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: jygLBoNWhVYXQHjG+yz1HRgcxROqZbNuLO7bVsfxITs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f8:0f:93:23:80:b1:49:fc:e0:3f:a6:8b:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Mar 25 21:01:00 2026 GMT
Not After : Mar 26 21:01:00 2026 GMT
Subject: CN=3bceffba6433585c078a0a1e403ec9378624ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:de:c6:4c:e3:6a:15:81:a9:e5:16:e1:1c:
9d:99:05:6f:6d:78:79:b0:f2:1b:a3:d8:8f:49:2a:
59:e0:0f:1e:9f:2c:9e:58:9a:2f:d7:a5:0d:cb:00:
1a:d1:d0:db:cb:c3:48:4b:4c:b0:ff:f7:e7:67:5e:
9b:39:2c:4d:86:55:e4:ad:7a:ac:26:2d:4a:c7:a4:
b2:9d:a4:58:a6:ac:0d:2b:f8:76:bc:5e:16:c3:e5:
92:7b:61:a8:c0:1a:a0:65:25:fa:8d:87:d8:26:4e:
2f:51:c6:e7:2c:eb:57:1c:29:d3:08:f7:2e:87:b0:
80:89:a5:66:0f:35:2a:cc:32:95:fa:8b:b0:cb:7a:
10:1e:9e:9e:8e:d3:0f:08:8c:03:3e:7e:78:d2:ad:
8f:f4:97:6c:7a:4d:f7:24:0b:73:ec:59:0f:c3:c8:
11:f9:6a:46:28:38:e0:36:4f:a2:14:b1:80:a4:81:
2f:c0:20:ac:4d:b6:01:bc:70:38:3c:3a:ab:83:c3:
76:2e:1b:4e:f4:9a:6d:7a:87:3b:33:32:66:60:8e:
de:4e:4f:09:32:44:d3:6d:7e:0e:cd:17:d1:63:fc:
69:37:76:3f:f0:a2:47:f7:56:1e:8e:52:d9:e1:df:
50:b8:56:bc:9e:73:f8:99:5c:6b:f5:f0:f8:09:e2:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:FF:BA:64:33:58:5C:07:8A:0A:1E:40:3E:C9:37:86:24:EC:90
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8a:11:3d:01:2e:53:d4:5e:9a:44:18:01:9f:7c:3c:f5:e1:
10:79:59:6e:09:2c:a0:f1:7f:60:39:4b:89:f6:24:fd:36:32:
41:1c:48:3c:8c:98:69:77:77:50:d2:58:ca:35:c9:42:e0:c4:
2d:46:dc:cd:ea:64:ad:8e:b0:98:d8:c0:fa:ef:bd:ca:1f:19:
92:81:51:fa:de:19:e4:6b:3f:c3:7d:8a:1f:3f:8c:65:35:55:
43:12:c2:0f:78:3c:7c:e6:50:79:84:29:e7:4c:c9:af:09:ae:
91:a8:14:9d:8b:54:e1:9c:c8:16:69:91:11:0c:71:45:36:fc:
65:a3:75:ad:c5:03:d6:d0:08:e7:5f:c0:a5:4c:fb:75:78:1a:
8e:b7:a9:9a:22:95:99:8a:c6:cc:3c:9b:2c:85:cf:cd:80:f4:
4e:d1:97:a9:b4:04:e6:00:12:20:1e:3c:9a:a3:01:56:a4:31:
c9:ba:35:97:fe:3b:15:e4:18:6a:2f:52:48:82:55:72:1c:d0:
ba:bf:88:6a:f8:4b:28:98:ea:2a:dc:49:c8:86:f0:ac:e5:b9:
f8:2b:4c:98:86:e8:f7:81:c9:76:26:7c:30:3a:19:19:6c:c7:
ac:48:16:86:31:3f:a9:32:95:85:fe:f8:94:e2:5d:11:19:bf:
61:b8:d1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPgPkyOAsUn84D+miwh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTc2M2YwYzQ2N2FiYWE3MDFkOTY4YzM3NDljNmRhZDAz
NDg5YjAwHhcNMjYwMzI1MjEwMTAwWhcNMjYwMzI2MjEwMTAwWjAzMTEwLwYDVQQD
EygzYmNlZmZiYTY0MzM1ODVjMDc4YTBhMWU0MDNlYzkzNzg2MjRlYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gTexkzjahWBqeUW4RydmQVvbXh5
sPIbo9iPSSpZ4A8enyyeWJov16UNywAa0dDby8NIS0yw//fnZ16bOSxNhlXkrXqs
Ji1Kx6SynaRYpqwNK/h2vF4Ww+WSe2GowBqgZSX6jYfYJk4vUcbnLOtXHCnTCPcu
h7CAiaVmDzUqzDKV+ouwy3oQHp6ejtMPCIwDPn540q2P9Jdsek33JAtz7FkPw8gR
+WpGKDjgNk+iFLGApIEvwCCsTbYBvHA4PDqrg8N2LhtO9Jpteoc7MzJmYI7eTk8J
MkTTbX4OzRfRY/xpN3Y/8KJH91YejlLZ4d9QuFa8nnP4mVxr9fD4CeL2NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvO/7pkM1hcB4oKHkA+yTeGJOyQMB8GA1UdIwQY
MBaAFFinY/DEZ6uqcB2WjDdJxtrQNImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMt
MDk4ZjdjNWZkOTc1LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMtMDk4ZjdjNWZkOTc1
LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYoRPQEu
U9RemkQYAZ98PPXhEHlZbgksoPF/YDlLifYk/TYyQRxIPIyYaXd3UNJYyjXJQuDE
LUbczepkrY6wmNjA+u+9yh8ZkoFR+t4Z5Gs/w32KHz+MZTVVQxLCD3g8fOZQeYQp
50zJrwmukagUnYtU4ZzIFmmREQxxRTb8ZaN1rcUD1tAI51/ApUz7dXgajrepmiKV
mYrGzDybLIXPzYD0TtGXqbQE5gASIB48mqMBVqQxybo1l/47FeQYai9SSIJVchzQ
ur+IavhLKJjqKtxJyIbwrOW5+CtMmIbo94HJdiZ8MDoZGWzHrEgWhjE/qTKVhf74
lOJdERm/YbjRpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:57 2026 by rpki-client