Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier: Q/ZJDp4kkrG9COkOqaVbKpqG9jyVLVKOmiIN4kZEcI8=
Subject key identifier: 0B:6A:2A:E4:C2:57:6F:94:19:C2:96:2F:92:D2:58:D6:18:BD:2A:37
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 019D39AE5C721A552871CFDA2EB0AE99DA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number: 180B
Signing time: Sun 29 Mar 2026 13:00:21 +0000
Manifest this update: Sun 29 Mar 2026 13:00:21 +0000
Manifest next update: Mon 30 Mar 2026 13:00:21 +0000
Files and hashes: 1: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: 1g0dJ89MRvRYqFnetuIys0HcyMZsUkMgTDa5+VZnPOk=)
2: bwWZGeCQW0Hd1jb04LPvEN_tv4U.roa (hash: CRa0+I5ztcID9122/jSOLxqWovtuwyYOYDu7k5cAWuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5c:72:1a:55:28:71:cf:da:2e:b0:ae:99:da:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Mar 29 13:00:21 2026 GMT
Not After : Mar 30 13:00:21 2026 GMT
Subject: CN=0b6a2ae4c2576f9419c2962f92d258d618bd2a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:86:d1:16:87:7f:7b:d3:fb:5b:fa:3f:6b:
b7:23:22:29:8e:d6:9c:8c:81:f1:c7:f7:b3:25:9d:
a4:e1:56:45:b0:85:d9:1e:65:11:d5:15:6b:23:78:
c0:d6:c3:c9:e7:82:d2:a9:b2:2a:af:38:ff:d5:27:
4b:c4:49:79:bb:fc:60:a5:35:9f:b1:bf:76:9e:a6:
1a:42:b9:8a:1b:4b:9c:2f:f5:96:e6:78:17:05:ac:
d6:f4:cf:d5:1f:fa:10:3c:fe:a7:bf:84:69:81:79:
a6:84:43:91:27:cb:53:8d:fe:31:8d:cc:74:94:b0:
4d:39:b8:0a:79:28:13:1d:35:64:bb:77:32:fb:48:
d2:9a:07:73:26:19:2d:e5:91:77:1b:74:6a:7b:14:
6c:3a:1d:cb:0e:6a:c3:85:c3:65:99:97:21:ad:0e:
95:6a:d3:57:cc:9c:04:19:60:54:db:d6:37:81:9a:
b8:b2:5d:f3:6e:8d:ec:f9:a4:77:69:9f:80:4b:87:
89:e1:b0:93:c6:35:76:e1:a8:97:a5:e5:49:3d:07:
8a:f5:1b:69:24:3a:73:9a:e1:20:84:ea:2f:38:8c:
4f:ee:0e:e6:af:0c:b1:72:85:ca:e1:1f:79:ad:a5:
9e:ba:e3:75:db:24:ae:d0:c4:a4:db:bf:57:f2:df:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6A:2A:E4:C2:57:6F:94:19:C2:96:2F:92:D2:58:D6:18:BD:2A:37
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:18:b9:b4:75:50:9e:75:5d:71:6b:a6:2f:e3:ce:4b:57:be:
48:3a:91:4e:ea:2b:29:0c:fd:12:5c:3e:ef:3f:9d:ec:5b:b8:
ac:b2:58:c0:dc:63:00:95:f2:4e:05:c8:f8:08:8c:aa:b8:db:
3b:d7:3f:1b:4e:f4:c8:95:d5:6a:9f:fa:4f:ce:62:86:ca:20:
ea:92:0f:75:86:cc:86:61:ff:5c:b8:54:bb:a0:11:c1:c2:78:
03:7c:8c:82:fb:bd:1e:46:3f:8a:d5:9e:f8:61:57:04:42:b4:
e6:4d:fc:91:c2:4a:e5:ef:0f:fc:18:d6:f8:95:d8:51:82:2c:
46:e6:54:78:ec:25:ac:77:7c:97:c3:82:16:64:37:44:fd:c9:
fe:df:1b:19:9e:12:4e:e5:c9:72:63:97:da:a2:5a:a6:53:3f:
2c:23:0f:bf:34:9c:35:46:bc:12:69:d8:f3:20:35:c3:91:93:
2e:d4:a5:af:56:79:bc:cf:f0:53:9c:8f:1d:75:6f:c0:42:00:
6f:ae:e7:e9:cb:dd:65:b5:15:4b:90:8c:df:17:41:6e:5e:dc:
5b:a8:88:1d:59:65:9e:37:f1:8d:65:4f:9e:41:b8:ef:98:08:
86:10:e8:cb:5a:3f:12:ec:4d:ce:9a:12:b5:20:fa:72:ef:36:
41:74:35:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rlxyGlUocc/aLrCumdojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWIyNDNhNzIzM2U1NzFjM2MxNzNlYjgyNDkxMTE5MDYz
MjYwMTkwHhcNMjYwMzI5MTMwMDIxWhcNMjYwMzMwMTMwMDIxWjAzMTEwLwYDVQQD
EygwYjZhMmFlNGMyNTc2Zjk0MTljMjk2MmY5MmQyNThkNjE4YmQyYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36+G0RaHf3vT+1v6P2u3IyIpjtac
jIHxx/ezJZ2k4VZFsIXZHmUR1RVrI3jA1sPJ54LSqbIqrzj/1SdLxEl5u/xgpTWf
sb92nqYaQrmKG0ucL/WW5ngXBazW9M/VH/oQPP6nv4RpgXmmhEORJ8tTjf4xjcx0
lLBNObgKeSgTHTVku3cy+0jSmgdzJhkt5ZF3G3RqexRsOh3LDmrDhcNlmZchrQ6V
atNXzJwEGWBU29Y3gZq4sl3zbo3s+aR3aZ+AS4eJ4bCTxjV24aiXpeVJPQeK9Rtp
JDpzmuEghOovOIxP7g7mrwyxcoXK4R95raWeuuN12ySu0MSk279X8t9FLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtqKuTCV2+UGcKWL5LSWNYYvSo3MB8GA1UdIwQY
MBaAFFlbJDpyM+Vxw8Fz64JJERkGMmAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgt
ODhlNDQ2NjkxNWY4LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgtODhlNDQ2NjkxNWY4
LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhi5tHVQ
nnVdcWumL+POS1e+SDqRTuorKQz9Elw+7z+d7Fu4rLJYwNxjAJXyTgXI+AiMqrjb
O9c/G070yJXVap/6T85ihsog6pIPdYbMhmH/XLhUu6ARwcJ4A3yMgvu9HkY/itWe
+GFXBEK05k38kcJK5e8P/BjW+JXYUYIsRuZUeOwlrHd8l8OCFmQ3RP3J/t8bGZ4S
TuXJcmOX2qJaplM/LCMPvzScNUa8EmnY8yA1w5GTLtSlr1Z5vM/wU5yPHXVvwEIA
b67n6cvdZbUVS5CM3xdBbl7cW6iIHVllnjfxjWVPnkG475gIhhDoy1o/EuxNzpoS
tSD6cu82QXQ16w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:56 2026 by rpki-client