Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier: 5D7L4SihgM/p9LICkaoQBRHuhBLGKImhG4Atfqc8HdY=
Subject key identifier: 3A:37:91:2B:23:95:B3:F2:E3:9E:06:94:01:C5:5F:0C:8E:37:80:73
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 019D38D39F4D9E1D999A9DE4124E25DAC3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number: 143D
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: IokgSudl3AkR5yh01t-OFzPg4qE.roa (hash: KcJVO/wfX/Xcbn1mfQvmOj8I+t/hByN+WDPLWTnqUfw=)
2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: VIdvZ3i6mVkG1BoDzrh7bUcorkVa+WOoZroqbxhNYjY=)
3: xh82RKrJE90vliurJaEcvJUJUgA.asa (hash: +jjvNiTqTjs6ZRljqq0APH3ZG+e12dtYRRm2wKbgpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9f:4d:9e:1d:99:9a:9d:e4:12:4e:25:da:c3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=3a37912b2395b3f2e39e069401c55f0c8e378073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:d2:3b:31:5e:1a:13:ad:7d:35:8a:21:a5:
f7:b4:c7:5f:70:e5:48:c6:5c:f2:66:60:e6:2d:83:
c7:5d:fa:5c:a3:d0:e5:ac:de:e3:28:34:75:9c:d9:
ea:f0:33:c4:66:14:a9:11:1d:3c:6b:c9:e8:67:6e:
d1:30:f8:d3:d9:87:16:9c:50:01:af:32:6e:af:b1:
b1:ce:0d:ea:0e:0a:e6:13:7c:f2:10:2b:17:de:bb:
8d:1e:6c:af:b0:57:b0:1f:c0:19:8e:63:1f:42:78:
9c:73:44:81:91:e3:5e:18:3f:25:d2:43:54:f0:d3:
d5:7e:5a:9d:75:25:b3:d6:c6:93:fc:0a:d6:2b:68:
43:33:3a:99:b9:0a:b8:36:06:e5:8c:bd:57:76:26:
7f:b1:74:73:86:92:ca:d7:c4:53:4c:16:5c:51:21:
61:fa:ce:13:83:71:21:69:2a:ea:38:62:50:7f:bc:
78:1f:e1:5c:7d:1a:dc:51:59:3b:d3:eb:05:60:80:
78:ab:7f:a9:1d:9e:bf:72:a1:95:f7:44:23:c7:1a:
ca:d8:74:40:2f:16:b3:ba:c3:1d:38:fe:fd:e6:ae:
7d:8c:73:ac:a2:76:1a:76:c9:4f:af:c2:62:6b:a2:
9d:ab:30:e8:76:81:cd:6b:d8:7f:f3:bc:6f:3d:cc:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:91:2B:23:95:B3:F2:E3:9E:06:94:01:C5:5F:0C:8E:37:80:73
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ba:d6:fc:de:ae:43:1c:ab:2a:89:86:44:a2:ab:53:60:32:
04:4b:31:ed:06:33:fc:25:4a:a1:ae:28:30:ac:77:88:05:55:
5e:d3:41:ea:f6:71:0d:56:1b:56:17:16:ec:31:48:b5:64:bb:
49:71:ba:c2:a9:bb:13:19:96:65:a5:ac:f6:41:c4:76:92:64:
54:73:1f:94:39:5d:0a:16:e7:17:d9:72:e0:55:79:9d:f0:56:
c8:a8:55:de:f0:f7:7d:4b:d5:31:df:0d:cc:e0:48:ed:9a:c4:
bb:57:d5:e9:09:93:62:a4:45:43:0f:84:ff:7f:d7:2b:a0:66:
9c:22:75:0b:fa:43:a1:2c:ce:a2:aa:f9:2b:b0:dd:a9:14:8d:
dc:40:60:bc:9d:24:e0:af:19:ac:c3:8c:67:61:a6:e1:95:40:
07:0e:be:89:d7:b9:9c:92:71:37:d6:28:a0:f0:b6:c9:2a:52:
93:47:60:03:55:11:9f:4f:23:44:b4:14:db:0c:0f:ca:78:db:
e5:39:89:ff:c9:6e:11:fc:9d:9d:fa:41:48:7e:3f:73:df:0d:
2f:d5:d7:b8:bf:15:21:ed:2c:cf:d2:ce:23:62:a1:58:d9:28:
7c:81:f8:43:ac:4d:7b:17:a5:24:94:6d:4e:01:6d:1b:21:38:
9f:a0:b3:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04059Nnh2Zmp3kEk4l2sPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTc0MDliYzI3YzU4NDNlMmIxNmFjNjdjZGI2YTE1NWMy
ZjczZmIwHhcNMjYwMzI5MDkwMTI2WhcNMjYwMzMwMDkwMTI2WjAzMTEwLwYDVQQD
EygzYTM3OTEyYjIzOTViM2YyZTM5ZTA2OTQwMWM1NWYwYzhlMzc4MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zvSOzFeGhOtfTWKIaX3tMdfcOVI
xlzyZmDmLYPHXfpco9DlrN7jKDR1nNnq8DPEZhSpER08a8noZ27RMPjT2YcWnFAB
rzJur7Gxzg3qDgrmE3zyECsX3ruNHmyvsFewH8AZjmMfQnicc0SBkeNeGD8l0kNU
8NPVflqddSWz1saT/ArWK2hDMzqZuQq4NgbljL1XdiZ/sXRzhpLK18RTTBZcUSFh
+s4Tg3EhaSrqOGJQf7x4H+FcfRrcUVk70+sFYIB4q3+pHZ6/cqGV90QjxxrK2HRA
LxazusMdOP795q59jHOsonYadslPr8Jia6KdqzDodoHNa9h/87xvPczR+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo3kSsjlbPy454GlAHFXwyON4BzMB8GA1UdIwQY
MBaAFMKXQJvCfFhD4rFqxnzbahVcL3P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMt
NmMwMjhhNGQ4NWRhLzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMtNmMwMjhhNGQ4NWRh
LzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbrW/N6u
QxyrKomGRKKrU2AyBEsx7QYz/CVKoa4oMKx3iAVVXtNB6vZxDVYbVhcW7DFItWS7
SXG6wqm7ExmWZaWs9kHEdpJkVHMflDldChbnF9ly4FV5nfBWyKhV3vD3fUvVMd8N
zOBI7ZrEu1fV6QmTYqRFQw+E/3/XK6BmnCJ1C/pDoSzOoqr5K7DdqRSN3EBgvJ0k
4K8ZrMOMZ2Gm4ZVABw6+ide5nJJxN9YooPC2ySpSk0dgA1URn08jRLQU2wwPynjb
5TmJ/8luEfydnfpBSH4/c98NL9XXuL8VIe0sz9LOI2KhWNkofIH4Q6xNexelJJRt
TgFtGyE4n6CzEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:29 2026 by rpki-client