Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
File: wlxF_6SjEkYMAP_t4y1NxB_S988.mft (raw, json)
Hash identifier: gokIRhlGeWWbJrQw9fJdcJvoiJIvPar1uE03qx3DDzE=
Subject key identifier: FE:3F:A1:62:C6:D0:C9:C5:87:53:61:EC:7E:68:3B:30:4A:17:92:F9
Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF
Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
Certificate serial: 019D3789737ECF43A8FD5CC6D14CC7ED7C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
Manifest number: 0114
Signing time: Sun 29 Mar 2026 03:00:48 +0000
Manifest this update: Sun 29 Mar 2026 03:00:48 +0000
Manifest next update: Mon 30 Mar 2026 03:00:48 +0000
Files and hashes: 1: pwR2uuhLQb704CaTl-JhUr6tQUw.roa (hash: WST6jplxdqOcMqOOJtSBgG40d9NpmMZJxxHB0hC7zBU=)
2: wlxF_6SjEkYMAP_t4y1NxB_S988.crl (hash: YYLkEPKNON4B/axl8s60b7r8IJUIYTg/Mh5Vjm3RF8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:73:7e:cf:43:a8:fd:5c:c6:d1:4c:c7:ed:7c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
Validity
Not Before: Mar 29 03:00:48 2026 GMT
Not After : Mar 30 03:00:48 2026 GMT
Subject: CN=fe3fa162c6d0c9c5875361ec7e683b304a1792f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:0e:b0:6a:0a:6b:78:a7:c5:79:40:dc:78:
78:f7:70:31:bc:5e:b5:37:11:89:36:96:2f:28:fd:
6d:21:c9:57:0d:3f:0f:a5:98:28:85:56:49:9b:a5:
6a:99:ac:57:f7:ec:94:6f:b4:01:66:56:26:36:1c:
4e:b0:ed:25:5a:29:43:48:15:43:30:af:94:96:2e:
01:bd:ac:67:28:76:f7:b4:0a:50:d7:19:84:8e:0c:
3d:38:07:a1:ee:93:aa:29:0d:8c:f2:5d:4a:ce:79:
08:9a:ac:28:1b:68:d8:42:32:3e:8a:c1:0a:47:e1:
89:80:a6:92:93:b9:a1:3d:f4:32:dc:ed:e8:fb:e3:
5a:e0:ba:5a:ec:90:e1:56:a9:7f:56:fa:53:e0:6c:
4d:56:68:57:94:95:aa:6d:08:84:fe:41:89:80:d7:
88:e7:69:30:19:cb:bd:75:d9:77:c0:d5:fc:c5:40:
43:c6:37:91:26:97:ef:d0:fb:22:c5:51:3c:c1:ed:
16:1a:2b:07:1e:b3:2f:ca:1c:9d:83:68:c3:af:c5:
ca:8e:41:14:2e:30:d7:e8:f5:79:b0:43:7d:b7:69:
82:37:47:ce:20:8d:ed:50:36:a2:69:72:b1:3a:c8:
0f:42:bd:72:74:ba:fd:32:6f:d9:f5:59:04:14:c5:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3F:A1:62:C6:D0:C9:C5:87:53:61:EC:7E:68:3B:30:4A:17:92:F9
X509v3 Authority Key Identifier:
keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:13:28:37:b6:db:ba:ae:c8:c4:09:e5:1b:6f:ff:4c:79:7d:
7f:b9:98:7d:ad:85:13:4d:4f:5d:47:6c:9d:ce:ed:a4:6a:c4:
c4:bb:f3:97:d6:ea:d6:8f:cc:02:c5:54:25:02:97:0d:25:f2:
61:fe:f3:27:89:cc:d3:a4:16:9b:28:91:c7:75:c7:89:f9:90:
d6:fe:35:88:84:d7:22:ca:40:55:66:ae:6d:45:d1:8e:df:00:
d1:e7:8b:c1:93:fb:dc:8a:da:4e:af:22:16:cc:4f:7c:ac:f8:
69:c4:c4:61:d8:fe:75:89:9d:28:c6:d4:2f:7e:80:94:04:23:
ec:a2:3f:6b:53:55:86:ce:36:b8:41:23:39:52:72:ec:88:7e:
61:ee:ca:30:9a:ea:3d:48:fc:79:f8:51:83:5b:18:d7:a2:76:
f2:5d:0a:4b:c9:71:ef:3b:92:da:93:94:aa:61:6d:21:47:2f:
53:90:83:05:cc:70:54:f8:85:f5:78:78:07:8f:13:16:fd:74:
b0:02:df:53:34:86:f5:dd:0c:2e:51:96:f5:7b:09:19:d7:b9:
6f:86:20:52:7d:ea:a6:9d:49:67:b2:d8:0d:29:68:7f:1c:2c:
88:00:7f:cc:39:1c:08:a2:5e:20:93:da:3b:06:66:70:a5:fb:
b3:53:33:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iXN+z0Oo/VzG0UzH7XwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWM0NWZmYTRhMzEyNDYwYzAwZmZlZGUzMmQ0ZGM0MWZk
MmY3Y2YwHhcNMjYwMzI5MDMwMDQ4WhcNMjYwMzMwMDMwMDQ4WjAzMTEwLwYDVQQD
EyhmZTNmYTE2MmM2ZDBjOWM1ODc1MzYxZWM3ZTY4M2IzMDRhMTc5MmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QoOsGoKa3inxXlA3Hh493AxvF61
NxGJNpYvKP1tIclXDT8PpZgohVZJm6VqmaxX9+yUb7QBZlYmNhxOsO0lWilDSBVD
MK+Uli4BvaxnKHb3tApQ1xmEjgw9OAeh7pOqKQ2M8l1KznkImqwoG2jYQjI+isEK
R+GJgKaSk7mhPfQy3O3o++Na4Lpa7JDhVql/VvpT4GxNVmhXlJWqbQiE/kGJgNeI
52kwGcu9ddl3wNX8xUBDxjeRJpfv0PsixVE8we0WGisHHrMvyhydg2jDr8XKjkEU
LjDX6PV5sEN9t2mCN0fOII3tUDaiaXKxOsgPQr1ydLr9Mm/Z9VkEFMXnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4/oWLG0MnFh1Nh7H5oOzBKF5L5MB8GA1UdIwQY
MBaAFMJcRf+koxJGDAD/7eMtTcQf0vfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAt
NzAxOWJkYmIxMTc3LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAtNzAxOWJkYmIxMTc3
LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxMoN7bb
uq7IxAnlG2//THl9f7mYfa2FE01PXUdsnc7tpGrExLvzl9bq1o/MAsVUJQKXDSXy
Yf7zJ4nM06QWmyiRx3XHifmQ1v41iITXIspAVWaubUXRjt8A0eeLwZP73IraTq8i
FsxPfKz4acTEYdj+dYmdKMbUL36AlAQj7KI/a1NVhs42uEEjOVJy7Ih+Ye7KMJrq
PUj8efhRg1sY16J28l0KS8lx7zuS2pOUqmFtIUcvU5CDBcxwVPiF9Xh4B48TFv10
sALfUzSG9d0MLlGW9XsJGde5b4YgUn3qpp1JZ7LYDSlofxwsiAB/zDkcCKJeIJPa
OwZmcKX7s1MzDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:29 2026 by rpki-client