Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: bMl+Ty+nLYRlZLHerrzMW1sQvNT2PkVXMuA7pGhLOQA=
Subject key identifier: 7E:36:DF:9C:EA:C4:C7:AF:33:CD:D8:4E:A3:A4:28:04:7C:3B:7B:3E
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 019D3A5483CE0021B961F838590A9E71B2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0BA7
Signing time: Sun 29 Mar 2026 16:01:50 +0000
Manifest this update: Sun 29 Mar 2026 16:01:50 +0000
Manifest next update: Mon 30 Mar 2026 16:01:50 +0000
Files and hashes: 1: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: USP8gNrb8gi3j/Y5aiqYj24a62LYcJVhj3cTh7GO+KM=)
2: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:83:ce:00:21:b9:61:f8:38:59:0a:9e:71:b2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Mar 29 16:01:50 2026 GMT
Not After : Mar 30 16:01:50 2026 GMT
Subject: CN=7e36df9ceac4c7af33cdd84ea3a428047c3b7b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:21:7e:00:4c:40:6e:20:cd:aa:8f:34:b2:f0:
ee:bc:cc:6f:85:ea:4a:17:0d:a9:fe:f8:f2:25:13:
17:24:71:f3:16:57:f4:61:6c:ba:9b:4b:9a:8b:d4:
b6:34:a9:f2:8f:08:d4:f7:9f:fc:b2:54:63:a5:69:
ca:4b:95:1a:43:9d:35:19:4f:56:8f:43:ea:f9:9e:
55:d9:0f:71:6e:60:1a:d6:2b:9d:7a:1e:bd:65:9d:
eb:c1:4f:54:e4:72:17:77:c6:de:39:21:5e:8b:c1:
85:39:f8:81:af:96:db:9f:1a:44:bf:ac:72:2c:2c:
8d:05:23:39:dd:fc:81:d2:9a:b2:d4:4e:96:e1:2e:
74:b3:55:bd:cc:79:9f:6f:48:c1:4d:4c:b5:66:a5:
a8:a7:07:7a:b2:46:b0:ae:1b:df:25:9e:5b:a5:70:
64:1c:2a:6b:88:59:db:b3:35:e5:1a:cb:b6:8d:7e:
cc:b5:6b:77:fd:31:86:28:be:ba:51:97:f9:2c:dc:
24:1b:d5:7f:de:3e:b3:77:d4:4c:fc:6b:c6:d5:25:
2e:a8:5b:e6:00:f0:3c:49:cd:d0:4a:6a:7f:12:7b:
35:4e:aa:20:39:f0:6b:3d:03:f5:63:40:fb:96:5d:
81:a0:a5:c7:e8:59:41:c0:e7:8b:de:ae:b8:30:e6:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:DF:9C:EA:C4:C7:AF:33:CD:D8:4E:A3:A4:28:04:7C:3B:7B:3E
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:87:ee:26:a2:57:80:8b:f5:4d:51:61:ce:e2:ba:f7:04:cd:
a6:93:06:ff:66:9c:e8:fe:d0:97:ac:42:44:4b:c4:c6:ff:49:
bb:e9:17:fb:a5:ef:cc:06:45:a7:2b:d7:d6:ed:db:be:54:b2:
25:c8:6f:b8:2f:49:8a:a2:ca:4b:b6:f1:43:ca:95:14:14:58:
d3:af:62:15:ac:19:e1:4f:0d:eb:ce:a0:c1:0a:73:72:89:93:
7d:cb:b4:fe:61:fd:e1:53:fa:41:20:35:7e:83:19:7e:c9:be:
71:87:cc:16:c3:46:e7:17:47:bd:06:ca:30:d9:c3:d4:b8:47:
4a:96:39:55:5d:f1:33:d5:e4:5d:0a:d7:3b:e4:6f:65:48:8f:
55:6f:eb:d7:bf:b6:d9:98:c3:3d:9d:5a:c3:05:7b:99:c2:80:
81:e5:02:d7:c9:dc:94:1d:70:4a:54:07:86:41:84:58:d8:5c:
fc:c8:6a:d8:0b:d5:c8:c8:a6:7d:6d:98:a0:e2:7d:fe:61:e4:
50:65:b7:b8:4e:0e:c6:a2:cc:ba:5a:3e:97:b7:e1:ed:5a:0b:
fa:99:20:d9:53:14:ca:be:56:77:97:80:c4:f7:65:7c:c4:f4:
0b:1b:98:ac:a6:df:4d:1a:24:21:68:3e:f7:84:29:41:c3:fb:
12:dc:9d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VIPOACG5Yfg4WQqecbKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYTU4ZDVmMjcxMmNjYzAwNDRiNTllZmE3Y2JjM2U5OGM1
ZmMyNWMwHhcNMjYwMzI5MTYwMTUwWhcNMjYwMzMwMTYwMTUwWjAzMTEwLwYDVQQD
Eyg3ZTM2ZGY5Y2VhYzRjN2FmMzNjZGQ4NGVhM2E0MjgwNDdjM2I3YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SF+AExAbiDNqo80svDuvMxvhepK
Fw2p/vjyJRMXJHHzFlf0YWy6m0uai9S2NKnyjwjU95/8slRjpWnKS5UaQ501GU9W
j0Pq+Z5V2Q9xbmAa1iudeh69ZZ3rwU9U5HIXd8beOSFei8GFOfiBr5bbnxpEv6xy
LCyNBSM53fyB0pqy1E6W4S50s1W9zHmfb0jBTUy1ZqWopwd6skawrhvfJZ5bpXBk
HCpriFnbszXlGsu2jX7MtWt3/TGGKL66UZf5LNwkG9V/3j6zd9RM/GvG1SUuqFvm
APA8Sc3QSmp/Ens1TqogOfBrPQP1Y0D7ll2BoKXH6FlBwOeL3q64MObPoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4235zqxMevM83YTqOkKAR8O3s+MB8GA1UdIwQY
MBaAFFqljV8nEszABEtZ76fLw+mMX8JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUt
NTkxOTkzMzFlZTA5LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUtNTkxOTkzMzFlZTA5
LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgofuJqJX
gIv1TVFhzuK69wTNppMG/2ac6P7Ql6xCREvExv9Ju+kX+6XvzAZFpyvX1u3bvlSy
JchvuC9JiqLKS7bxQ8qVFBRY069iFawZ4U8N686gwQpzcomTfcu0/mH94VP6QSA1
foMZfsm+cYfMFsNG5xdHvQbKMNnD1LhHSpY5VV3xM9XkXQrXO+RvZUiPVW/r17+2
2ZjDPZ1awwV7mcKAgeUC18nclB1wSlQHhkGEWNhc/Mhq2AvVyMimfW2YoOJ9/mHk
UGW3uE4OxqLMulo+l7fh7VoL+pkg2VMUyr5Wd5eAxPdlfMT0CxuYrKbfTRokIWg+
94QpQcP7EtydTg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:31 2026 by rpki-client