Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File: wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier: C6WC3H4J50qWAkCLnibXijIimeZFb2VePVmORdi6voY=
Subject key identifier: 0C:19:7A:BD:65:F2:D6:BF:C7:E6:8F:25:0A:7C:F5:79:72:D3:21:8A
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial: 019D3977D90F66C5E3B084F003EC88A37D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:00:48 +0000
Manifest this update: Sun 29 Mar 2026 12:00:48 +0000
Manifest next update: Mon 30 Mar 2026 12:00:48 +0000
Files and hashes: 1: JL1o6upPnIKdVbHUy_Ef2-ANX44.roa (hash: 3XMBFcXTXxWpf6Am9wDF23AjMe5aTPM0s8HS5SFHSAA=)
2: m5rD58AweHEvsDH4tbR7IKV265E.roa (hash: ZtXIPbeCB1rz8AcZjfipOZe9HIQPbbVzu/XgM264hK0=)
3: sUumv71LiXKH26laKH0Fmy5EKus.roa (hash: UrgMT/FdpxZ5nx6LcsU481E/RGBVqhUpUgDsPDRga/U=)
4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: xz8ibNzj66LPRVFR1Sxv9ZVgSn2xaLd9Lx2OMTpOvMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d9:0f:66:c5:e3:b0:84:f0:03:ec:88:a3:7d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
Validity
Not Before: Mar 29 12:00:48 2026 GMT
Not After : Mar 30 12:00:48 2026 GMT
Subject: CN=0c197abd65f2d6bfc7e68f250a7cf57972d3218a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:15:e7:5b:ef:a5:b0:33:7e:f4:5e:c2:13:c4:
14:88:30:8c:9c:0d:b6:03:1b:62:e4:e6:59:35:ab:
6a:97:1a:c5:63:f9:38:2c:07:0a:3f:8c:cc:e6:a0:
98:ce:c4:28:e4:a5:35:d5:43:98:28:c2:6b:be:37:
37:21:12:c3:8e:c3:c5:00:75:12:12:7d:41:47:32:
36:0e:ed:5f:9e:82:18:68:cc:af:46:8f:84:70:4a:
5f:cd:fe:92:01:f4:c0:48:b9:67:26:76:08:33:a8:
10:b5:0a:35:9c:82:28:1b:fa:5d:fd:06:dd:53:97:
53:60:95:75:40:4e:dc:f0:98:10:33:98:ad:38:28:
b0:92:1a:45:5f:08:9e:78:a2:b2:a3:63:ef:c4:b8:
d9:c7:a8:2e:64:cc:77:15:7a:45:8a:1c:2e:e7:ba:
1c:ff:e2:04:99:89:3a:a5:d3:92:12:2d:3d:d3:f6:
58:b7:c2:87:84:37:ad:47:f9:c8:15:dd:94:b2:9a:
53:e2:e7:1c:0b:79:0f:82:f1:3b:a0:3c:5a:ee:9c:
3f:df:e1:b6:a2:51:e7:ac:b4:0e:20:a3:e8:0f:32:
39:6b:62:58:cd:b5:11:be:66:c5:0d:15:fe:84:b1:
af:05:64:75:36:88:74:31:bf:31:b9:8e:d2:8e:75:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:19:7A:BD:65:F2:D6:BF:C7:E6:8F:25:0A:7C:F5:79:72:D3:21:8A
X509v3 Authority Key Identifier:
keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:05:74:c5:e8:eb:c2:ed:8f:2f:08:16:bf:2e:67:42:4f:2d:
9d:f5:ea:93:eb:ba:93:1a:55:45:cf:ed:17:2c:2a:6d:e0:ca:
bc:2e:fd:b0:0e:b7:b1:3d:2d:24:55:fd:4a:e6:24:f9:80:6a:
da:a0:f3:47:a9:47:a0:22:f0:44:5a:16:36:c8:73:a2:16:73:
e5:7b:69:56:e0:b7:10:d9:c8:96:b8:c4:84:7d:43:f7:d7:7d:
e5:ab:71:28:4f:2a:97:81:ae:15:6b:e8:5e:77:61:a2:0f:d1:
b7:65:1e:58:59:f5:4b:de:e0:49:1e:34:d2:63:8e:53:23:7a:
71:0b:c7:5d:68:e7:73:59:71:05:12:0a:19:b3:a6:5e:c3:1b:
66:4f:a3:c2:77:3d:b3:f2:2c:7e:6a:5f:c8:b8:a1:a2:6f:b4:
78:df:43:b5:8c:96:b6:d7:09:8d:af:90:5d:3f:20:7a:d8:23:
46:14:cf:3c:9a:20:9f:f7:31:06:05:64:67:8e:e8:2d:41:40:
c7:64:d2:72:c6:70:18:f9:e3:a2:1d:c0:8e:8b:a7:2d:ff:8d:
20:e9:34:4c:5b:fb:5a:3a:e1:ac:88:f8:2b:f7:90:b6:36:bf:
52:db:04:6c:79:07:97:11:89:87:24:4c:37:95:a0:aa:2a:0a:
92:51:54:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d9kPZsXjsITwA+yIo30EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTFlZTA2NjY0MTc1MGE1MTE0N2Q4ZGM5OWExYjEwNTY1
OGQyMDMwHhcNMjYwMzI5MTIwMDQ4WhcNMjYwMzMwMTIwMDQ4WjAzMTEwLwYDVQQD
EygwYzE5N2FiZDY1ZjJkNmJmYzdlNjhmMjUwYTdjZjU3OTcyZDMyMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BXnW++lsDN+9F7CE8QUiDCMnA22
Axti5OZZNatqlxrFY/k4LAcKP4zM5qCYzsQo5KU11UOYKMJrvjc3IRLDjsPFAHUS
En1BRzI2Du1fnoIYaMyvRo+EcEpfzf6SAfTASLlnJnYIM6gQtQo1nIIoG/pd/Qbd
U5dTYJV1QE7c8JgQM5itOCiwkhpFXwieeKKyo2PvxLjZx6guZMx3FXpFihwu57oc
/+IEmYk6pdOSEi090/ZYt8KHhDetR/nIFd2UsppT4uccC3kPgvE7oDxa7pw/3+G2
olHnrLQOIKPoDzI5a2JYzbURvmbFDRX+hLGvBWR1Noh0Mb8xuY7SjnWEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwZer1l8ta/x+aPJQp89Xly0yGKMB8GA1UdIwQY
MBaAFMAR7gZmQXUKURR9jcmaGxBWWNIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODkt
MzY5Y2Q4YmUyNWZlLzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODktMzY5Y2Q4YmUyNWZl
LzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgV0xejr
wu2PLwgWvy5nQk8tnfXqk+u6kxpVRc/tFywqbeDKvC79sA63sT0tJFX9SuYk+YBq
2qDzR6lHoCLwRFoWNshzohZz5XtpVuC3ENnIlrjEhH1D99d95atxKE8ql4GuFWvo
Xndhog/Rt2UeWFn1S97gSR400mOOUyN6cQvHXWjnc1lxBRIKGbOmXsMbZk+jwnc9
s/IsfmpfyLihom+0eN9DtYyWttcJja+QXT8getgjRhTPPJogn/cxBgVkZ47oLUFA
x2TScsZwGPnjoh3AjounLf+NIOk0TFv7WjrhrIj4K/eQtja/UtsEbHkHlxGJhyRM
N5WgqioKklFUZw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:19 2026 by rpki-client