Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: fm50A8GJOm3EIYfGXQgBEuFai3j+3eyiyOWbJEsNqLE=
Subject key identifier: 0F:91:88:12:63:96:E4:99:8A:6B:49:67:0D:DA:F0:85:DB:83:0C:42
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019D33079C2183B0105027EE1E4065AB4419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 06:00:29 +0000
Manifest this update: Sat 28 Mar 2026 06:00:29 +0000
Manifest next update: Sun 29 Mar 2026 06:00:29 +0000
Files and hashes: 1: KryCaxT64_DbJj9jN-VGjBxwrAo.roa (hash: Tm0gGiIBbT70VOlPTXJPfE+loxLa156dIkZIGPLoeOg=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: xfKdp5FHZ4nKYwuKNodUyHQ6cOikigDVqsTabXoJZJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:9c:21:83:b0:10:50:27:ee:1e:40:65:ab:44:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Mar 28 06:00:29 2026 GMT
Not After : Mar 29 06:00:29 2026 GMT
Subject: CN=0f9188126396e4998a6b49670ddaf085db830c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:47:af:0f:35:e7:27:9a:84:f3:e2:b2:63:
b5:97:91:78:f8:ae:c5:f2:77:36:73:66:45:65:1f:
88:15:1a:a5:e0:34:56:17:42:1e:a3:90:2c:90:c5:
83:d7:e9:44:9f:fa:85:c0:56:6b:04:dd:0f:aa:87:
b7:eb:26:ac:09:54:1e:95:19:a8:d0:df:1b:5a:d9:
65:cf:e4:53:2c:8d:c0:b8:5c:5c:c4:22:2b:15:8b:
d9:81:ec:f5:76:2e:42:e9:cb:27:39:bd:19:32:57:
15:84:72:a4:be:28:8e:d7:e6:76:c3:ba:3c:ee:d9:
05:d5:dc:cd:6a:20:c3:3e:6d:a5:96:f3:7d:8a:f1:
73:6f:cd:9e:b7:fd:b9:a8:10:00:c9:60:f9:6b:7a:
8b:c6:67:0d:b7:5f:4b:10:ed:3b:91:17:32:cd:3a:
c2:ef:a0:4c:15:c6:7a:fd:14:df:21:54:8b:8b:ea:
e8:7a:5f:4e:19:e6:5c:89:9f:9b:2b:f5:14:91:ed:
64:71:08:1f:f4:df:75:66:97:65:08:dc:ee:42:ae:
9e:b6:8d:9d:01:32:f5:5d:44:65:7d:b1:13:ef:46:
e0:b1:97:b8:7a:b4:ed:18:53:38:0e:be:56:e1:d1:
52:3d:b8:8e:f1:df:6a:6d:8a:7d:71:e5:50:5b:17:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:88:12:63:96:E4:99:8A:6B:49:67:0D:DA:F0:85:DB:83:0C:42
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:fb:7c:9b:82:28:08:86:6f:84:05:f4:8f:98:94:2c:df:
aa:29:0c:ed:d8:94:70:20:29:89:5c:23:cf:a8:e6:de:83:5a:
2b:a5:27:23:d0:80:63:dc:33:75:72:42:07:5a:ec:58:09:1d:
01:7a:d9:1f:63:5c:aa:5a:c8:c3:47:ea:81:32:aa:4e:f6:70:
e0:37:51:1e:ab:75:5c:a3:33:22:6c:c7:d4:ee:b0:0e:89:a6:
d3:ff:80:b3:56:d9:49:ec:8c:15:b2:76:71:45:22:aa:6d:ef:
8e:4e:9e:27:f2:f1:c8:d8:d8:00:d7:a4:fe:24:59:4b:93:26:
4f:6f:a4:84:79:52:0d:08:aa:54:24:ec:08:70:ff:f8:34:e3:
ba:3a:5f:0e:49:65:fc:24:aa:c0:7a:fd:6a:fb:2d:33:92:eb:
c5:78:a0:12:14:25:02:1b:5f:fd:b1:ee:a9:ed:e6:93:c2:60:
b0:6b:86:61:1e:0f:4f:4a:02:fb:f8:02:c8:3c:70:5d:14:67:
65:6d:32:a8:5b:c4:88:27:15:f4:93:39:c8:e3:57:b3:8a:91:
bb:c3:84:84:eb:fc:c9:38:16:1f:04:16:b1:f4:7b:f1:d9:aa:
00:ac:ad:10:db:3c:ea:05:9f:85:f7:79:c2:a3:72:c1:8a:fe:
f8:a1:33:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zB5whg7AQUCfuHkBlq0QZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDFjNWJjMDkxNWEyZjdjYjE2NWIwYjdkNzEzMjEyZmE1
NzMzMmQwHhcNMjYwMzI4MDYwMDI5WhcNMjYwMzI5MDYwMDI5WjAzMTEwLwYDVQQD
EygwZjkxODgxMjYzOTZlNDk5OGE2YjQ5NjcwZGRhZjA4NWRiODMwYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXlHrw815yeahPPismO1l5F4+K7F
8nc2c2ZFZR+IFRql4DRWF0Ieo5AskMWD1+lEn/qFwFZrBN0Pqoe36yasCVQelRmo
0N8bWtllz+RTLI3AuFxcxCIrFYvZgez1di5C6csnOb0ZMlcVhHKkviiO1+Z2w7o8
7tkF1dzNaiDDPm2llvN9ivFzb82et/25qBAAyWD5a3qLxmcNt19LEO07kRcyzTrC
76BMFcZ6/RTfIVSLi+roel9OGeZciZ+bK/UUke1kcQgf9N91ZpdlCNzuQq6eto2d
ATL1XURlfbET70bgsZe4erTtGFM4Dr5W4dFSPbiO8d9qbYp9ceVQWxeSUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+RiBJjluSZimtJZw3a8IXbgwxCMB8GA1UdIwQY
MBaAFMEBxbwJFaL3yxZbC31xMhL6VzMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4Zjct
OTI4ZDkxNzkxOTA3LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4ZjctOTI4ZDkxNzkxOTA3
LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQL7fJuC
KAiGb4QF9I+YlCzfqikM7diUcCApiVwjz6jm3oNaK6UnI9CAY9wzdXJCB1rsWAkd
AXrZH2NcqlrIw0fqgTKqTvZw4DdRHqt1XKMzImzH1O6wDomm0/+As1bZSeyMFbJ2
cUUiqm3vjk6eJ/LxyNjYANek/iRZS5MmT2+khHlSDQiqVCTsCHD/+DTjujpfDkll
/CSqwHr9avstM5LrxXigEhQlAhtf/bHuqe3mk8JgsGuGYR4PT0oC+/gCyDxwXRRn
ZW0yqFvEiCcV9JM5yONXs4qRu8OEhOv8yTgWHwQWsfR78dmqAKytENs86gWfhfd5
wqNywYr++KEz/A==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:47 2026 by rpki-client