Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: agwGPnULMQKFWddQa+dPG4z6NieWEzfqMrYcTCF+H9o=
Subject key identifier: A4:D2:F7:50:70:8C:7E:F6:33:B8:8D:67:6C:50:EF:9D:69:95:0C:0D
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 019D39E5458A1F6A6F8B1E92A87B5C39B59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 11DD
Signing time: Sun 29 Mar 2026 14:00:19 +0000
Manifest this update: Sun 29 Mar 2026 14:00:19 +0000
Manifest next update: Mon 30 Mar 2026 14:00:19 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: DnxqytXnZE5nxwTWJi6QbictpBCZCwZHLcZH2aqr1RA=)
2: fgkPvFZ2_f_B8Kes99MALTJ_h0M.roa (hash: he1XePUMYZj0hBporE6i0fgZ6VJq2FNLflajrVKGWrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:45:8a:1f:6a:6f:8b:1e:92:a8:7b:5c:39:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Mar 29 14:00:19 2026 GMT
Not After : Mar 30 14:00:19 2026 GMT
Subject: CN=a4d2f750708c7ef633b88d676c50ef9d69950c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:a7:b6:d2:7e:31:0e:f0:d7:a7:86:da:5d:
85:55:f8:73:80:65:5e:19:b4:5c:99:30:0b:72:c0:
92:06:36:8a:f7:77:9b:0c:43:ed:d5:01:ae:ac:89:
ba:86:0a:45:cb:44:74:60:0e:d0:04:0b:2f:40:85:
23:fd:b1:8b:2d:5c:37:48:09:46:06:c0:e3:14:8e:
77:7c:c1:56:06:1a:d1:25:d0:c0:4e:84:89:68:b2:
94:1a:9f:90:4c:8d:f3:c6:4e:50:da:c2:e9:b9:47:
14:08:50:f6:77:54:00:92:4f:0f:32:96:45:16:54:
ce:4d:47:41:48:93:2b:e2:7d:5e:6e:1d:16:b1:5c:
f3:ac:e1:7e:b9:be:d5:90:85:24:3d:ff:21:38:df:
aa:27:c9:31:24:a0:53:04:0e:7e:6a:3e:74:45:1c:
09:63:65:ec:6c:3e:58:ba:1f:34:7d:e6:7f:54:04:
1a:d8:b1:7e:5d:d2:49:49:17:13:cb:a3:58:ce:1a:
cf:83:1b:fa:0f:95:c0:2f:99:e0:27:c3:06:57:e7:
c0:4a:66:12:25:6e:a0:39:22:33:9c:c6:91:3d:ec:
67:4d:7a:7e:88:af:22:09:1d:6d:c6:67:2b:c8:08:
e6:ac:9d:34:53:1b:6c:5c:39:34:49:29:24:60:a3:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:F7:50:70:8C:7E:F6:33:B8:8D:67:6C:50:EF:9D:69:95:0C:0D
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8e:d7:6c:ea:c5:e5:fd:9e:9f:e8:da:2f:66:31:3f:ad:e8:
80:39:63:35:05:4d:77:99:75:a0:ea:82:54:d4:f5:57:44:f4:
67:e1:bb:8a:fa:bb:6c:f3:53:cf:c9:89:9e:d0:d2:c4:d8:35:
33:41:01:9a:9e:1f:20:1d:5a:98:94:54:5a:6a:9f:46:43:e3:
1d:ac:c8:e8:f3:d0:00:85:5c:00:71:fd:07:e4:d9:d4:84:ae:
33:e7:46:fd:a8:cf:99:40:b6:c3:ab:4a:ba:14:c3:ea:b1:1e:
21:48:08:56:8f:a0:52:58:e9:3e:2a:b1:88:9d:73:65:a9:a0:
0d:0e:5e:26:d9:dc:05:25:ac:d9:19:76:a3:fd:3e:6d:20:ea:
e8:67:2d:4c:a3:a1:a6:d0:6f:49:f0:4d:5c:58:04:c6:f3:a7:
64:96:64:0c:dd:ad:41:dc:13:4d:fb:44:88:65:b7:0f:3a:3d:
eb:02:af:45:24:4d:4b:97:d4:9e:fe:db:37:fa:97:c7:71:15:
12:57:b6:44:1e:73:39:3c:b0:0d:7a:58:65:1f:77:02:4a:b0:
23:bd:c6:28:62:d7:ed:06:23:c5:29:a8:e5:9e:44:ac:29:da:
00:9e:47:30:49:a7:37:df:db:b6:0a:ed:8d:a6:c2:f8:3f:26:
17:19:4e:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055UWKH2pvix6SqHtcObWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZGExMTU1NjM5OWUyOGZjNTVkYWIzYmEwNzg2OGZmNDkx
YzZmYjgwHhcNMjYwMzI5MTQwMDE5WhcNMjYwMzMwMTQwMDE5WjAzMTEwLwYDVQQD
EyhhNGQyZjc1MDcwOGM3ZWY2MzNiODhkNjc2YzUwZWY5ZDY5OTUwYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt02nttJ+MQ7w16eG2l2FVfhzgGVe
GbRcmTALcsCSBjaK93ebDEPt1QGurIm6hgpFy0R0YA7QBAsvQIUj/bGLLVw3SAlG
BsDjFI53fMFWBhrRJdDAToSJaLKUGp+QTI3zxk5Q2sLpuUcUCFD2d1QAkk8PMpZF
FlTOTUdBSJMr4n1ebh0WsVzzrOF+ub7VkIUkPf8hON+qJ8kxJKBTBA5+aj50RRwJ
Y2XsbD5Yuh80feZ/VAQa2LF+XdJJSRcTy6NYzhrPgxv6D5XAL5ngJ8MGV+fASmYS
JW6gOSIznMaRPexnTXp+iK8iCR1txmcryAjmrJ00UxtsXDk0SSkkYKM8MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTS91BwjH72M7iNZ2xQ751plQwNMB8GA1UdIwQY
MBaAFFraEVVjmeKPxV2rO6B4aP9JHG+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQt
ODRhZmVhYWJiMzczLzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQtODRhZmVhYWJiMzcz
LzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI7XbOrF
5f2en+jaL2YxP63ogDljNQVNd5l1oOqCVNT1V0T0Z+G7ivq7bPNTz8mJntDSxNg1
M0EBmp4fIB1amJRUWmqfRkPjHazI6PPQAIVcAHH9B+TZ1ISuM+dG/ajPmUC2w6tK
uhTD6rEeIUgIVo+gUljpPiqxiJ1zZamgDQ5eJtncBSWs2Rl2o/0+bSDq6GctTKOh
ptBvSfBNXFgExvOnZJZkDN2tQdwTTftEiGW3Dzo96wKvRSRNS5fUnv7bN/qXx3EV
Ele2RB5zOTywDXpYZR93AkqwI73GKGLX7QYjxSmo5Z5ErCnaAJ5HMEmnN9/btgrt
jabC+D8mFxlO2g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:51 2026 by rpki-client