Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File: wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier: wfJn6frPHlCcDgLR1vI7mI/4YzYNnwwqwjcGK9/Xtn8=
Subject key identifier: A1:BF:6E:7C:40:79:8F:03:F9:C3:BD:77:4D:94:32:0D:F7:C9:8B:CB
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer: /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial: 019D390A4EC9A77C35D4FFA0AD753C3EA29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number: 15DF
Signing time: Sun 29 Mar 2026 10:01:09 +0000
Manifest this update: Sun 29 Mar 2026 10:01:09 +0000
Manifest next update: Mon 30 Mar 2026 10:01:09 +0000
Files and hashes: 1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: NdxvnwYlWOkg1gVXw4lv7UwHSpKFkdHEp6sPVDRnAUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4e:c9:a7:7c:35:d4:ff:a0:ad:75:3c:3e:a2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Validity
Not Before: Mar 29 10:01:09 2026 GMT
Not After : Mar 30 10:01:09 2026 GMT
Subject: CN=a1bf6e7c40798f03f9c3bd774d94320df7c98bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:3b:b3:4a:2e:f9:f1:d2:33:84:a8:40:8e:
e3:6f:eb:fa:22:b1:bc:6d:dc:a2:70:e2:ce:81:c7:
dc:22:6c:f9:ae:8a:08:20:eb:1d:51:25:7c:68:39:
ef:b5:cf:75:1f:d1:b6:d4:98:a3:91:5c:7b:12:a4:
9b:be:55:62:38:be:a3:73:4e:74:f2:74:0f:d6:11:
a1:51:89:59:b1:08:55:9b:27:c4:91:ff:7f:f4:ab:
a8:2b:18:fe:38:64:58:f0:e9:86:c4:f3:0f:6a:ae:
44:ea:59:12:03:f4:d1:4a:3f:2a:4c:f4:d4:e5:3d:
5f:f9:8f:6c:38:12:31:55:c3:e7:05:ac:33:b2:08:
cb:b3:a3:bb:fd:3b:07:c6:3a:9c:e0:3b:f7:56:95:
80:09:b0:ed:f2:ce:a8:fe:85:81:bb:ae:2a:c3:f6:
59:b8:41:de:f7:24:ee:ca:cd:54:4e:f4:fa:cc:01:
56:0b:92:83:3d:80:75:81:f6:37:3b:c7:25:0f:db:
f4:06:90:e0:22:54:25:20:db:3c:7a:21:4c:c5:76:
e0:c4:06:9a:a1:e7:34:7d:da:76:42:7f:e2:87:fb:
5e:41:75:80:c0:6a:21:c4:2d:d4:81:d0:64:cf:17:
4d:c1:b2:1c:eb:d1:21:79:bd:5d:c1:f6:02:b4:3d:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:6E:7C:40:79:8F:03:F9:C3:BD:77:4D:94:32:0D:F7:C9:8B:CB
X509v3 Authority Key Identifier:
keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e8:7f:42:28:f3:9f:3c:53:fc:9d:0b:ed:69:64:3f:43:3d:
bf:d6:f4:89:48:83:83:d8:c8:e4:b7:f8:9e:c8:03:f6:73:2e:
59:7b:43:89:8c:8e:1b:3f:50:53:b0:20:a2:3f:b1:17:ea:b5:
df:03:01:f5:2e:1d:30:99:56:44:87:63:c2:2d:d2:d0:66:c7:
33:22:97:d1:80:9b:2c:3d:c6:e2:9d:e4:b9:87:5a:41:f2:84:
0e:5f:40:5b:2b:ab:b8:40:6e:55:dd:de:49:f5:a8:9b:ec:a0:
77:a5:7d:a7:c4:47:15:e5:bb:9c:2a:ac:9d:13:58:56:2e:ab:
43:5e:0d:0c:8e:d1:7d:d4:b2:25:23:5e:46:65:f7:48:95:10:
9f:47:9e:12:6a:9d:dd:e2:9d:35:be:d4:7f:97:c8:b8:36:26:
e5:56:fa:06:7c:19:4f:57:be:16:01:dd:5e:a2:2a:15:41:21:
6f:9e:82:71:84:db:ca:ab:89:fd:43:71:8d:7d:ea:f4:0f:2f:
b9:da:f5:bd:79:92:02:e6:13:62:6c:06:cf:95:3c:86:7f:d3:
b7:10:f8:52:96:da:f8:af:dc:db:79:ce:e5:30:7a:5d:92:9f:
76:dc:06:73:c5:57:b9:6d:60:64:3d:88:a7:38:26:61:8f:ff:
a6:75:5d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ck7Jp3w11P+grXU8PqKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWUzOThmOWFhZGQwNjM4YmZmZWEyNGMxYzc5ZWI4ODMy
Zjc4NzUwHhcNMjYwMzI5MTAwMTA5WhcNMjYwMzMwMTAwMTA5WjAzMTEwLwYDVQQD
EyhhMWJmNmU3YzQwNzk4ZjAzZjljM2JkNzc0ZDk0MzIwZGY3Yzk4YmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiE7s0ou+fHSM4SoQI7jb+v6IrG8
bdyicOLOgcfcImz5rooIIOsdUSV8aDnvtc91H9G21JijkVx7EqSbvlViOL6jc050
8nQP1hGhUYlZsQhVmyfEkf9/9KuoKxj+OGRY8OmGxPMPaq5E6lkSA/TRSj8qTPTU
5T1f+Y9sOBIxVcPnBawzsgjLs6O7/TsHxjqc4Dv3VpWACbDt8s6o/oWBu64qw/ZZ
uEHe9yTuys1UTvT6zAFWC5KDPYB1gfY3O8clD9v0BpDgIlQlINs8eiFMxXbgxAaa
oec0fdp2Qn/ih/teQXWAwGohxC3UgdBkzxdNwbIc69Eheb1dwfYCtD3jgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG/bnxAeY8D+cO9d02UMg33yYvLMB8GA1UdIwQY
MBaAFMGuOY+ardBji//qJMHHnriDL3h1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzct
OWQ1ZTYzNGFhZjlmLzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzctOWQ1ZTYzNGFhZjlm
LzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreh/Qijz
nzxT/J0L7WlkP0M9v9b0iUiDg9jI5Lf4nsgD9nMuWXtDiYyOGz9QU7Agoj+xF+q1
3wMB9S4dMJlWRIdjwi3S0GbHMyKX0YCbLD3G4p3kuYdaQfKEDl9AWyuruEBuVd3e
SfWom+ygd6V9p8RHFeW7nCqsnRNYVi6rQ14NDI7RfdSyJSNeRmX3SJUQn0eeEmqd
3eKdNb7Uf5fIuDYm5Vb6BnwZT1e+FgHdXqIqFUEhb56CcYTbyquJ/UNxjX3q9A8v
udr1vXmSAuYTYmwGz5U8hn/TtxD4Upba+K/c23nO5TB6XZKfdtwGc8VXuW1gZD2I
pzgmYY//pnVdiw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:40 2026 by rpki-client