Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: a+L9U6BG6nEE/J1k1dIp5SpuazMnznDUFO0wluYupOc=
Subject key identifier: E1:69:EA:18:88:75:49:13:35:DF:B5:8C:E0:35:9A:40:59:9B:38:A0
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019D23CC4B99683E5F0A352B8ABF8D1FAEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 03EE
Signing time: Wed 25 Mar 2026 07:01:24 +0000
Manifest this update: Wed 25 Mar 2026 07:01:24 +0000
Manifest next update: Thu 26 Mar 2026 07:01:24 +0000
Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: JtAFmItW/AUKB7VuPPUH8ghnNRQhojITqT1PpP9PvSg=)
2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:cc:4b:99:68:3e:5f:0a:35:2b:8a:bf:8d:1f:ae:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Mar 25 07:01:24 2026 GMT
Not After : Mar 26 07:01:24 2026 GMT
Subject: CN=e169ea188875491335dfb58ce0359a40599b38a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:ec:d7:00:09:66:51:fd:71:52:68:6c:7d:
72:e0:2b:60:0b:b7:dd:f9:6e:d8:2f:90:8f:3e:f6:
3e:10:80:58:46:fe:f2:0d:db:af:4a:93:a2:d9:a6:
24:d1:23:e2:a9:bf:f9:83:8d:39:e7:8a:fc:3a:6e:
be:6b:39:93:be:3e:0c:82:40:fc:4d:18:e3:49:a0:
2a:c3:9a:fe:47:18:9a:09:29:fc:cf:04:07:94:3f:
62:1d:53:cb:14:d7:af:92:f4:be:e6:45:9c:cf:4c:
ff:39:cb:83:81:6e:8f:94:bd:3c:17:2c:68:b9:3b:
d2:cd:ba:b0:93:f2:66:dc:9f:53:17:8a:d5:71:0a:
86:80:51:09:f8:e2:6e:16:62:07:63:a8:d5:23:da:
ff:ac:19:8c:4d:e5:7f:32:d4:1e:5f:74:81:a2:41:
57:4b:f3:9f:87:21:02:24:79:99:c1:9e:0a:e0:36:
c9:0c:e3:e2:9d:fd:05:39:1f:9b:34:6e:30:0f:dd:
95:a5:94:a9:ed:af:90:8b:bd:ba:01:c3:08:1b:3a:
20:d2:25:68:8a:01:9b:90:13:48:15:07:a2:3c:7d:
ad:d9:6b:06:f8:4b:2f:be:44:29:d6:c2:77:d1:24:
b9:6b:3f:e0:17:33:17:18:68:79:76:7f:41:55:08:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:EA:18:88:75:49:13:35:DF:B5:8C:E0:35:9A:40:59:9B:38:A0
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c7:aa:dd:e3:fc:1c:8a:22:8c:9f:d2:59:3f:b9:03:ae:2f:
04:92:82:c2:98:b7:63:3e:52:c9:f7:1c:9e:18:d5:d3:af:8f:
05:60:7c:06:ab:a2:6e:a7:da:dc:81:4e:e1:68:53:10:fa:42:
5c:c8:5f:68:30:d2:6c:4a:70:74:d0:53:7c:4e:b2:23:6b:4c:
cf:56:a7:2e:ba:e2:7a:84:4b:ee:c5:e6:f0:c0:35:d4:ad:a9:
3c:d5:0a:7d:77:29:b1:50:43:22:97:05:3f:90:da:66:d0:25:
2b:97:ef:6f:b6:c0:4c:16:0c:ce:53:ff:3b:16:d8:ed:e8:52:
52:de:6d:72:b5:a8:c5:6d:04:aa:5c:5e:6f:91:78:72:f9:e9:
68:91:c8:0d:93:97:58:93:9b:11:43:29:1d:a2:d7:ca:db:96:
f9:ae:2d:ef:9e:15:ca:c2:4d:4d:75:ac:8b:fe:83:0c:fa:b8:
2e:3b:9e:b2:2d:0c:0f:39:ec:8e:94:d1:ec:96:76:25:66:e8:
e8:32:46:37:37:55:86:4c:4e:9c:da:04:80:ec:a2:17:67:55:
df:42:10:42:32:e4:72:19:48:a2:a1:23:63:52:97:88:7d:de:
a8:bc:a6:24:a5:0d:ef:d7:0b:6d:0f:c2:fa:74:7c:b6:10:c8:
35:28:f2:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0jzEuZaD5fCjUrir+NH676MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw
N2ExMjIwHhcNMjYwMzI1MDcwMTI0WhcNMjYwMzI2MDcwMTI0WjAzMTEwLwYDVQQD
EyhlMTY5ZWExODg4NzU0OTEzMzVkZmI1OGNlMDM1OWE0MDU5OWIzOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ans1wAJZlH9cVJobH1y4CtgC7fd
+W7YL5CPPvY+EIBYRv7yDduvSpOi2aYk0SPiqb/5g40554r8Om6+azmTvj4MgkD8
TRjjSaAqw5r+RxiaCSn8zwQHlD9iHVPLFNevkvS+5kWcz0z/OcuDgW6PlL08Fyxo
uTvSzbqwk/Jm3J9TF4rVcQqGgFEJ+OJuFmIHY6jVI9r/rBmMTeV/MtQeX3SBokFX
S/OfhyECJHmZwZ4K4DbJDOPinf0FOR+bNG4wD92VpZSp7a+Qi726AcMIGzog0iVo
igGbkBNIFQeiPH2t2WsG+EsvvkQp1sJ30SS5az/gFzMXGGh5dn9BVQiWkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFp6hiIdUkTNd+1jOA1mkBZmzigMB8GA1UdIwQY
MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt
YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh
LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAceq3eP8
HIoijJ/SWT+5A64vBJKCwpi3Yz5SyfccnhjV06+PBWB8Bquibqfa3IFO4WhTEPpC
XMhfaDDSbEpwdNBTfE6yI2tMz1anLrrieoRL7sXm8MA11K2pPNUKfXcpsVBDIpcF
P5DaZtAlK5fvb7bATBYMzlP/OxbY7ehSUt5tcrWoxW0Eqlxeb5F4cvnpaJHIDZOX
WJObEUMpHaLXytuW+a4t754VysJNTXWsi/6DDPq4Ljuesi0MDznsjpTR7JZ2JWbo
6DJGNzdVhkxOnNoEgOyiF2dV30IQQjLkchlIoqEjY1KXiH3eqLymJKUN79cLbQ/C
+nR8thDINSjyuA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 09:53:32 2026 by rpki-client