Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
File: w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft (raw, json)
Hash identifier: jzTYWdoSB3Z8YUiIKPKKzZ8+Yn9pd7m699XWfujXUXc=
Subject key identifier: 68:E5:BF:6E:B2:F6:E4:6B:DD:43:7C:EE:EF:43:46:BE:DF:B5:35:44
Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
Certificate issuer: /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Certificate serial: 019D382E103ADEAC653CCC2C791111D9C2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
Manifest number: 0DFB
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: W8dKjXBUt-fUvq_EeYi3tYn44qg.roa (hash: WuUbLEYtlTk2nWLaWd31Mi6WPwho3xJbhqbEmnd2kdo=)
2: w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl (hash: ZIjNROi9QTGPNOwakErCztYSAP5GdOYpUsHXGNdR0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:10:3a:de:ac:65:3c:cc:2c:79:11:11:d9:c2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=68e5bf6eb2f6e46bdd437ceeef4346bedfb53544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:08:bb:d3:ca:97:23:e2:86:7c:c2:5b:1f:
3a:5b:42:e2:ad:68:b8:cf:40:93:77:60:43:2a:29:
e4:a0:89:bc:02:0e:b1:22:a6:c7:6c:88:ae:d4:1b:
54:a5:d0:cd:6a:b1:c3:21:69:04:3b:08:6c:c2:f4:
2d:bc:05:84:87:d2:76:50:0b:fa:fe:97:f4:e1:56:
de:58:4d:c9:ac:5e:26:d8:4a:8f:4c:7e:5d:19:87:
a2:2c:d1:a3:12:17:84:74:a3:e1:fb:48:db:48:81:
28:6b:a3:e2:ba:70:40:e9:cb:c7:83:dd:a1:ee:f9:
05:be:b1:1c:a8:85:75:42:30:80:0b:f8:5a:e0:15:
b4:fc:f0:17:39:2c:dd:a0:6a:17:c2:00:56:93:e5:
0b:54:89:a0:10:88:be:13:24:f6:b0:46:13:03:99:
ae:90:51:a3:b2:88:1d:5b:e0:58:62:bf:6e:85:d9:
fc:99:5d:02:2b:26:2a:02:25:0d:c9:3a:d1:2d:dc:
4a:5c:c0:06:40:f6:75:ce:62:d5:5f:f4:bb:a7:0c:
66:86:31:3a:e3:57:5c:65:6b:34:31:53:8c:83:c9:
69:95:2c:f5:01:64:dd:54:c0:09:af:0e:b6:f7:7b:
35:9b:50:43:51:21:b5:16:41:74:16:e3:51:19:60:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E5:BF:6E:B2:F6:E4:6B:DD:43:7C:EE:EF:43:46:BE:DF:B5:35:44
X509v3 Authority Key Identifier:
keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:db:4d:f6:e8:99:91:97:02:4d:ee:27:6c:d1:36:31:56:f5:
ed:02:72:63:63:a9:eb:83:19:d9:23:32:22:d9:77:1a:7a:73:
92:ba:a9:c4:21:53:6e:e0:27:34:5d:2c:cc:b8:63:4b:c1:6f:
c9:07:fd:e0:e9:9b:0a:11:b8:6a:b2:7e:09:0d:b6:a3:bb:77:
a3:02:ab:e2:30:ff:20:3d:1d:4f:f3:90:d5:34:19:10:88:38:
4c:eb:0a:67:71:f4:75:2a:8e:39:70:72:40:31:bf:d0:d7:88:
48:7b:93:e4:6d:b3:0a:b0:bb:44:69:9b:54:2f:78:04:cb:f6:
c0:a5:b6:60:8e:68:21:0b:08:68:40:be:0f:64:a9:8a:41:30:
c5:41:5e:04:10:97:f6:5a:2e:05:6c:f0:e8:ce:67:41:41:7d:
2f:dc:37:75:5a:56:d7:41:ce:3f:b7:a0:e2:f2:11:0c:2a:4d:
29:e8:86:4f:8c:8c:b2:c4:16:96:17:ce:bc:c7:99:b6:8c:77:
42:d6:c6:04:88:1a:b1:3e:9f:39:fc:80:61:3d:81:eb:aa:6f:
e7:1a:88:a5:33:2b:f1:9b:fd:ae:dd:8f:bd:53:78:de:4d:db:
ec:27:a4:7b:25:3d:5a:66:6a:2a:78:19:8c:6e:3c:c3:bd:39:
0a:e6:03:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LhA63qxlPMwseRER2cL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZmFkZjQ0ZTEwMWUxNjVjODdiYjRkMGVmY2NmOTRiZDY3
ZTJhMzUwHhcNMjYwMzI5MDYwMDM2WhcNMjYwMzMwMDYwMDM2WjAzMTEwLwYDVQQD
Eyg2OGU1YmY2ZWIyZjZlNDZiZGQ0MzdjZWVlZjQzNDZiZWRmYjUzNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXwIu9PKlyPihnzCWx86W0LirWi4
z0CTd2BDKinkoIm8Ag6xIqbHbIiu1BtUpdDNarHDIWkEOwhswvQtvAWEh9J2UAv6
/pf04VbeWE3JrF4m2EqPTH5dGYeiLNGjEheEdKPh+0jbSIEoa6PiunBA6cvHg92h
7vkFvrEcqIV1QjCAC/ha4BW0/PAXOSzdoGoXwgBWk+ULVImgEIi+EyT2sEYTA5mu
kFGjsogdW+BYYr9uhdn8mV0CKyYqAiUNyTrRLdxKXMAGQPZ1zmLVX/S7pwxmhjE6
41dcZWs0MVOMg8lplSz1AWTdVMAJrw6293s1m1BDUSG1FkF0FuNRGWDeVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjlv26y9uRr3UN87u9DRr7ftTVEMB8GA1UdIwQY
MBaAFMP630ThAeFlyHu00O/M+UvWfio1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd19yZlJPRUI0V1hJZTdUUTc4ejVTOVotS2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNzRkYzUtZjNiYy00YmZiLTg5Zjct
ZDk3YmQzMzAzMjhjLzEvd19yZlJPRUI0V1hJZTdUUTc4ejVTOVotS2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jNzRkYzUtZjNiYy00YmZiLTg5ZjctZDk3YmQzMzAzMjhj
LzEvd19yZlJPRUI0V1hJZTdUUTc4ejVTOVotS2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATttN9uiZ
kZcCTe4nbNE2MVb17QJyY2Op64MZ2SMyItl3GnpzkrqpxCFTbuAnNF0szLhjS8Fv
yQf94OmbChG4arJ+CQ22o7t3owKr4jD/ID0dT/OQ1TQZEIg4TOsKZ3H0dSqOOXBy
QDG/0NeISHuT5G2zCrC7RGmbVC94BMv2wKW2YI5oIQsIaEC+D2SpikEwxUFeBBCX
9louBWzw6M5nQUF9L9w3dVpW10HOP7eg4vIRDCpNKeiGT4yMssQWlhfOvMeZtox3
QtbGBIgasT6fOfyAYT2B66pv5xqIpTMr8Zv9rt2PvVN43k3b7CekeyU9WmZqKngZ
jG48w705CuYDbQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:42 2026 by rpki-client