Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: Ip4zEe+ah6tRiQIraUjUWqEakI1y/ANF6zExfsH8O0o=
Subject key identifier: 82:09:C6:DF:31:69:3E:13:F2:39:DA:15:6B:96:52:3F:BF:9B:53:0F
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019D2A044CFE8AB8B688734E29215AA52F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0A96
Signing time: Thu 26 Mar 2026 12:00:18 +0000
Manifest this update: Thu 26 Mar 2026 12:00:18 +0000
Manifest next update: Fri 27 Mar 2026 12:00:18 +0000
Files and hashes: 1: J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa (hash: jjyUi8oIJbqLLegunqtnt7RNSdcYKaaZ3m2h96zldCM=)
2: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: FWyVDMqH4wCi7nTE4TvL+6Jm/3F3qMWXgUonZOQuulw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:4c:fe:8a:b8:b6:88:73:4e:29:21:5a:a5:2f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Mar 26 12:00:18 2026 GMT
Not After : Mar 27 12:00:18 2026 GMT
Subject: CN=8209c6df31693e13f239da156b96523fbf9b530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:8d:87:bf:d7:a9:d2:fc:cb:81:3e:97:fe:
14:b5:7d:2c:2c:05:f4:d4:ae:49:6f:c7:31:43:48:
25:62:89:4f:36:55:f3:cb:76:dc:53:7b:44:47:5b:
41:76:4a:0d:b8:ab:93:ed:bc:fb:79:53:2e:5f:c6:
9d:a1:2b:0c:28:53:96:c4:59:3a:be:03:2a:4f:b9:
1a:57:9a:4c:a4:44:43:51:9e:fd:2b:e1:74:b9:0d:
d4:bf:59:ba:59:ec:59:43:3b:77:f6:a2:bd:29:8f:
1a:56:57:28:e8:80:2e:e8:e1:e1:58:12:87:2f:59:
ea:a8:e5:ac:c7:2d:c5:7e:4d:ea:cd:1b:3a:f1:f0:
b0:79:80:52:75:cf:b2:9d:48:c1:d2:2a:b2:37:de:
39:a8:c7:94:dc:88:b9:aa:bb:29:c4:54:9d:1c:5e:
fb:22:1c:5c:14:03:63:4c:c2:0a:d1:6a:cc:0b:52:
c3:3e:c4:a9:38:b9:a3:d1:4b:75:3a:ec:10:35:60:
11:bb:7e:c2:a9:bf:4d:69:14:43:07:5d:21:15:57:
6c:a6:cb:a6:4d:9a:f2:2a:a4:cf:84:32:59:42:99:
2b:c1:f2:15:14:24:da:19:bd:14:65:b9:f9:36:ce:
fc:f9:ca:55:3d:ec:da:19:e0:30:97:09:99:c6:2b:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:C6:DF:31:69:3E:13:F2:39:DA:15:6B:96:52:3F:BF:9B:53:0F
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:ae:19:c5:6b:8e:0c:9f:0f:88:a1:87:93:0a:2d:93:64:
5b:36:f3:68:c5:b4:52:1d:2c:19:5c:74:85:1e:06:1e:b0:16:
e4:f7:92:c3:79:4b:6c:a9:b0:27:87:26:1b:ea:3d:41:9d:f3:
d5:31:63:5a:50:aa:b8:51:e2:63:8f:26:0f:e5:d0:bc:18:1f:
c4:3c:7e:db:38:87:ab:97:7c:25:f2:8f:93:70:d6:db:78:6c:
26:1e:b0:0c:0f:c8:a5:ec:50:77:7f:48:86:2f:25:97:aa:3c:
41:bb:47:c4:1d:d8:7c:c0:49:fd:0e:bc:3c:73:a5:9e:f9:1b:
92:06:82:38:be:c0:54:87:b7:40:9f:00:42:35:8b:ab:a7:8a:
1d:d8:e1:58:a5:42:4e:a7:c2:63:52:31:42:84:ff:c8:cd:24:
b1:c4:f4:3c:76:ed:7f:fd:f1:25:21:bd:74:6d:56:02:d0:f5:
d0:25:c7:81:2a:a2:c8:b3:46:5a:46:28:bf:7e:e3:9e:2f:12:
38:27:ed:ac:b0:d4:9a:75:95:68:8e:cf:f3:77:d0:2f:88:ed:
d7:4c:39:db:ec:07:6d:3b:da:ed:93:3e:f6:d4:2e:1d:6d:73:
2f:8b:f6:ca:d8:fd:f6:8c:1b:e7:3c:96:f2:d3:b0:02:0e:1b:
de:c1:0c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBEz+iri2iHNOKSFapS8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl
YTYzYjUwHhcNMjYwMzI2MTIwMDE4WhcNMjYwMzI3MTIwMDE4WjAzMTEwLwYDVQQD
Eyg4MjA5YzZkZjMxNjkzZTEzZjIzOWRhMTU2Yjk2NTIzZmJmOWI1MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjeNh7/XqdL8y4E+l/4UtX0sLAX0
1K5Jb8cxQ0glYolPNlXzy3bcU3tER1tBdkoNuKuT7bz7eVMuX8adoSsMKFOWxFk6
vgMqT7kaV5pMpERDUZ79K+F0uQ3Uv1m6WexZQzt39qK9KY8aVlco6IAu6OHhWBKH
L1nqqOWsxy3Ffk3qzRs68fCweYBSdc+ynUjB0iqyN945qMeU3Ii5qrspxFSdHF77
IhxcFANjTMIK0WrMC1LDPsSpOLmj0Ut1OuwQNWARu37Cqb9NaRRDB10hFVdspsum
TZryKqTPhDJZQpkrwfIVFCTaGb0UZbn5Ns78+cpVPezaGeAwlwmZxisXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIJxt8xaT4T8jnaFWuWUj+/m1MPMB8GA1UdIwQY
MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt
ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj
LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSWuGcVr
jgyfD4ihh5MKLZNkWzbzaMW0Uh0sGVx0hR4GHrAW5PeSw3lLbKmwJ4cmG+o9QZ3z
1TFjWlCquFHiY48mD+XQvBgfxDx+2ziHq5d8JfKPk3DW23hsJh6wDA/IpexQd39I
hi8ll6o8QbtHxB3YfMBJ/Q68PHOlnvkbkgaCOL7AVIe3QJ8AQjWLq6eKHdjhWKVC
TqfCY1IxQoT/yM0kscT0PHbtf/3xJSG9dG1WAtD10CXHgSqiyLNGWkYov37jni8S
OCftrLDUmnWVaI7P83fQL4jt10w52+wHbTva7ZM+9tQuHW1zL4v2ytj99owb5zyW
8tOwAg4b3sEM9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:02 2026 by rpki-client