Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
File: wIneL0L89EpNqraoJMEgq7i3Fl0.mft (raw, json)
Hash identifier: 0yfHikLE3xSZGmtlJAPrdd53xPkkB2x/rz92mFkWYQg=
Subject key identifier: AA:33:31:7D:C1:45:B5:0E:80:BB:7B:7E:CF:FB:4D:3E:58:B4:D4:C9
Authority key identifier: C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
Certificate issuer: /CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Certificate serial: 019D2772841D0CB1C404686141E876E0EB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
Manifest number: 0235
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: I3Xf9VKD-tJpcuIxLlSODq6ARfU.roa (hash: 7g0Zv7NUV1llXr3xxVw2ZytxF911Q+NrrEu/LVgTpkk=)
2: W1e0EWYLXXz7WEE9jIFX4zFwLi8.roa (hash: MBpCLgOals90jJpQV95qSwbxGgxUH35zT0YlklNTg2M=)
3: wIneL0L89EpNqraoJMEgq7i3Fl0.crl (hash: iUJPXYWu9lNAYq0nMs5b2eIehM4BZGAuh4sijM14OGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:84:1d:0c:b1:c4:04:68:61:41:e8:76:e0:eb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=aa33317dc145b50e80bb7b7ecffb4d3e58b4d4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:ce:9e:d2:30:c7:ce:5c:87:de:a4:14:13:
ae:20:f7:07:65:82:5c:4f:cc:8d:de:ad:8c:23:e3:
55:0d:f4:ee:56:df:51:a5:61:00:d4:40:1c:be:5e:
d8:9b:45:e1:97:55:1a:de:0e:97:b8:6c:6f:c0:1d:
30:68:0a:b2:41:9b:14:70:c2:3c:2a:4b:e7:52:07:
11:c6:74:a2:c2:68:de:76:c4:92:47:33:60:c4:3d:
b2:97:7f:4b:b7:87:f3:8c:cd:7d:56:d1:50:6a:db:
e6:ec:3c:ec:46:df:70:89:96:f1:e3:ec:ae:4d:11:
c5:9c:22:25:4e:cc:f1:78:c2:0f:6a:c6:04:59:7e:
e1:b3:cd:8e:26:9b:da:f1:ea:67:df:d9:0a:77:47:
ad:28:80:43:3a:de:4a:d0:9b:08:7f:4f:d7:62:0c:
a3:43:15:e0:ba:28:0b:9b:63:bc:ed:f0:fb:90:d4:
db:ff:ec:0c:73:a6:54:cf:4f:51:3a:73:4a:a1:5c:
44:19:c9:0a:29:07:62:8c:4d:71:74:b6:2a:df:e6:
d6:e9:93:6e:76:86:d8:42:95:1e:bc:3b:5b:4a:3d:
4e:b4:10:f3:14:51:d3:89:a3:79:ea:d4:0c:a6:f8:
db:42:ef:75:5a:4e:8e:91:2d:a0:2d:7f:ad:0e:13:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:31:7D:C1:45:B5:0E:80:BB:7B:7E:CF:FB:4D:3E:58:B4:D4:C9
X509v3 Authority Key Identifier:
keyid:C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:20:13:37:6c:00:56:e8:5e:f3:27:d5:d7:d0:60:d4:b7:d3:
20:dd:96:67:98:68:e3:8e:19:b4:58:0d:2e:b5:c5:72:38:27:
49:4b:32:72:30:75:1c:fb:85:22:49:e2:c3:bd:97:3f:ec:cc:
3c:31:2d:f9:c8:92:0a:02:bb:b1:3c:78:a2:f6:23:5d:6c:ff:
8b:2e:23:72:9e:44:44:56:47:cb:a6:1f:fd:53:01:6b:fd:82:
1a:09:78:ef:ef:ef:6b:a8:ea:87:ba:3a:70:36:72:f3:52:42:
42:4d:e5:d8:db:51:50:63:95:23:61:6e:31:4c:59:4d:59:5f:
89:32:91:b0:e7:69:e5:af:61:98:2c:3a:4d:52:ef:91:75:55:
43:f8:f9:8e:f5:bc:1f:f0:32:c0:61:e4:df:3d:eb:a7:10:3c:
0c:59:4a:5d:bb:26:b7:dd:2a:0b:d0:26:ad:78:75:3c:6a:de:
84:b2:f1:65:3c:e1:13:bd:46:18:be:64:ce:26:25:47:ba:c0:
db:cb:59:52:75:4d:e6:8a:c0:a6:b7:35:28:b2:26:27:d8:5b:
89:29:71:88:a5:5b:1b:4b:f1:fb:f1:56:3a:f4:58:aa:35:f6:
a3:db:d6:bd:b8:d4:7b:37:2d:d5:1c:39:92:09:8c:9a:81:87:
c4:e8:d1:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncoQdDLHEBGhhQeh24OsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODlkZTJmNDJmY2Y0NGE0ZGFhYjZhODI0YzEyMGFiYjhi
NzE2NWQwHhcNMjYwMzI2MDAwMTQ5WhcNMjYwMzI3MDAwMTQ5WjAzMTEwLwYDVQQD
EyhhYTMzMzE3ZGMxNDViNTBlODBiYjdiN2VjZmZiNGQzZTU4YjRkNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rTOntIwx85ch96kFBOuIPcHZYJc
T8yN3q2MI+NVDfTuVt9RpWEA1EAcvl7Ym0Xhl1Ua3g6XuGxvwB0waAqyQZsUcMI8
KkvnUgcRxnSiwmjedsSSRzNgxD2yl39Lt4fzjM19VtFQatvm7DzsRt9wiZbx4+yu
TRHFnCIlTszxeMIPasYEWX7hs82OJpva8epn39kKd0etKIBDOt5K0JsIf0/XYgyj
QxXguigLm2O87fD7kNTb/+wMc6ZUz09ROnNKoVxEGckKKQdijE1xdLYq3+bW6ZNu
dobYQpUevDtbSj1OtBDzFFHTiaN56tQMpvjbQu91Wk6OkS2gLX+tDhN40wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKozMX3BRbUOgLt7fs/7TT5YtNTJMB8GA1UdIwQY
MBaAFMCJ3i9C/PRKTaq2qCTBIKu4txZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0luZUwwTDg5RXBOcXJhb0pNRWdxN2kzRmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YmI0MTYtYmE4Zi00OWE3LWI1YWEt
ZWUyZGMyODYwZDViLzEvd0luZUwwTDg5RXBOcXJhb0pNRWdxN2kzRmwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83YmI0MTYtYmE4Zi00OWE3LWI1YWEtZWUyZGMyODYwZDVi
LzEvd0luZUwwTDg5RXBOcXJhb0pNRWdxN2kzRmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSATN2wA
Vuhe8yfV19Bg1LfTIN2WZ5ho444ZtFgNLrXFcjgnSUsycjB1HPuFIkniw72XP+zM
PDEt+ciSCgK7sTx4ovYjXWz/iy4jcp5ERFZHy6Yf/VMBa/2CGgl47+/va6jqh7o6
cDZy81JCQk3l2NtRUGOVI2FuMUxZTVlfiTKRsOdp5a9hmCw6TVLvkXVVQ/j5jvW8
H/AywGHk3z3rpxA8DFlKXbsmt90qC9AmrXh1PGrehLLxZTzhE71GGL5kziYlR7rA
28tZUnVN5orAprc1KLImJ9hbiSlxiKVbG0vx+/FWOvRYqjX2o9vWvbjUezct1Rw5
kgmMmoGHxOjRCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:27 2026 by rpki-client