Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: 9U95QDjBpMWY0VcQDwLeakxDE5efF7ZJLamhwnjboCE=
Subject key identifier: F2:4F:8D:84:D6:92:E6:74:BF:9E:45:2F:A2:DA:50:9C:C6:17:71:C4
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 019CE5FF3FA71D00C1C3239E5EAA533CBB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1874
Signing time: Fri 13 Mar 2026 07:00:36 +0000
Manifest this update: Fri 13 Mar 2026 07:00:36 +0000
Manifest next update: Sat 14 Mar 2026 07:00:36 +0000
Files and hashes: 1: VIJwQfnhHs3GHlmC403kclYI19k.roa (hash: pBGpIGY8oZecekT32agQOuUVvcZzYj8n135ZMBKxfjM=)
2: v0t-x1ezAOQzRGxbJKUbHeC0HN4.roa (hash: NklbdNXJrdH3kXOcwc9Kb/YETkdY+vXKTqyupumOkFo=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: W7e8NU7JGlmEoUh1Ny6kcS3MQmDYERHQxgJjNfys9Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:3f:a7:1d:00:c1:c3:23:9e:5e:aa:53:3c:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Mar 13 07:00:36 2026 GMT
Not After : Mar 14 07:00:36 2026 GMT
Subject: CN=f24f8d84d692e674bf9e452fa2da509cc61771c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:cd:5e:9a:ca:d1:08:79:b8:03:88:43:4d:
51:8f:60:45:42:5a:c2:54:bc:be:ac:ac:87:65:8a:
0b:ea:2a:04:48:99:ef:9b:36:63:b2:d8:39:f3:23:
eb:79:43:84:5e:b2:b3:75:2c:10:c3:78:53:19:36:
7e:fa:ef:34:f0:9e:7b:1a:86:e5:b7:4d:2f:32:9d:
7b:c6:7a:bd:2c:0b:a9:0e:fd:c1:6b:b8:f9:65:d2:
be:bd:1e:4f:fa:36:0d:ef:40:c1:98:b9:a2:7b:ff:
c6:3f:00:06:2b:48:af:ad:a4:99:3c:5e:be:3a:ca:
da:c4:b8:85:47:a5:cb:52:b5:77:09:1c:96:de:1c:
5f:6c:e7:70:e3:23:50:bc:5f:21:a1:83:f5:1d:56:
ce:33:f4:5d:26:5e:f8:c2:02:70:76:39:fa:bc:2f:
ee:10:5c:03:7a:b1:88:c1:15:79:47:f9:53:80:09:
25:36:2f:2a:ea:02:86:04:c7:30:b9:52:8e:df:30:
ad:17:99:a0:7c:1b:65:62:76:cc:6b:25:3b:dc:a5:
91:03:55:35:ca:86:cf:52:6b:c6:d7:29:ad:c1:fb:
a0:c5:c5:22:2b:d2:e2:e3:cd:74:9d:d0:9d:46:69:
29:ab:e5:5d:3f:ac:e5:aa:a9:f5:33:de:ec:9e:40:
63:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4F:8D:84:D6:92:E6:74:BF:9E:45:2F:A2:DA:50:9C:C6:17:71:C4
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b3:2b:71:c9:8f:bb:4c:ac:93:9e:42:b7:2b:a1:2d:ed:ba:
e1:3f:29:56:dd:01:f9:57:1e:5f:d6:6c:ab:fa:52:61:cc:bd:
df:80:8c:40:66:8f:da:99:6f:e6:77:37:26:e9:dd:21:72:60:
ae:09:ed:52:9a:50:59:47:2a:53:80:4b:58:3c:57:26:f2:0b:
15:6a:dc:07:2e:e8:7c:a6:44:ba:21:7f:23:c6:09:26:41:a6:
3f:d0:9d:20:c9:ac:02:9f:43:46:3d:cb:85:ef:2e:7a:41:1f:
4b:1d:e5:1f:d4:df:94:5c:80:d8:3f:6f:c6:e1:db:31:48:72:
22:da:5f:12:32:55:ae:d0:6b:81:c5:9b:e3:fb:e7:10:95:f5:
8b:62:5b:9f:49:e9:0a:c4:aa:62:76:5d:ae:e9:1d:5c:79:72:
34:6c:bd:f1:fc:cc:40:24:71:de:b2:f8:85:b5:e0:00:47:fe:
c5:64:0a:e5:c5:7d:45:92:08:ba:14:f4:31:fa:14:c2:3e:3a:
6d:ce:d7:a4:29:7b:93:d0:40:d5:86:5c:89:19:f6:6b:a3:46:
45:0d:82:c2:9c:2a:11:8c:aa:4f:23:d5:4a:2c:fa:f7:fc:31:
a1:83:79:9d:59:c5:cc:fd:3e:4d:6b:a6:55:5a:1b:d5:f8:10:
54:6b:e8:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/z+nHQDBwyOeXqpTPLtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDJhMjM0ZTIyNGJmODc5OTZmMmYwZGY1NTllYWQ4ODJm
OWU2NTEwHhcNMjYwMzEzMDcwMDM2WhcNMjYwMzE0MDcwMDM2WjAzMTEwLwYDVQQD
EyhmMjRmOGQ4NGQ2OTJlNjc0YmY5ZTQ1MmZhMmRhNTA5Y2M2MTc3MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHTNXprK0Qh5uAOIQ01Rj2BFQlrC
VLy+rKyHZYoL6ioESJnvmzZjstg58yPreUOEXrKzdSwQw3hTGTZ++u808J57Gobl
t00vMp17xnq9LAupDv3Ba7j5ZdK+vR5P+jYN70DBmLmie//GPwAGK0ivraSZPF6+
OsraxLiFR6XLUrV3CRyW3hxfbOdw4yNQvF8hoYP1HVbOM/RdJl74wgJwdjn6vC/u
EFwDerGIwRV5R/lTgAklNi8q6gKGBMcwuVKO3zCtF5mgfBtlYnbMayU73KWRA1U1
yobPUmvG1ymtwfugxcUiK9Li4810ndCdRmkpq+VdP6zlqqn1M97snkBjKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJPjYTWkuZ0v55FL6LaUJzGF3HEMB8GA1UdIwQY
MBaAFMLSojTiJL+HmW8vDfVZ6tiC+eZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYt
NGIyNDhkYTZjOTZjLzEvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYtNGIyNDhkYTZjOTZj
LzEvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7MrccmP
u0ysk55CtyuhLe264T8pVt0B+VceX9Zsq/pSYcy934CMQGaP2plv5nc3JundIXJg
rgntUppQWUcqU4BLWDxXJvILFWrcBy7ofKZEuiF/I8YJJkGmP9CdIMmsAp9DRj3L
he8uekEfSx3lH9TflFyA2D9vxuHbMUhyItpfEjJVrtBrgcWb4/vnEJX1i2Jbn0np
CsSqYnZdrukdXHlyNGy98fzMQCRx3rL4hbXgAEf+xWQK5cV9RZIIuhT0MfoUwj46
bc7XpCl7k9BA1YZciRn2a6NGRQ2CwpwqEYyqTyPVSiz69/wxoYN5nVnFzP0+TWum
VVob1fgQVGvoyA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:45 2026 by rpki-client