Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: U/gj2gnaZhUWqko+04cRKKABjm939a/Ru1ZHVj1/SJc=
Subject key identifier: 8A:92:B9:56:75:1F:DE:66:FC:82:E7:2A:C6:BA:46:0C:A3:79:E5:2F
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 019D2961519A85C20FFD5C71B45394294A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 16F0
Signing time: Thu 26 Mar 2026 09:02:16 +0000
Manifest this update: Thu 26 Mar 2026 09:02:16 +0000
Manifest next update: Fri 27 Mar 2026 09:02:16 +0000
Files and hashes: 1: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: PGCFtYkiRZF4pjnyJ2p3Y7FPMeGe1syjC47gBtQwHug=)
2: deK62GymHjI7pPHou_DnpOMbHoY.roa (hash: Z9L1mrfYyQRlpKO8mVrybo46X8ByziZzKGq7WcbtlNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:51:9a:85:c2:0f:fd:5c:71:b4:53:94:29:4a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Mar 26 09:02:16 2026 GMT
Not After : Mar 27 09:02:16 2026 GMT
Subject: CN=8a92b956751fde66fc82e72ac6ba460ca379e52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:42:f3:67:e2:a8:78:3c:ce:0e:fc:17:85:
32:bf:fd:44:30:9e:69:97:01:ed:7f:3b:2c:d6:d7:
14:95:9e:e0:9e:b4:c5:5c:91:c4:5c:74:10:c8:c4:
0b:28:8c:9e:15:05:f8:ad:af:8b:5d:d9:9d:a0:85:
c6:f1:43:86:c6:bf:0b:1e:dc:a2:54:67:9d:13:33:
3e:73:9f:6c:9c:31:29:08:16:92:09:23:6b:53:d7:
5a:b4:ae:5f:0a:e1:6f:ce:48:73:e2:a2:94:44:62:
d5:c7:a5:bf:5c:62:a8:bb:4b:1b:d8:b3:6a:1e:d0:
15:b7:41:90:8e:f0:88:e4:42:14:ee:f6:a3:49:d6:
18:a5:3e:14:63:a4:22:d7:7f:63:6c:ce:5b:66:a5:
ea:24:f9:5c:77:4a:7d:60:1c:4b:ec:5c:f5:f5:e1:
50:ce:eb:8e:52:31:e9:50:31:a9:89:22:7d:89:21:
83:08:68:73:df:74:f3:89:6f:fc:ba:36:2e:2c:df:
ae:af:7a:56:e3:3b:81:c3:e5:f0:85:ac:26:d9:c5:
e1:e7:83:7f:53:01:80:8c:29:42:d8:cf:54:51:7e:
a8:a8:c6:c9:78:4a:be:a4:06:3c:a1:4f:8c:83:6f:
9a:bb:56:c3:d5:97:59:ed:fd:e4:9b:00:62:1b:ab:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:B9:56:75:1F:DE:66:FC:82:E7:2A:C6:BA:46:0C:A3:79:E5:2F
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:88:90:ec:57:15:81:91:48:64:d0:6e:d5:01:9f:f2:1f:c7:
04:bb:66:5a:c5:fc:ae:69:25:66:a9:fd:d7:1b:bd:50:79:3e:
85:04:52:66:d2:67:e8:de:b7:27:3e:7c:12:7e:f1:33:94:dd:
6c:77:7f:4e:d1:d6:69:cb:5f:87:9f:ca:c5:83:d3:6f:cc:79:
bf:58:80:a5:e6:3f:63:5f:68:bf:4e:ff:f0:4c:28:eb:93:3c:
89:ac:81:87:b4:2f:cf:5e:0d:ab:9f:e0:73:cf:70:d3:97:6c:
1e:f9:26:7c:a0:f2:30:8a:5d:ed:dd:be:0b:8d:be:8e:98:12:
ef:33:36:50:39:93:19:9e:e6:48:e4:6d:cf:a5:96:c4:17:1c:
29:d4:71:68:60:db:b0:fb:36:0e:ed:00:75:dc:04:f6:8b:d3:
4d:b9:3e:aa:71:22:b2:af:22:a1:db:e5:47:3b:ea:fb:ed:c2:
ba:74:b9:19:b7:1e:a8:ea:55:ba:93:7d:72:aa:fe:dd:c5:e3:
70:32:ed:5a:5f:5c:c4:cb:60:e6:2b:a3:b8:43:48:cd:f3:7f:
13:f0:8c:dd:bf:9a:88:ff:5c:7c:7a:25:ed:45:e0:f4:17:ed:
25:61:39:5e:5d:3c:16:64:cf:78:19:aa:1c:ed:dd:7d:43:21:
51:ee:bc:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYVGahcIP/VxxtFOUKUomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOGQzODkyNzg0ODVlZGQ1MGQzMmNmNWNhODRjZTI3Mjhj
MDhjYzYwHhcNMjYwMzI2MDkwMjE2WhcNMjYwMzI3MDkwMjE2WjAzMTEwLwYDVQQD
Eyg4YTkyYjk1Njc1MWZkZTY2ZmM4MmU3MmFjNmJhNDYwY2EzNzllNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk79C82fiqHg8zg78F4Uyv/1EMJ5p
lwHtfzss1tcUlZ7gnrTFXJHEXHQQyMQLKIyeFQX4ra+LXdmdoIXG8UOGxr8LHtyi
VGedEzM+c59snDEpCBaSCSNrU9datK5fCuFvzkhz4qKURGLVx6W/XGKou0sb2LNq
HtAVt0GQjvCI5EIU7vajSdYYpT4UY6Qi139jbM5bZqXqJPlcd0p9YBxL7Fz19eFQ
zuuOUjHpUDGpiSJ9iSGDCGhz33TziW/8ujYuLN+ur3pW4zuBw+Xwhawm2cXh54N/
UwGAjClC2M9UUX6oqMbJeEq+pAY8oU+Mg2+au1bD1ZdZ7f3kmwBiG6sT/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqSuVZ1H95m/ILnKsa6RgyjeeUvMB8GA1UdIwQY
MBaAFFqNOJJ4SF7dUNMs9cqEzicowIzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAt
NTJiY2NiMDZhZjNjLzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAtNTJiY2NiMDZhZjNj
LzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYiQ7FcV
gZFIZNBu1QGf8h/HBLtmWsX8rmklZqn91xu9UHk+hQRSZtJn6N63Jz58En7xM5Td
bHd/TtHWactfh5/KxYPTb8x5v1iApeY/Y19ov07/8Ewo65M8iayBh7Qvz14Nq5/g
c89w05dsHvkmfKDyMIpd7d2+C42+jpgS7zM2UDmTGZ7mSORtz6WWxBccKdRxaGDb
sPs2Du0AddwE9ovTTbk+qnEisq8iodvlRzvq++3CunS5GbceqOpVupN9cqr+3cXj
cDLtWl9cxMtg5iujuENIzfN/E/CM3b+aiP9cfHol7UXg9BftJWE5Xl08FmTPeBmq
HO3dfUMhUe68hg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:49 2026 by rpki-client