Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier: xa4nwO8GPLu2vIgadIcD053dEncG4UakYdO0xFsz5uo=
Subject key identifier: 0F:14:26:B2:1C:EA:CD:56:B6:D0:7C:B5:26:31:A0:E6:80:72:B5:D4
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019D62E26ACE55A799EB074507D18BB2CF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number: 01B1
Signing time: Mon 06 Apr 2026 13:01:38 +0000
Manifest this update: Mon 06 Apr 2026 13:01:38 +0000
Manifest next update: Tue 07 Apr 2026 13:01:38 +0000
Files and hashes: 1: BoaIQSYbboRffe69ZqloN_D0H0Y.roa (hash: i3KDPa2RxyWwYzP/G5P21Ic9687HXXfMyZ15RYSZ6ek=)
2: g0zb0vUt0k4f8Kh4kbEHYtQwpHM.roa (hash: PeuckptZ68uiOTJOumhOYXtOSZI/Womws0rJbl8a51M=)
3: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: sxyRMzmbIDUPsUzjXnvnEzqiueiiDlVwnsKQxSUHuVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:e2:6a:ce:55:a7:99:eb:07:45:07:d1:8b:b2:cf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: Apr 6 13:01:38 2026 GMT
Not After : Apr 7 13:01:38 2026 GMT
Subject: CN=0f1426b21ceacd56b6d07cb52631a0e68072b5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:4c:e7:fd:ed:11:dd:0e:0a:87:e8:c5:ff:
f8:a9:3c:15:ad:c2:7d:fd:3b:33:16:b5:2f:4d:eb:
ee:1a:30:94:7f:84:ee:ca:c2:16:ca:c9:3c:52:49:
5c:81:90:a3:20:80:18:d4:d7:be:14:ba:ea:50:b5:
88:fb:ed:d7:d7:b6:9a:78:7c:f4:86:32:c7:70:f6:
95:5b:c7:8a:bc:e2:db:19:5f:13:b5:b3:69:3d:4f:
7f:96:a0:fa:6c:6b:b0:4a:38:6e:0e:1a:1f:b4:47:
7b:e0:4d:93:f9:a6:e5:e7:d7:9e:6c:47:9a:97:e7:
cd:33:b0:60:6b:40:aa:67:b5:0a:e6:b8:5a:45:57:
cf:58:6d:81:e3:6a:3f:19:ea:53:0c:c1:86:40:a8:
19:48:d3:ef:aa:04:ba:0c:20:03:64:ca:2a:74:bf:
d5:f5:87:5e:cb:45:3a:47:12:66:ba:b2:65:dd:b2:
5c:4a:52:b2:be:86:43:c7:8f:72:8b:b7:19:aa:ab:
2f:fd:4c:f5:98:9b:7a:c0:8b:c6:bb:f1:46:93:bd:
53:e9:8b:a2:b1:be:93:96:7b:39:25:77:39:f4:f7:
35:3e:17:db:4c:29:4a:77:00:df:2e:c9:cb:cd:35:
b5:a0:f3:2f:3e:5e:75:4f:70:f9:1e:ef:7e:27:62:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:14:26:B2:1C:EA:CD:56:B6:D0:7C:B5:26:31:A0:E6:80:72:B5:D4
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b0:ce:18:f2:98:b3:07:3c:50:45:51:ae:a6:c8:96:c1:9e:
a5:ac:f1:12:8e:05:5c:7e:aa:7e:18:e5:1b:47:87:04:60:19:
dd:49:79:3b:f2:a3:46:3c:58:27:61:f1:f1:eb:7b:48:c5:b1:
23:aa:7a:d9:82:f3:86:5d:3a:d0:18:c2:83:21:b6:fc:55:68:
d8:f6:4a:4b:0e:89:59:5d:a8:ee:57:bb:b2:86:3c:4f:38:17:
80:b4:18:ef:0f:4d:f9:f4:a9:93:df:62:44:f2:37:4e:9a:a8:
83:7c:85:48:25:98:1c:40:d3:62:85:3a:20:9c:33:6e:ef:cf:
1e:09:b3:ef:03:27:09:7e:f2:08:72:07:36:6b:72:76:5c:e0:
00:d1:dd:c4:00:54:9e:5d:ba:23:ce:21:9f:89:9e:a7:ee:33:
f9:87:12:d6:a7:3a:77:5d:4d:36:f2:f3:66:ad:26:c9:94:4b:
33:a3:4e:17:ca:cd:64:c6:8a:87:53:ac:e9:28:b5:07:10:70:
17:f6:8e:3f:fb:c1:bf:14:3b:b6:aa:1e:57:b5:c0:8e:f4:cb:
a6:ee:04:c6:57:48:b0:84:07:ce:c3:41:70:f2:27:bd:4e:a1:
72:ef:e7:c7:b1:7d:1c:64:7b:4b:2a:9e:bb:0d:86:d8:60:ac:
de:11:4d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1i4mrOVaeZ6wdFB9GLss8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZmI0OTJmMGExODhmMDAxNDI3OGUwZGY2YmJiMDI5Y2Vi
YWRiYWYwHhcNMjYwNDA2MTMwMTM4WhcNMjYwNDA3MTMwMTM4WjAzMTEwLwYDVQQD
EygwZjE0MjZiMjFjZWFjZDU2YjZkMDdjYjUyNjMxYTBlNjgwNzJiNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9FM5/3tEd0OCofoxf/4qTwVrcJ9
/TszFrUvTevuGjCUf4TuysIWysk8UklcgZCjIIAY1Ne+FLrqULWI++3X17aaeHz0
hjLHcPaVW8eKvOLbGV8TtbNpPU9/lqD6bGuwSjhuDhoftEd74E2T+abl59eebEea
l+fNM7Bga0CqZ7UK5rhaRVfPWG2B42o/GepTDMGGQKgZSNPvqgS6DCADZMoqdL/V
9Ydey0U6RxJmurJl3bJcSlKyvoZDx49yi7cZqqsv/Uz1mJt6wIvGu/FGk71T6Yui
sb6Tlns5JXc59Pc1PhfbTClKdwDfLsnLzTW1oPMvPl51T3D5Hu9+J2LcEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8UJrIc6s1WttB8tSYxoOaAcrXUMB8GA1UdIwQY
MBaAFMH7SS8KGI8AFCeODfa7sCnOutuvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQt
NTE1YTBlZjY4NmFiLzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQtNTE1YTBlZjY4NmFi
LzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrDOGPKY
swc8UEVRrqbIlsGepazxEo4FXH6qfhjlG0eHBGAZ3Ul5O/KjRjxYJ2Hx8et7SMWx
I6p62YLzhl060BjCgyG2/FVo2PZKSw6JWV2o7le7soY8TzgXgLQY7w9N+fSpk99i
RPI3Tpqog3yFSCWYHEDTYoU6IJwzbu/PHgmz7wMnCX7yCHIHNmtydlzgANHdxABU
nl26I84hn4mep+4z+YcS1qc6d11NNvLzZq0myZRLM6NOF8rNZMaKh1Os6Si1BxBw
F/aOP/vBvxQ7tqoeV7XAjvTLpu4ExldIsIQHzsNBcPInvU6hcu/nx7F9HGR7Syqe
uw2G2GCs3hFNxw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:14:35 2026 by rpki-client