Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: wfyvrC4rKp1JKMEh7g87hUyPTynBKA8jaQcG/1jhtkk=
Subject key identifier: C6:26:9F:49:4E:DE:12:20:54:6A:21:61:4E:4A:44:B8:2A:0A:0E:B4
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 019D38D312CD6E59AC82E7B7063402A859DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: cxbw9dI/e6eL9KpG87XysNUcaqS2znslR7QQ3Dexjs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:12:cd:6e:59:ac:82:e7:b7:06:34:02:a8:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=c6269f494ede1220546a21614e4a44b82a0a0eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:a6:e8:b7:4b:a1:c0:d7:35:e4:c8:f5:2a:
75:7a:24:cd:f8:c2:76:fa:f0:1c:43:51:06:1d:aa:
3f:d1:bd:9d:8f:d1:e5:c7:d6:8c:8e:5c:e7:ac:d5:
db:86:19:1d:55:2e:93:e0:42:b8:08:78:8d:cf:d7:
2d:27:0f:a5:e2:82:d0:e4:d5:4d:69:e6:98:02:44:
34:5c:a0:24:82:53:bd:4a:48:5c:5a:3c:04:7b:4b:
80:0f:a9:c0:bd:e0:78:08:9c:67:c3:2a:f9:20:12:
f9:ec:08:32:f9:cb:da:cb:77:c8:c8:df:f7:f4:54:
3c:86:08:c9:ab:60:24:b9:b1:72:b9:13:af:c5:5b:
83:af:f3:27:70:79:ba:70:03:41:af:a1:16:36:d3:
c1:bf:28:3b:8f:ee:9f:47:cf:a2:32:8f:ef:20:f4:
c9:fa:b4:a5:b9:a0:c2:55:88:be:10:e2:e0:e9:ac:
a5:70:c8:e1:74:cd:06:35:42:68:75:ec:c1:3b:99:
2b:3e:21:9f:f0:7e:5e:ae:4f:25:8c:b9:7b:63:06:
ad:d7:0a:4f:c7:39:b3:9e:8f:25:35:47:1d:f6:64:
c4:94:8b:76:5a:ab:17:54:73:45:92:f5:29:71:44:
01:47:f4:36:97:d6:47:70:52:e0:27:aa:85:ae:bf:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:26:9F:49:4E:DE:12:20:54:6A:21:61:4E:4A:44:B8:2A:0A:0E:B4
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:48:f3:2f:b7:f8:29:3b:66:79:25:d3:12:c4:73:b8:ba:1c:
32:d9:95:52:31:5f:b0:9a:27:8b:2f:d0:b6:af:c4:26:a7:49:
81:73:79:29:04:5c:d1:11:bd:67:ed:ef:57:6b:4e:fb:5c:99:
df:2d:3f:26:02:9c:82:1f:e3:6b:d6:5c:00:c4:3b:09:6b:48:
7e:8f:41:a8:a5:33:75:70:9e:cc:50:b7:df:a7:b1:a1:3a:89:
ae:31:51:c8:c1:f4:18:15:e1:14:82:28:ef:0c:52:48:20:96:
c9:40:1e:be:8c:dd:8c:12:ee:4d:20:3b:99:60:1d:f7:34:2e:
13:a9:29:01:a5:8d:f0:4b:43:95:2a:dd:e0:06:c8:d8:11:ef:
70:fd:32:4b:72:ca:2e:47:55:89:81:61:06:7e:0c:77:d2:72:
5c:f2:f8:a9:1f:0f:77:72:f1:99:c7:03:8c:1f:4f:79:7a:5c:
0b:32:06:98:0e:22:26:e4:44:c9:d1:74:a1:54:4f:2a:df:be:
9e:95:29:b2:56:e7:2d:a1:db:ef:7c:15:38:72:8e:3e:9c:f9:
48:41:6f:ba:e3:1a:33:f3:3b:2c:73:08:df:2b:5a:5c:c9:2e:
d9:2e:82:63:cc:45:16:56:b7:2c:09:da:03:21:76:a4:72:6d:
5f:65:c6:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xLNblmsgue3BjQCqFneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDc0ZmRhNTcyOWY3MDVlNWZkOTJmMjI1ZWNhZjViOTNj
YjgyODgwHhcNMjYwMzI5MDkwMDUwWhcNMjYwMzMwMDkwMDUwWjAzMTEwLwYDVQQD
EyhjNjI2OWY0OTRlZGUxMjIwNTQ2YTIxNjE0ZTRhNDRiODJhMGEwZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRmm6LdLocDXNeTI9Sp1eiTN+MJ2
+vAcQ1EGHao/0b2dj9Hlx9aMjlznrNXbhhkdVS6T4EK4CHiNz9ctJw+l4oLQ5NVN
aeaYAkQ0XKAkglO9SkhcWjwEe0uAD6nAveB4CJxnwyr5IBL57Agy+cvay3fIyN/3
9FQ8hgjJq2AkubFyuROvxVuDr/MncHm6cANBr6EWNtPBvyg7j+6fR8+iMo/vIPTJ
+rSluaDCVYi+EOLg6aylcMjhdM0GNUJodezBO5krPiGf8H5erk8ljLl7Ywat1wpP
xzmzno8lNUcd9mTElIt2WqsXVHNFkvUpcUQBR/Q2l9ZHcFLgJ6qFrr9NgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYmn0lO3hIgVGohYU5KRLgqCg60MB8GA1UdIwQY
MBaAFMEHT9pXKfcF5f2S8iXsr1uTy4KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTBkNjAtODc1Mi00YjZkLTg1Zjgt
NWU5NmMyMzJlM2Q1LzEvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTBkNjAtODc1Mi00YjZkLTg1ZjgtNWU5NmMyMzJlM2Q1
LzEvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkjzL7f4
KTtmeSXTEsRzuLocMtmVUjFfsJoniy/Qtq/EJqdJgXN5KQRc0RG9Z+3vV2tO+1yZ
3y0/JgKcgh/ja9ZcAMQ7CWtIfo9BqKUzdXCezFC336exoTqJrjFRyMH0GBXhFIIo
7wxSSCCWyUAevozdjBLuTSA7mWAd9zQuE6kpAaWN8EtDlSrd4AbI2BHvcP0yS3LK
LkdViYFhBn4Md9JyXPL4qR8Pd3LxmccDjB9PeXpcCzIGmA4iJuREydF0oVRPKt++
npUpslbnLaHb73wVOHKOPpz5SEFvuuMaM/M7LHMI3ytaXMku2S6CY8xFFla3LAna
AyF2pHJtX2XGgw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:28 2026 by rpki-client