
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: xbadLxYwwJcc6zbaDL65FbcpPXV97xa258PuCoauzyc=
Subject key identifier: 1E:CD:5B:F8:59:9E:B1:7F:C6:AC:37:8C:AE:C8:6F:92:33:50:5F:97
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 019CE4B5EA3940900C6C22F46509C368207B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 1813
Signing time: Fri 13 Mar 2026 01:00:52 +0000
Manifest this update: Fri 13 Mar 2026 01:00:52 +0000
Manifest next update: Sat 14 Mar 2026 01:00:52 +0000
Files and hashes: 1: TqCJ8DGIsYRUqwvjpLpaEq5Smdw.roa (hash: uq4vQs4ODd9sCXDYk4Ut6c6LpnPmQWEBmYs07mf3VWY=)
2: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: C/CMMqWCiQwNm3B3XVNhk/kLsofQ4kkVeOHUOWrKy4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:ea:39:40:90:0c:6c:22:f4:65:09:c3:68:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Mar 13 01:00:52 2026 GMT
Not After : Mar 14 01:00:52 2026 GMT
Subject: CN=1ecd5bf8599eb17fc6ac378caec86f9233505f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:0a:41:86:10:d8:c3:8b:5d:e1:af:6f:ba:
62:3e:35:c6:40:93:5f:4f:ac:51:22:81:e9:45:d3:
bc:68:8f:33:83:3e:29:ab:3e:72:af:4e:b1:a0:4d:
63:c2:94:04:6a:88:de:06:c9:b5:7d:a0:98:78:82:
90:7b:ce:c8:0f:24:34:59:d4:94:2e:34:01:f1:34:
de:a3:1b:11:8b:bf:fb:47:98:18:b8:56:8d:f0:62:
e3:56:c3:6c:02:63:05:b8:1b:ff:79:d2:b6:2d:5c:
4b:70:2a:6c:5e:20:a5:f5:0a:9b:ba:54:45:00:86:
2d:b1:79:46:8f:56:82:91:e7:03:89:91:6b:86:d6:
84:8a:e2:5f:08:1f:fc:52:ea:2b:65:8d:93:e5:cb:
06:98:d5:26:b6:39:0e:16:34:4e:b6:23:9d:c1:b6:
b0:f5:d1:e6:0a:88:d7:50:aa:a0:5a:4a:2c:9c:2a:
9b:3c:5e:5f:71:39:44:eb:bb:26:3b:5d:e2:53:a3:
c0:e0:f8:27:dd:f4:49:20:80:bc:fe:52:60:f9:b8:
11:ab:c4:ce:5c:c0:c0:1d:3f:c9:a2:01:7a:b2:0a:
ea:4f:21:2f:67:71:d4:9a:dc:4d:66:75:64:3b:a7:
4b:03:c1:e4:4a:59:83:51:69:a7:44:29:36:c7:75:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:5B:F8:59:9E:B1:7F:C6:AC:37:8C:AE:C8:6F:92:33:50:5F:97
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:18:f6:48:0f:98:71:c5:aa:5a:ba:50:ec:d1:da:25:23:
bd:64:cc:5b:bd:92:af:24:96:8e:e3:c8:be:51:73:7a:d0:39:
ca:11:2a:ee:5b:10:19:2a:f5:2d:79:67:cc:36:d8:f7:5b:b2:
7d:cd:07:27:5a:ae:a2:53:46:80:80:58:1d:bd:40:6a:01:24:
04:ea:f1:e8:83:03:a5:a8:e9:70:92:65:37:24:c9:4b:46:77:
db:24:f1:3a:0f:d2:ea:7f:d1:0b:c5:93:b9:1c:f4:3b:ce:f4:
ed:17:6d:4d:05:1b:49:55:29:b7:89:f9:e6:6f:69:92:af:57:
fe:50:37:9e:3b:b2:2c:f8:e8:86:f7:f8:ea:e9:99:28:e5:3d:
17:53:d1:10:a7:b5:51:f8:9e:20:2f:32:b8:6c:ee:1f:be:39:
c2:f1:d4:9a:6f:2f:83:d3:a0:b4:07:92:d7:b4:4f:49:d6:0e:
b0:0d:f6:52:bc:a4:0f:e4:39:33:aa:7d:0d:e1:d0:24:5b:ea:
8f:30:a3:8e:01:99:38:48:af:7c:54:d1:4f:42:c2:f9:62:2c:
8c:08:51:62:82:54:0f:0c:75:e0:b7:bc:25:ba:c9:03:eb:d3:
8f:ce:b8:3c:27:3a:f7:8f:75:5d:dc:e7:cf:28:14:07:5a:3b:
7b:3b:89:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkteo5QJAMbCL0ZQnDaCB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NWQ5NjhmNWJlMWNlNjcxZTIwZDU4MzFjMTcwMDAxZjM3
MmQzZGQwHhcNMjYwMzEzMDEwMDUyWhcNMjYwMzE0MDEwMDUyWjAzMTEwLwYDVQQD
EygxZWNkNWJmODU5OWViMTdmYzZhYzM3OGNhZWM4NmY5MjMzNTA1Zjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt24KQYYQ2MOLXeGvb7piPjXGQJNf
T6xRIoHpRdO8aI8zgz4pqz5yr06xoE1jwpQEaojeBsm1faCYeIKQe87IDyQ0WdSU
LjQB8TTeoxsRi7/7R5gYuFaN8GLjVsNsAmMFuBv/edK2LVxLcCpsXiCl9QqbulRF
AIYtsXlGj1aCkecDiZFrhtaEiuJfCB/8UuorZY2T5csGmNUmtjkOFjROtiOdwbaw
9dHmCojXUKqgWkosnCqbPF5fcTlE67smO13iU6PA4Pgn3fRJIIC8/lJg+bgRq8TO
XMDAHT/JogF6sgrqTyEvZ3HUmtxNZnVkO6dLA8HkSlmDUWmnRCk2x3UTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7NW/hZnrF/xqw3jK7Ib5IzUF+XMB8GA1UdIwQY
MBaAFFhdlo9b4c5nHiDVgxwXAAHzctPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUt
OWVkMzVkNWIzNzM1LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUtOWVkMzVkNWIzNzM1
LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9MY9kgP
mHHFqlq6UOzR2iUjvWTMW72SrySWjuPIvlFzetA5yhEq7lsQGSr1LXlnzDbY91uy
fc0HJ1quolNGgIBYHb1AagEkBOrx6IMDpajpcJJlNyTJS0Z32yTxOg/S6n/RC8WT
uRz0O8707RdtTQUbSVUpt4n55m9pkq9X/lA3njuyLPjohvf46umZKOU9F1PREKe1
UfieIC8yuGzuH745wvHUmm8vg9OgtAeS17RPSdYOsA32UrykD+Q5M6p9DeHQJFvq
jzCjjgGZOEivfFTRT0LC+WIsjAhRYoJUDwx14Le8JbrJA+vTj864PCc69491Xdzn
zygUB1o7ezuJMA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:17:43 2026 by rpki-client