Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File: wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier: OYVYuO7VR9stsvoSjuTqgJFUICSuRUzuGHTgSUUyNWQ=
Subject key identifier: 9B:95:89:6D:99:D6:1F:77:D2:43:B2:47:14:9E:9C:C5:A2:1F:CD:12
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer: /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial: 019D39AF087D26EEB90234DCAF78B81B3A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number: 1040
Signing time: Sun 29 Mar 2026 13:01:05 +0000
Manifest this update: Sun 29 Mar 2026 13:01:05 +0000
Manifest next update: Mon 30 Mar 2026 13:01:05 +0000
Files and hashes: 1: HEmaONS-4AyfdKSuhqxZ1eXPDvA.roa (hash: Zph0f22jUL4/wY1fTUmGHlz5Uf3hM9c2kdfEksVr4m0=)
2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: q1ItFF9uUUBgIlmxLi/v1f14MvxWt9GS+b+rZofi7aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:08:7d:26:ee:b9:02:34:dc:af:78:b8:1b:3a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Validity
Not Before: Mar 29 13:01:05 2026 GMT
Not After : Mar 30 13:01:05 2026 GMT
Subject: CN=9b95896d99d61f77d243b247149e9cc5a21fcd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:ac:ce:13:ca:84:48:f5:06:ad:91:ad:78:
2e:08:fa:ad:cb:7e:bb:c2:c2:ff:02:31:eb:11:90:
a8:06:ba:8a:8a:f8:f4:d8:d9:bf:7e:ca:a3:97:bd:
b4:be:ee:f4:e2:58:91:44:74:d8:51:c2:1c:c1:e2:
59:3a:b4:9a:ad:f7:d7:3e:de:69:02:9b:3b:d4:4f:
6a:6e:ce:7d:0d:64:f4:4a:53:7b:1d:2a:2d:13:29:
63:22:2c:fa:e8:a7:0f:62:94:dd:94:2a:6f:ec:ac:
bb:ea:c0:de:3c:b1:3f:2a:3c:74:5f:ea:e3:dd:72:
e3:9c:1e:94:d9:c9:1d:5c:10:dc:7a:d8:76:fc:d8:
db:0f:bf:4c:03:ed:b1:6c:71:c9:83:16:6e:67:61:
5e:a9:7f:3d:47:10:75:c5:09:e1:35:f5:1f:b6:1c:
9d:0c:b1:bd:3a:f7:5f:a6:78:9b:c5:52:10:d7:69:
a4:b1:63:57:5f:00:f2:c9:6a:ea:cb:bb:19:ae:78:
05:dc:5b:40:12:a7:d3:64:5a:36:1f:9d:6f:88:43:
83:03:29:8e:4f:6e:21:d7:a5:75:51:4b:37:5a:1d:
b9:9a:e4:42:ab:c6:c5:c7:a3:06:66:77:8d:a7:b4:
ca:6a:7f:cd:36:04:3a:77:22:44:85:97:7d:2a:6f:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:95:89:6D:99:D6:1F:77:D2:43:B2:47:14:9E:9C:C5:A2:1F:CD:12
X509v3 Authority Key Identifier:
keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:05:f6:8c:43:2b:d4:4c:1f:3d:46:42:bf:86:54:b7:c1:b1:
03:53:25:ab:87:6d:38:69:50:4e:8c:4d:de:20:65:e7:69:7a:
05:b0:08:80:49:f3:67:21:b8:77:52:86:65:97:b0:f4:4a:08:
8c:5c:3a:d3:30:a6:8d:96:7e:cd:74:a5:0b:e2:b1:09:db:5a:
9c:d1:f2:92:1b:44:73:2d:e5:9e:42:0b:33:fe:52:49:1e:f2:
1e:af:38:04:68:ec:29:85:3d:a6:e6:9f:5d:98:99:78:05:df:
d8:02:72:0e:b8:8a:fa:5d:cf:d4:92:9a:ed:a9:42:b8:f5:59:
55:fc:07:da:1d:2a:48:55:91:0a:f1:bf:68:dc:34:8f:ad:fc:
fd:12:06:c1:bd:01:2b:fa:b6:b5:92:05:a5:7e:59:e7:6b:a1:
57:09:5a:18:1b:a8:00:bd:40:d0:0c:5c:52:bb:9c:84:f6:f6:
44:56:c6:31:ec:29:2f:27:13:97:e2:e2:9b:c9:33:a2:48:07:
b0:11:6a:5d:d1:e8:ed:9d:7f:06:ab:f7:8d:d7:86:f1:67:84:
c9:9a:d8:28:e8:56:a3:b5:fb:ef:6f:f0:e9:bb:ed:c4:2c:0b:
ae:1e:32:1e:7d:97:e7:2e:07:ff:05:00:b8:5e:a0:36:2e:72:
88:69:68:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rwh9Ju65AjTcr3i4GzqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjE1NzhjZTBmZjM3ZjA2YzI2MzYyZWEyYzYzNTdiOTg2
MzNiNzAwHhcNMjYwMzI5MTMwMTA1WhcNMjYwMzMwMTMwMTA1WjAzMTEwLwYDVQQD
Eyg5Yjk1ODk2ZDk5ZDYxZjc3ZDI0M2IyNDcxNDllOWNjNWEyMWZjZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulWszhPKhEj1Bq2RrXguCPqty367
wsL/AjHrEZCoBrqKivj02Nm/fsqjl720vu704liRRHTYUcIcweJZOrSarffXPt5p
Aps71E9qbs59DWT0SlN7HSotEyljIiz66KcPYpTdlCpv7Ky76sDePLE/Kjx0X+rj
3XLjnB6U2ckdXBDceth2/NjbD79MA+2xbHHJgxZuZ2FeqX89RxB1xQnhNfUfthyd
DLG9OvdfpnibxVIQ12mksWNXXwDyyWrqy7sZrngF3FtAEqfTZFo2H51viEODAymO
T24h16V1UUs3Wh25muRCq8bFx6MGZneNp7TKan/NNgQ6dyJEhZd9Km/N4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuViW2Z1h930kOyRxSenMWiH80SMB8GA1UdIwQY
MBaAFMFhV4zg/zfwbCY2LqLGNXuYYztwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjkt
YWZiZjRlY2YyYjUwLzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjktYWZiZjRlY2YyYjUw
LzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAX2jEMr
1EwfPUZCv4ZUt8GxA1Mlq4dtOGlQToxN3iBl52l6BbAIgEnzZyG4d1KGZZew9EoI
jFw60zCmjZZ+zXSlC+KxCdtanNHykhtEcy3lnkILM/5SSR7yHq84BGjsKYU9puaf
XZiZeAXf2AJyDriK+l3P1JKa7alCuPVZVfwH2h0qSFWRCvG/aNw0j638/RIGwb0B
K/q2tZIFpX5Z52uhVwlaGBuoAL1A0AxcUruchPb2RFbGMewpLycTl+Lim8kzokgH
sBFqXdHo7Z1/Bqv3jdeG8WeEyZrYKOhWo7X772/w6bvtxCwLrh4yHn2X5y4H/wUA
uF6gNi5yiGloTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:12 2026 by rpki-client