Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: o/gToXxJJH8FIiS5jl580h09y5ZP7/NfrDbbB9rJwfw=
Subject key identifier: 1F:DD:96:AD:0A:65:EA:A1:A5:26:BD:6B:DF:CA:C6:44:24:40:4D:6F
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019D2A3BFE21100D8A77033D0F020E0D41E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 1309
Signing time: Thu 26 Mar 2026 13:01:07 +0000
Manifest this update: Thu 26 Mar 2026 13:01:07 +0000
Manifest next update: Fri 27 Mar 2026 13:01:07 +0000
Files and hashes: 1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: DHebpF3l/aRLtWKjiMCMnaGSmWXgMJQDJxT6uzzg1L8=)
2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=)
3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:fe:21:10:0d:8a:77:03:3d:0f:02:0e:0d:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Mar 26 13:01:07 2026 GMT
Not After : Mar 27 13:01:07 2026 GMT
Subject: CN=1fdd96ad0a65eaa1a526bd6bdfcac64424404d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:fa:67:12:dc:f5:b5:3a:25:de:66:15:0b:
c2:e5:40:f7:13:b6:fa:ab:d4:70:ce:66:23:21:19:
bf:c3:06:39:b7:f3:cb:45:33:f2:fc:1c:5e:ce:8c:
cd:ee:74:55:10:7c:58:92:49:91:34:74:1c:14:56:
61:38:be:62:f2:7a:c4:6b:38:16:30:20:b0:3b:9c:
a6:bb:e4:a2:7c:52:2c:64:64:75:e2:13:b2:71:a2:
7d:30:6b:38:15:08:40:c0:4d:cd:66:7f:41:8f:b8:
c2:82:a4:ae:1f:0c:34:a1:00:c9:61:58:00:3f:29:
ef:45:b5:fd:44:63:b9:3e:72:15:a8:43:c0:59:d8:
9e:fd:95:24:c6:40:79:22:02:1f:d5:26:3d:70:a6:
7e:29:28:e8:12:d9:61:b8:d5:29:b7:0b:db:b5:35:
c1:72:20:d7:fd:31:38:76:82:8e:9d:e2:29:a0:10:
bc:b8:a5:0d:e1:95:8a:73:b6:17:e1:92:01:41:b1:
a0:a1:6a:da:9c:6d:24:e6:8c:9d:bc:27:0a:20:34:
0d:2b:92:bf:98:50:c4:d6:93:99:3c:4c:b7:0a:75:
91:9c:63:a1:34:ac:72:a2:fb:a7:1f:cd:4d:6b:cd:
61:9c:45:16:e2:6f:68:84:05:d9:97:46:61:0f:85:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:96:AD:0A:65:EA:A1:A5:26:BD:6B:DF:CA:C6:44:24:40:4D:6F
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:79:f9:6b:9c:5c:26:be:49:fa:12:19:28:43:7c:51:87:d7:
39:1c:bb:66:64:d7:35:c7:5a:28:13:92:3a:59:90:10:c8:80:
30:25:c0:cb:81:93:28:b3:ea:40:94:93:7b:f2:ee:88:1b:8e:
16:97:ee:f6:8d:40:92:d6:4e:29:3e:e6:73:3a:10:07:10:9a:
22:9a:8a:4c:b1:79:87:67:9d:1f:24:d8:a9:e4:c6:89:99:ff:
ce:b1:ff:98:ec:ad:9f:df:62:2e:a8:ce:ef:95:d9:83:39:16:
d9:c7:12:06:bc:f0:b4:e8:6e:17:e1:d2:07:7f:49:95:f7:a5:
f0:41:26:fa:d7:c0:d0:ce:12:78:fc:15:49:e7:67:a8:35:ef:
ea:63:4a:f4:ff:c6:26:5d:9b:7e:6c:ce:dc:fe:4b:15:ad:b8:
bd:cf:2d:b5:4f:52:bf:3a:39:59:46:71:58:7d:d5:e0:49:7d:
7a:8d:5f:ad:67:ac:f9:21:49:d6:fe:9e:e2:f7:dc:b0:90:13:
c4:a4:9d:c9:0c:ea:f2:8b:5c:26:22:ed:2f:e4:81:ed:17:8b:
e2:41:59:32:68:98:27:66:1f:05:2c:fe:71:bd:b3:7c:fb:b8:
94:ad:50:51:88:39:43:71:0e:1f:96:4b:63:f5:e1:b7:32:58:
13:8f:d3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO/4hEA2KdwM9DwIODUHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjYwMzI2MTMwMTA3WhcNMjYwMzI3MTMwMTA3WjAzMTEwLwYDVQQD
EygxZmRkOTZhZDBhNjVlYWExYTUyNmJkNmJkZmNhYzY0NDI0NDA0ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGD6ZxLc9bU6Jd5mFQvC5UD3E7b6
q9RwzmYjIRm/wwY5t/PLRTPy/BxezozN7nRVEHxYkkmRNHQcFFZhOL5i8nrEazgW
MCCwO5ymu+SifFIsZGR14hOycaJ9MGs4FQhAwE3NZn9Bj7jCgqSuHww0oQDJYVgA
PynvRbX9RGO5PnIVqEPAWdie/ZUkxkB5IgIf1SY9cKZ+KSjoEtlhuNUptwvbtTXB
ciDX/TE4doKOneIpoBC8uKUN4ZWKc7YX4ZIBQbGgoWranG0k5oydvCcKIDQNK5K/
mFDE1pOZPEy3CnWRnGOhNKxyovunH81Na81hnEUW4m9ohAXZl0ZhD4VTywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/dlq0KZeqhpSa9a9/KxkQkQE1vMB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3n5a5xc
Jr5J+hIZKEN8UYfXORy7ZmTXNcdaKBOSOlmQEMiAMCXAy4GTKLPqQJSTe/LuiBuO
Fpfu9o1AktZOKT7mczoQBxCaIpqKTLF5h2edHyTYqeTGiZn/zrH/mOytn99iLqjO
75XZgzkW2ccSBrzwtOhuF+HSB39Jlfel8EEm+tfA0M4SePwVSednqDXv6mNK9P/G
Jl2bfmzO3P5LFa24vc8ttU9Svzo5WUZxWH3V4El9eo1frWes+SFJ1v6e4vfcsJAT
xKSdyQzq8otcJiLtL+SB7ReL4kFZMmiYJ2YfBSz+cb2zfPu4lK1QUYg5Q3EOH5ZL
Y/XhtzJYE4/Tjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:23:27 2026 by rpki-client