Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
File: WcO0Sc8TL-kakwCloOU1948MVow.mft (raw, json)
Hash identifier: FyouIBD9Kue31QOv1iw9VqbQccEDvHNZZPmZXxyKXe4=
Subject key identifier: 17:0B:56:D0:4C:9C:E0:17:6C:5A:AC:FA:55:7F:2E:4A:E2:E9:B1:36
Authority key identifier: 59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
Certificate issuer: /CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Certificate serial: 019D3909C0F8174660D95CBC99DC3C35D364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
Manifest number: 0974
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: WcO0Sc8TL-kakwCloOU1948MVow.crl (hash: b5ZZROTktozRfkdxJDEQvR5JSGKIA02rD7Wf4j22pjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c0:f8:17:46:60:d9:5c:bc:99:dc:3c:35:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=170b56d04c9ce0176c5aacfa557f2e4ae2e9b136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:80:f8:e4:00:10:bc:84:64:62:bd:ed:3f:
22:66:59:c0:be:6f:bd:60:47:f2:18:61:a1:32:5c:
21:61:21:94:e3:32:4a:60:e2:4a:5e:78:10:65:3c:
77:11:66:67:26:ad:14:87:94:9b:72:39:7b:85:68:
ed:5e:2d:43:6b:90:1b:4a:6a:f8:7a:5e:b7:39:44:
af:2d:2f:27:f7:8d:f4:fc:64:52:86:4c:7b:9e:91:
07:ac:32:ab:d5:26:39:3b:c0:77:0a:41:78:36:0b:
4c:a0:ab:16:db:c5:11:29:be:f8:c3:fa:10:b4:b1:
d4:63:a9:9c:f8:b2:08:08:35:f6:33:e4:1d:94:a7:
95:5b:0b:06:c2:6e:06:35:36:aa:3a:d8:20:8c:e3:
1f:f6:64:8b:26:a2:1c:02:d4:55:a2:eb:a3:6f:77:
b9:ef:04:2e:74:d4:9d:c6:18:ed:05:5d:79:b8:65:
91:af:6d:b8:d5:4b:f3:c6:63:71:69:c7:3f:c4:0f:
7b:96:ca:de:9b:fe:25:7f:bd:7e:63:3e:f9:e9:8e:
49:88:00:87:c0:08:2c:52:65:16:b7:b8:ca:e4:90:
16:cb:63:39:6d:67:50:c8:4f:2f:fa:47:17:ed:20:
bd:bd:12:e4:eb:61:85:98:6b:27:d0:ab:e2:5f:84:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:56:D0:4C:9C:E0:17:6C:5A:AC:FA:55:7F:2E:4A:E2:E9:B1:36
X509v3 Authority Key Identifier:
keyid:59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c8:3d:8c:79:6b:78:55:28:81:c8:13:4d:a6:ac:14:a4:54:
19:c1:ca:22:9b:8c:2f:90:ff:e7:7e:a0:3b:3c:37:1e:8e:a0:
96:ac:86:38:5f:c8:fb:6f:20:ad:73:38:05:9a:e5:ca:7c:5a:
87:1c:ad:2a:d4:99:04:2b:90:7d:32:21:8e:4b:8a:5e:ac:62:
79:ff:8e:a4:92:63:d4:1a:dd:1a:10:1f:02:78:d0:69:9a:20:
a8:2e:f5:39:c6:d3:e7:48:81:84:f6:d3:b7:d6:15:f0:39:b0:
57:86:e9:fc:62:2a:5d:29:6b:0d:06:2d:4d:a6:c5:39:ce:11:
9e:73:7c:08:d9:e3:17:71:af:6a:ba:29:e1:82:1b:e3:be:54:
93:79:6f:bf:07:c5:d5:2c:9c:e4:c3:63:74:20:b1:1f:4d:48:
ae:51:5a:b0:fd:66:5d:98:92:dc:da:ca:e7:d4:df:c6:0c:1a:
a3:a5:c8:d7:ae:3e:6f:9d:37:73:f5:f7:b6:e3:6c:8f:b3:af:
71:ea:42:04:42:88:0e:68:c1:1a:81:d1:92:a2:a3:8b:c3:74:
00:0d:48:a5:cb:5d:e4:06:25:03:23:21:ed:c9:17:7e:00:65:
fd:b4:5a:2e:7b:37:0a:7f:d7:25:1c:a3:74:e9:37:40:16:d6:
28:94:8e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcD4F0Zg2Vy8mdw8NdNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzNiNDQ5Y2YxMzJmZTkxYTkzMDBhNWEwZTUzNWY3OGYw
YzU2OGMwHhcNMjYwMzI5MTAwMDMzWhcNMjYwMzMwMTAwMDMzWjAzMTEwLwYDVQQD
EygxNzBiNTZkMDRjOWNlMDE3NmM1YWFjZmE1NTdmMmU0YWUyZTliMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIOA+OQAELyEZGK97T8iZlnAvm+9
YEfyGGGhMlwhYSGU4zJKYOJKXngQZTx3EWZnJq0Uh5Sbcjl7hWjtXi1Da5AbSmr4
el63OUSvLS8n9430/GRShkx7npEHrDKr1SY5O8B3CkF4NgtMoKsW28URKb74w/oQ
tLHUY6mc+LIICDX2M+QdlKeVWwsGwm4GNTaqOtggjOMf9mSLJqIcAtRVouujb3e5
7wQudNSdxhjtBV15uGWRr2241UvzxmNxacc/xA97lsrem/4lf71+Yz756Y5JiACH
wAgsUmUWt7jK5JAWy2M5bWdQyE8v+kcX7SC9vRLk62GFmGsn0KviX4SnFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcLVtBMnOAXbFqs+lV/Lkri6bE2MB8GA1UdIwQY
MBaAFFnDtEnPEy/pGpMApaDlNfePDFaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82YTE2ODEtM2VhOC00NjNjLTkzZWQt
MmYyZDIzOTAzNjg4LzEvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82YTE2ODEtM2VhOC00NjNjLTkzZWQtMmYyZDIzOTAzNjg4
LzEvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMg9jHlr
eFUogcgTTaasFKRUGcHKIpuML5D/536gOzw3Ho6glqyGOF/I+28grXM4BZrlynxa
hxytKtSZBCuQfTIhjkuKXqxief+OpJJj1BrdGhAfAnjQaZogqC71OcbT50iBhPbT
t9YV8DmwV4bp/GIqXSlrDQYtTabFOc4RnnN8CNnjF3Gvarop4YIb475Uk3lvvwfF
1Syc5MNjdCCxH01IrlFasP1mXZiS3NrK59Tfxgwao6XI164+b503c/X3tuNsj7Ov
cepCBEKIDmjBGoHRkqKji8N0AA1Ipctd5AYlAyMh7ckXfgBl/bRaLns3Cn/XJRyj
dOk3QBbWKJSOGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:09 2026 by rpki-client