Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: Z6obGj1R32eJijplUEPXr3AcqcKwn58JLuetinJq3W4=
Subject key identifier: 2F:6D:16:5C:FC:71:72:22:B9:C8:DF:97:B9:DE:EA:DC:57:D3:79:99
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 019D2884D5B6BAFCFCBD078E430132EC9A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 0858
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: 42Ji29vqDAxpdndaWxEQMipFjyU.roa (hash: aVLNPW2DwaXPkiMoRdCmxUWjB3XXnvtot9VBLL1K0cY=)
2: ME6vRLxkNmOkJwq_oQkZ9OQRI14.roa (hash: ztigzmBI+Nqg3JYL/aEqwd3HX52y65/qJXje8DI37qo=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: 41SZL+Y10yV1mqewpd7/f9Q1d1lSCnx8JTPBd23zWks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d5:b6:ba:fc:fc:bd:07:8e:43:01:32:ec:9a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=2f6d165cfc717222b9c8df97b9deeadc57d37999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:04:fc:9c:ed:4c:85:e4:67:9d:b0:0c:4d:
8e:a3:46:6d:2b:ce:eb:14:73:41:fb:f1:9d:3f:9f:
33:16:6f:45:7d:1c:2d:0e:be:a9:4a:70:f6:ac:2c:
f6:3d:81:36:78:a3:19:51:d9:08:1c:92:45:6c:f9:
98:15:e7:48:44:1b:c3:da:49:a9:7c:f6:64:50:75:
ee:15:50:46:59:eb:29:30:fb:22:ec:4d:c4:23:d6:
8b:3e:7d:01:0a:45:cb:b4:31:77:66:6b:7a:6b:b8:
f1:5b:0a:a5:2b:a3:f8:2a:65:cd:9b:4f:52:e7:63:
ad:fc:81:ab:92:85:59:9f:ae:a1:fc:5e:69:4a:47:
80:7f:e0:ad:63:90:4b:5b:d6:c1:06:85:1d:1b:a8:
b1:e1:47:c0:9f:8f:bc:52:be:2f:fd:19:63:d3:df:
c8:df:9e:17:88:50:b2:ee:93:9d:db:5d:51:ba:9c:
8a:da:61:b3:0c:37:64:28:89:f7:eb:ec:5b:ac:27:
fb:d5:7b:7d:5b:b6:c1:fe:28:cf:67:62:7c:99:35:
4c:cb:5d:b9:cd:c2:33:fc:ae:60:1d:d1:6e:d7:0f:
3e:66:46:d9:c2:46:1a:5e:f5:66:f1:89:e7:23:ff:
f6:18:ed:af:82:5a:1d:0c:4c:af:54:c0:86:ed:75:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6D:16:5C:FC:71:72:22:B9:C8:DF:97:B9:DE:EA:DC:57:D3:79:99
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1a:e8:12:c0:2b:86:9c:9d:11:16:b4:fc:2f:7c:31:b9:7e:
4f:42:64:ca:79:59:ec:b0:b9:26:bb:be:bd:05:d9:90:76:93:
7b:78:6a:aa:97:0d:6d:1f:86:72:90:a5:2d:18:80:5c:74:1b:
44:a9:d7:f4:3f:f0:c9:17:49:68:eb:60:c6:1f:75:16:0e:03:
63:bb:52:27:ce:8f:70:bb:6d:ac:88:b3:b3:a1:0f:1a:c4:ed:
fa:5a:8e:c0:1f:22:fb:9e:d6:8b:5c:53:ea:d9:c7:bc:f2:72:
84:47:af:d9:b1:2e:9d:30:39:79:41:aa:53:94:42:02:d8:ee:
ba:39:24:de:b4:88:d7:d2:bf:6d:39:b3:3f:2b:0a:89:f9:76:
78:df:c7:a0:ec:ef:39:6f:46:fe:89:fc:63:42:8a:8d:c3:dd:
50:d5:04:02:5e:05:73:67:f7:82:51:da:1c:24:46:63:a1:02:
ef:5f:7b:df:fd:e6:0b:9f:7c:11:37:17:ea:49:c5:39:c0:26:
09:be:c1:df:4f:41:f2:20:16:5a:6b:2c:b5:54:a3:0d:38:9a:
66:3e:0c:67:d6:46:90:32:3b:01:89:fb:3e:8c:e1:25:5d:02:
0d:d0:65:db:e6:8e:5f:2f:54:8a:99:fb:c3:dc:07:bf:e7:70:
cb:5d:1b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohNW2uvz8vQeOQwEy7JocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTE5MzM0YWQyYWQ1MzYxNmMzNGZlY2U5NmNlMjkyMzBm
ODYzNDkwHhcNMjYwMzI2MDUwMTI3WhcNMjYwMzI3MDUwMTI3WjAzMTEwLwYDVQQD
EygyZjZkMTY1Y2ZjNzE3MjIyYjljOGRmOTdiOWRlZWFkYzU3ZDM3OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ME/JztTIXkZ52wDE2Oo0ZtK87r
FHNB+/GdP58zFm9FfRwtDr6pSnD2rCz2PYE2eKMZUdkIHJJFbPmYFedIRBvD2kmp
fPZkUHXuFVBGWespMPsi7E3EI9aLPn0BCkXLtDF3Zmt6a7jxWwqlK6P4KmXNm09S
52Ot/IGrkoVZn66h/F5pSkeAf+CtY5BLW9bBBoUdG6ix4UfAn4+8Ur4v/Rlj09/I
354XiFCy7pOd211RupyK2mGzDDdkKIn36+xbrCf71Xt9W7bB/ijPZ2J8mTVMy125
zcIz/K5gHdFu1w8+ZkbZwkYaXvVm8YnnI//2GO2vglodDEyvVMCG7XWGKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9tFlz8cXIiucjfl7ne6txX03mZMB8GA1UdIwQY
MBaAFMKRkzStKtU2FsNP7Ols4pIw+GNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDIt
MTY1MzE4OGQ4MTI2LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDItMTY1MzE4OGQ4MTI2
LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRroEsAr
hpydERa0/C98Mbl+T0JkynlZ7LC5Jru+vQXZkHaTe3hqqpcNbR+GcpClLRiAXHQb
RKnX9D/wyRdJaOtgxh91Fg4DY7tSJ86PcLttrIizs6EPGsTt+lqOwB8i+57Wi1xT
6tnHvPJyhEev2bEunTA5eUGqU5RCAtjuujkk3rSI19K/bTmzPysKifl2eN/HoOzv
OW9G/on8Y0KKjcPdUNUEAl4Fc2f3glHaHCRGY6EC71973/3mC598ETcX6knFOcAm
Cb7B309B8iAWWmsstVSjDTiaZj4MZ9ZGkDI7AYn7PozhJV0CDdBl2+aOXy9Uipn7
w9wHv+dwy10bkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:01 2026 by rpki-client