Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier: 6OCotS8uOvVpqH+Y54HJmK6MFYkKifK0aoIuTLTzeqk=
Subject key identifier: F4:11:F2:D8:8B:16:3E:BF:F6:76:E6:C8:D9:C7:27:B8:48:27:8B:71
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial: 019D37523ED73D8616B8F0A0E9F5AE518881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number: 0584
Signing time: Sun 29 Mar 2026 02:00:29 +0000
Manifest this update: Sun 29 Mar 2026 02:00:29 +0000
Manifest next update: Mon 30 Mar 2026 02:00:29 +0000
Files and hashes: 1: gV9crIDUuxzdFMitCgOaVsZoy_M.roa (hash: pE8mlv/DDAD/v56xUsBEPIpYP5HBve6yv4Le8BMYrag=)
2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: 2gyS4FujkVqi7Me6n6Mf5vrKQ1Kpzf1fQ4RTqiV9TNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3e:d7:3d:86:16:b8:f0:a0:e9:f5:ae:51:88:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
Validity
Not Before: Mar 29 02:00:29 2026 GMT
Not After : Mar 30 02:00:29 2026 GMT
Subject: CN=f411f2d88b163ebff676e6c8d9c727b848278b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:2c:39:8c:e8:38:bf:34:c6:c4:bc:eb:fe:
ec:75:82:a3:e1:be:dd:a5:e6:ab:30:2b:66:64:0a:
25:0d:6f:56:f7:eb:b4:7f:bf:b6:98:61:78:c8:34:
b0:aa:32:e1:55:12:e2:29:91:43:3e:04:7b:ca:63:
41:fd:1a:ea:55:84:76:89:e7:34:1a:f7:2e:89:46:
a0:33:ce:49:08:a9:4b:23:dc:b8:3d:4c:74:d8:bd:
b1:9a:0c:ea:52:5e:54:d3:d1:fb:57:9d:52:f3:d7:
14:99:b6:79:71:4f:52:7e:a2:ac:04:aa:2f:b2:96:
11:be:d3:77:7e:34:03:54:59:06:40:55:a6:12:d9:
f0:23:96:b6:ad:80:94:59:17:58:93:76:c0:1f:9b:
2e:1e:0b:3e:60:9e:a5:fe:79:d6:d8:da:83:7f:02:
f8:10:ef:69:39:ef:69:5c:4c:b6:3f:9a:cc:37:a5:
73:81:86:b1:78:65:ee:d3:6a:03:c2:40:39:e4:f8:
50:c5:82:84:b6:fb:ad:1b:82:97:e4:2e:1b:21:9f:
ca:ac:e1:b8:29:75:bc:6d:f0:5b:2c:22:49:a1:f6:
51:bf:96:74:d4:7f:8c:f1:fd:83:30:63:40:4c:60:
df:cc:b4:f5:43:1b:f0:5c:d2:3a:fc:d8:8c:5c:25:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:F2:D8:8B:16:3E:BF:F6:76:E6:C8:D9:C7:27:B8:48:27:8B:71
X509v3 Authority Key Identifier:
keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:19:be:8f:5d:58:9e:f8:e2:11:f9:19:25:8d:67:00:8c:73:
00:6a:38:b5:76:11:4b:f1:1a:95:dd:71:00:35:e4:35:d6:40:
42:12:26:36:ca:f8:b5:e8:51:9f:6a:43:e5:65:b8:35:12:20:
c6:da:b6:9c:bf:4e:28:86:47:6d:01:50:94:ca:c4:af:28:ae:
2e:16:df:ef:70:cb:b3:42:a8:b2:8f:ac:77:eb:c7:55:fb:38:
0f:a4:71:56:ab:1c:59:5d:00:e6:09:e4:34:a8:66:1c:0f:fc:
d2:be:a4:00:f7:e9:ef:7b:25:51:b6:36:55:4f:59:95:a1:51:
70:26:24:bf:26:fc:3a:ee:0c:77:78:b7:b0:24:83:db:04:41:
13:d5:00:77:0c:ed:15:3c:f4:86:30:d8:64:2c:f9:58:e3:72:
28:23:01:89:5e:57:6a:f3:78:1c:61:81:96:bf:6f:29:52:84:
21:10:7b:8a:ac:44:6e:c6:bd:01:e2:67:8c:e3:0a:0e:a6:73:
fe:e4:ea:19:38:79:ba:ae:aa:26:0b:9c:c9:04:9d:ba:62:7c:
7a:ed:03:84:77:ba:d1:9c:f1:2b:cc:ae:ec:fd:aa:16:c3:c5:
1b:4d:52:47:9e:7a:d8:e8:90:d3:f5:12:8c:ce:c8:82:dc:9c:
f4:3a:99:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uj7XPYYWuPCg6fWuUYiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWY2MDNkZTQwOWE3MTBmZGFlNjJjYWMxYzU1MzkzYTk1
M2I1YjUwHhcNMjYwMzI5MDIwMDI5WhcNMjYwMzMwMDIwMDI5WjAzMTEwLwYDVQQD
EyhmNDExZjJkODhiMTYzZWJmZjY3NmU2YzhkOWM3MjdiODQ4Mjc4YjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra8sOYzoOL80xsS86/7sdYKj4b7d
pearMCtmZAolDW9W9+u0f7+2mGF4yDSwqjLhVRLiKZFDPgR7ymNB/RrqVYR2iec0
GvcuiUagM85JCKlLI9y4PUx02L2xmgzqUl5U09H7V51S89cUmbZ5cU9SfqKsBKov
spYRvtN3fjQDVFkGQFWmEtnwI5a2rYCUWRdYk3bAH5suHgs+YJ6l/nnW2NqDfwL4
EO9pOe9pXEy2P5rMN6VzgYaxeGXu02oDwkA55PhQxYKEtvutG4KX5C4bIZ/KrOG4
KXW8bfBbLCJJofZRv5Z01H+M8f2DMGNATGDfzLT1QxvwXNI6/NiMXCWX+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQR8tiLFj6/9nbmyNnHJ7hIJ4txMB8GA1UdIwQY
MBaAFMEfYD3kCacQ/a5iysHFU5OpU7W1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1I5Z1BlUUpweEQ5cm1MS3djVlRrNmxUdGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jN2U0N2QtYzA4ZS00NzY5LTg2ZDIt
YzdmOGIwNTdhZWQwLzEvd1I5Z1BlUUpweEQ5cm1MS3djVlRrNmxUdGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jN2U0N2QtYzA4ZS00NzY5LTg2ZDItYzdmOGIwNTdhZWQw
LzEvd1I5Z1BlUUpweEQ5cm1MS3djVlRrNmxUdGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBm+j11Y
nvjiEfkZJY1nAIxzAGo4tXYRS/Eald1xADXkNdZAQhImNsr4tehRn2pD5WW4NRIg
xtq2nL9OKIZHbQFQlMrEryiuLhbf73DLs0Koso+sd+vHVfs4D6RxVqscWV0A5gnk
NKhmHA/80r6kAPfp73slUbY2VU9ZlaFRcCYkvyb8Ou4Md3i3sCSD2wRBE9UAdwzt
FTz0hjDYZCz5WONyKCMBiV5XavN4HGGBlr9vKVKEIRB7iqxEbsa9AeJnjOMKDqZz
/uTqGTh5uq6qJgucyQSdumJ8eu0DhHe60ZzxK8yu7P2qFsPFG01SR5562OiQ0/US
jM7Igtyc9DqZkg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:33 2026 by rpki-client