Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: a0OqV8fjg5ZYPZMAskM6W9tHGi8vpWVNjKy5a4Fn1HM=
Subject key identifier: 62:57:AF:5D:28:A9:EF:BE:9E:F0:30:2D:9A:40:55:C1:AD:AC:10:73
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019D228280CB6148351FFFD129551737AE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0AAD
Signing time: Wed 25 Mar 2026 01:01:11 +0000
Manifest this update: Wed 25 Mar 2026 01:01:11 +0000
Manifest next update: Thu 26 Mar 2026 01:01:11 +0000
Files and hashes: 1: 2Q-43uiN8L4SUtY6rBnbqrQP3wQ.roa (hash: +NoOXUEn4TaHsF+2ba/PR75YfFJyamS/9W3TcNyhHlY=)
2: vzndtJv3C6Zy-lzN-kLFrdDnM0U.roa (hash: aGiRS6aqG80bShwtq6AdtxzTVTN51CvwEoSpu1PpwpU=)
3: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: FKqF1Wjl0EwuzjPIugONm5Y7f2QyDt8t91Wuwwtz8Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:82:80:cb:61:48:35:1f:ff:d1:29:55:17:37:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Mar 25 01:01:11 2026 GMT
Not After : Mar 26 01:01:11 2026 GMT
Subject: CN=6257af5d28a9efbe9ef0302d9a4055c1adac1073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a8:83:df:9e:29:86:df:74:dd:d6:77:37:79:
c9:9a:16:7f:98:57:5b:44:ae:50:23:57:6e:4f:d3:
55:54:cf:4a:4f:90:6e:07:fd:a7:fc:70:cc:51:68:
e4:11:4b:63:f7:00:44:ca:ac:56:e9:1c:7b:78:0d:
72:7c:19:7d:90:c0:3f:f2:9d:c2:d0:81:eb:36:d7:
49:9f:2f:07:3f:ee:1e:75:54:20:64:71:cb:50:7f:
23:b3:09:31:66:a6:70:8a:7a:bd:e1:77:4f:b0:b9:
b4:79:b7:48:b4:31:fd:16:f0:c6:fd:b9:c5:f6:44:
67:80:6d:39:5d:b4:2d:34:ae:47:8f:47:90:8e:41:
4d:03:8d:12:76:a2:df:0b:72:26:ef:99:41:5b:59:
45:48:2b:ac:95:b1:35:4c:06:c8:e3:0f:69:1c:f3:
ef:e7:72:99:af:2f:6d:57:3d:b4:9f:2a:cf:5a:8f:
c7:d3:6f:63:30:d8:bd:cc:29:32:8d:d2:00:4a:65:
64:46:72:17:f7:00:64:a6:62:13:4e:ef:9b:9d:9b:
a3:90:5e:f0:a2:d1:2e:72:39:4d:ed:cc:17:9b:45:
15:93:3d:b7:e4:00:0d:ab:b3:3a:02:b2:5a:96:c2:
7c:22:97:74:30:fc:89:70:ba:c5:3b:5a:33:cd:b1:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:AF:5D:28:A9:EF:BE:9E:F0:30:2D:9A:40:55:C1:AD:AC:10:73
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:86:33:4e:60:44:46:a8:91:f2:2a:81:ce:39:a2:db:2d:f7:
6e:41:08:25:ee:41:cb:bd:f4:a7:c1:b8:69:20:6b:7c:73:cc:
6d:df:3e:60:d1:fb:d3:d7:56:55:c8:d2:e3:b3:ec:73:4d:9e:
7a:b7:0c:86:a3:a8:a8:21:a3:4d:3f:ef:a5:dd:9f:4e:0b:84:
bb:28:b4:66:87:66:15:5f:b0:72:a8:e1:ce:7f:2f:0d:41:d9:
a1:e4:75:41:0d:b5:78:ec:05:d2:10:05:af:0f:dd:8b:b1:70:
5a:94:75:c8:96:2e:0f:7b:5e:e7:96:f6:ed:ed:e6:c5:18:08:
b8:e9:c5:64:49:67:8f:75:34:36:26:f0:27:8b:88:91:17:e0:
c6:9a:74:5f:b5:c3:1a:fd:d6:7f:1f:e1:91:9e:6f:07:aa:f7:
95:3a:c8:e7:61:bd:03:84:2c:b6:d0:f1:fb:8a:05:e0:e3:59:
9a:26:f7:02:29:5b:af:ba:06:1e:82:ae:23:91:40:7f:10:93:
4c:06:9b:bd:e0:12:75:b9:eb:a8:f8:a8:89:e6:79:01:d4:52:
26:5a:51:48:40:99:08:6d:2c:0b:70:4d:df:81:b0:1c:86:ad:
77:c5:c6:12:ee:69:04:ef:b7:df:81:83:3b:b4:4f:d0:99:45:
15:3c:41:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0igoDLYUg1H//RKVUXN66aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDRjZDdkZjg0YzMxOWQxOWFmMzViMTEwNGYxNzNlYmEy
YzZkYmQwHhcNMjYwMzI1MDEwMTExWhcNMjYwMzI2MDEwMTExWjAzMTEwLwYDVQQD
Eyg2MjU3YWY1ZDI4YTllZmJlOWVmMDMwMmQ5YTQwNTVjMWFkYWMxMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KiD354pht903dZ3N3nJmhZ/mFdb
RK5QI1duT9NVVM9KT5BuB/2n/HDMUWjkEUtj9wBEyqxW6Rx7eA1yfBl9kMA/8p3C
0IHrNtdJny8HP+4edVQgZHHLUH8jswkxZqZwinq94XdPsLm0ebdItDH9FvDG/bnF
9kRngG05XbQtNK5Hj0eQjkFNA40SdqLfC3Im75lBW1lFSCuslbE1TAbI4w9pHPPv
53KZry9tVz20nyrPWo/H029jMNi9zCkyjdIASmVkRnIX9wBkpmITTu+bnZujkF7w
otEucjlN7cwXm0UVkz235AANq7M6ArJalsJ8Ipd0MPyJcLrFO1ozzbGUmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJXr10oqe++nvAwLZpAVcGtrBBzMB8GA1UdIwQY
MBaAFMEEzX34TDGdGa81sRBPFz66LG29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQt
N2VmZjhmMWU5MWNkLzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQtN2VmZjhmMWU5MWNk
LzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoYzTmBE
RqiR8iqBzjmi2y33bkEIJe5By730p8G4aSBrfHPMbd8+YNH709dWVcjS47Psc02e
ercMhqOoqCGjTT/vpd2fTguEuyi0ZodmFV+wcqjhzn8vDUHZoeR1QQ21eOwF0hAF
rw/di7FwWpR1yJYuD3te55b27e3mxRgIuOnFZElnj3U0NibwJ4uIkRfgxpp0X7XD
Gv3Wfx/hkZ5vB6r3lTrI52G9A4QsttDx+4oF4ONZmib3Ailbr7oGHoKuI5FAfxCT
TAabveASdbnrqPioieZ5AdRSJlpRSECZCG0sC3BN34GwHIatd8XGEu5pBO+334GD
O7RP0JlFFTxBGA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 06:39:33 2026 by rpki-client