Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: bPTkE22r6LhEHTtG7UMA/Mgz467u7cFjTHlzsJYeWgs=
Subject key identifier: FD:03:0B:F1:6B:EF:2E:6E:D0:CD:4B:44:EF:C6:AE:3C:F5:AC:04:8E
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 019D39E5B685190C4BC782E1E4418ABF74D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 091E
Signing time: Sun 29 Mar 2026 14:00:48 +0000
Manifest this update: Sun 29 Mar 2026 14:00:48 +0000
Manifest next update: Mon 30 Mar 2026 14:00:48 +0000
Files and hashes: 1: CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa (hash: fKvo/tgzhzmSFkdOZO8OEhheB3WyD+MYf7ggWIjBrww=)
2: edt0xmZ0bSGmPNiLP1d_zAw05s8.roa (hash: j624gLbIQ30d5sWbalA5dsbX8f1xaNen+6AY5gXhfxY=)
3: veq3VGflC7EKcyTSV4PLJ0gF_AI.roa (hash: OTH3lPgKfCmDiloxLfi5qPSyfmhULCNeRQ8YV01zMtE=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: anZfGli3GDPbBlYLYbBAjMEFrQtE1AMLCSwcfcRQpqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b6:85:19:0c:4b:c7:82:e1:e4:41:8a:bf:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Mar 29 14:00:48 2026 GMT
Not After : Mar 30 14:00:48 2026 GMT
Subject: CN=fd030bf16bef2e6ed0cd4b44efc6ae3cf5ac048e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:99:3c:a5:73:9b:c0:d0:b3:be:81:b4:4d:
a5:c3:7d:0c:a3:e4:70:e9:cb:73:73:e7:8f:b0:97:
c9:3b:f5:13:41:15:13:88:da:f2:df:32:e7:42:8d:
2b:6d:a7:69:84:59:69:ae:c5:21:c9:61:79:0c:3b:
a5:16:f3:96:52:c5:0a:9b:ab:29:00:6f:54:de:f7:
6a:09:d6:da:b6:50:30:99:eb:67:38:05:77:1c:fb:
62:09:eb:10:28:96:0e:53:fa:37:c2:6e:a4:da:4a:
3d:5a:ce:4b:8c:64:2b:e4:98:d4:82:1a:31:56:5d:
71:65:f3:cf:07:6c:3f:15:e7:90:66:a3:b3:58:be:
72:53:cc:20:3c:d8:50:41:0b:a5:7a:65:f2:be:35:
97:ef:c1:f4:44:60:72:45:95:6d:4d:d8:9a:5b:c5:
99:56:8c:35:7f:61:fb:96:1e:88:49:e9:8c:cb:05:
62:b4:a0:bd:20:0b:69:7a:43:8d:d0:6a:20:6e:e7:
c0:81:0d:37:48:97:38:a0:dc:5f:94:89:c7:83:20:
9e:ff:f9:87:9b:89:45:4c:66:4d:e1:3b:ce:a9:6d:
16:34:b9:88:00:61:a6:b4:f7:a9:63:71:f7:0a:99:
9b:13:46:11:76:77:e9:3e:a8:52:44:28:67:b9:f5:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:0B:F1:6B:EF:2E:6E:D0:CD:4B:44:EF:C6:AE:3C:F5:AC:04:8E
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a0:0f:56:93:44:6c:ec:f2:b0:84:03:f2:04:4a:a9:c7:b7:
ae:2e:fe:7e:d7:90:b4:c9:02:93:6a:08:15:63:cd:fa:7b:93:
53:0f:88:5a:40:11:dc:7d:38:4d:8c:b8:91:24:c3:68:46:dc:
f5:5b:24:22:37:4e:63:e2:a7:e5:d7:87:df:56:af:79:17:44:
c7:9e:42:38:50:27:37:b3:76:85:d5:9a:e6:bf:42:3b:be:76:
cb:89:57:3e:39:40:5e:ed:95:9d:fa:fa:a5:30:06:45:4c:cb:
13:8f:78:03:a1:6f:bf:b5:cf:be:6d:bb:16:1c:1d:30:88:be:
07:9b:73:5d:cd:af:36:8f:f9:6a:a5:6c:8d:3c:dc:cc:ae:22:
58:ab:15:1d:0f:ba:18:b0:a9:ab:7b:69:91:61:9c:d1:6a:61:
ff:61:5e:43:89:ff:d2:c7:4e:59:b5:80:2d:54:d2:9f:37:11:
b1:46:8f:13:68:c1:6f:f4:3f:0f:ea:89:bb:ec:ea:12:a8:9a:
56:86:a5:4b:ef:74:12:20:f6:43:2a:28:ba:5d:8c:2f:cf:8a:
1e:58:20:4f:5c:65:d5:45:8d:a5:77:90:a8:f1:a9:da:fb:c4:
8c:15:e1:ce:11:c0:ed:0c:60:ba:84:88:e2:c8:1f:2d:78:49:
f0:ff:d9:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055baFGQxLx4Lh5EGKv3TYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2
NGVjMjAwHhcNMjYwMzI5MTQwMDQ4WhcNMjYwMzMwMTQwMDQ4WjAzMTEwLwYDVQQD
EyhmZDAzMGJmMTZiZWYyZTZlZDBjZDRiNDRlZmM2YWUzY2Y1YWMwNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXaZPKVzm8DQs76BtE2lw30Mo+Rw
6ctzc+ePsJfJO/UTQRUTiNry3zLnQo0rbadphFlprsUhyWF5DDulFvOWUsUKm6sp
AG9U3vdqCdbatlAwmetnOAV3HPtiCesQKJYOU/o3wm6k2ko9Ws5LjGQr5JjUghox
Vl1xZfPPB2w/FeeQZqOzWL5yU8wgPNhQQQulemXyvjWX78H0RGByRZVtTdiaW8WZ
Vow1f2H7lh6ISemMywVitKC9IAtpekON0GogbufAgQ03SJc4oNxflInHgyCe//mH
m4lFTGZN4TvOqW0WNLmIAGGmtPepY3H3CpmbE0YRdnfpPqhSRChnufUtswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0DC/Fr7y5u0M1LRO/Grjz1rASOMB8GA1UdIwQY
MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt
ZjJhMmE1ZDUwNDVlLzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl
LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaAPVpNE
bOzysIQD8gRKqce3ri7+fteQtMkCk2oIFWPN+nuTUw+IWkAR3H04TYy4kSTDaEbc
9VskIjdOY+Kn5deH31aveRdEx55COFAnN7N2hdWa5r9CO752y4lXPjlAXu2Vnfr6
pTAGRUzLE494A6Fvv7XPvm27FhwdMIi+B5tzXc2vNo/5aqVsjTzczK4iWKsVHQ+6
GLCpq3tpkWGc0Wph/2FeQ4n/0sdOWbWALVTSnzcRsUaPE2jBb/Q/D+qJu+zqEqia
VoalS+90EiD2Qyooul2ML8+KHlggT1xl1UWNpXeQqPGp2vvEjBXhzhHA7QxguoSI
4sgfLXhJ8P/ZCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:14 2026 by rpki-client