Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier: xDDBtCAu9DBzw4St1jDW/45EEUdsOokk2apbTZRipOk=
Subject key identifier: 5C:D2:50:17:2E:EF:46:9C:14:83:41:37:91:01:BD:A0:56:AB:32:8D
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial: 019D3753369974ED18070C02048CFA193043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number: 172D
Signing time: Sun 29 Mar 2026 02:01:33 +0000
Manifest this update: Sun 29 Mar 2026 02:01:33 +0000
Manifest next update: Mon 30 Mar 2026 02:01:33 +0000
Files and hashes: 1: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: 52+E0ZL1Mqgqy7pjS/qQaqUv1Uvi8Y/EA2W47isHcAM=)
2: rLs-_Q80LvN6tE7PzSkUA2oiIh8.roa (hash: GMqoDXQ3wU8Deq0i39xZJUggMEqmsY8s+770f8FFSeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:36:99:74:ed:18:07:0c:02:04:8c:fa:19:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Validity
Not Before: Mar 29 02:01:33 2026 GMT
Not After : Mar 30 02:01:33 2026 GMT
Subject: CN=5cd250172eef469c148341379101bda056ab328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:83:40:a6:f2:13:8a:ae:9a:6c:53:1c:c6:
45:29:d3:eb:70:15:94:c2:f8:54:e4:64:97:d3:ec:
55:e6:4d:4c:9a:b4:27:8f:a4:99:2d:6b:94:82:dc:
3e:8f:54:51:9a:88:73:da:8d:77:e5:f5:c7:8b:c9:
a8:63:4e:ba:03:43:9d:23:51:ee:e6:61:0d:c1:ee:
74:32:93:d7:a6:18:00:d9:c3:25:68:d5:3e:f7:32:
e3:be:cd:ae:17:bb:f0:02:e9:cf:7e:04:93:d9:40:
8c:12:06:5a:64:d3:e2:46:4c:31:8d:7a:99:f7:e4:
ab:4a:11:d2:31:a0:60:7b:91:f3:c2:38:00:2b:b5:
80:9e:8f:34:87:d8:df:45:03:bf:f5:10:ad:32:91:
b5:cd:de:30:96:ee:64:36:f2:23:7a:1c:2a:3e:5d:
53:83:5b:20:75:4c:bb:15:5e:68:ea:f2:d8:ca:6f:
0d:44:7c:26:d6:9f:43:a0:a1:b5:b1:cd:fc:e0:6d:
de:a7:59:ce:33:8d:c1:a3:3f:cc:4e:75:54:d3:a8:
2d:04:91:0b:4b:21:ed:0e:d9:26:e6:06:0d:cb:78:
ca:f7:ca:28:7c:af:18:e2:af:79:42:50:d8:78:83:
db:b4:fa:0d:4b:8f:1b:b3:20:93:3c:ae:6f:b8:5f:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D2:50:17:2E:EF:46:9C:14:83:41:37:91:01:BD:A0:56:AB:32:8D
X509v3 Authority Key Identifier:
keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:58:bf:a9:00:70:05:95:92:26:66:b8:e0:a6:48:f1:91:da:
b7:1d:ba:01:f7:b9:00:0e:d6:4e:19:93:28:ca:12:46:2d:b4:
ee:6e:c1:37:91:9e:74:4c:ae:1d:61:f5:97:10:61:85:5c:ae:
99:4e:6d:a2:af:82:2b:5c:04:a8:72:2e:3a:6f:9f:74:83:80:
4c:55:07:20:d3:e9:70:79:c4:20:34:62:25:4a:2a:82:94:05:
28:49:10:d8:a5:e6:1e:45:d0:7b:8e:69:fc:b3:6a:8e:c8:fb:
14:73:e6:a0:ad:de:0f:40:b1:f1:6a:2e:2f:9d:f0:63:9c:c9:
2c:bb:52:04:aa:b2:62:19:86:d8:be:ca:6b:a2:31:77:31:37:
fd:34:5f:7b:d9:70:c5:ac:0a:b1:f2:3e:94:43:80:90:16:ce:
7f:c2:d1:51:ad:7d:6a:15:30:1c:27:bf:03:4b:8e:66:99:5b:
1b:23:02:81:2c:a8:93:fc:4f:f0:8e:ed:cd:ce:41:98:85:0a:
e3:4c:7c:8c:24:df:d2:d1:1f:4a:4d:7e:3b:88:35:cf:3b:0c:
2c:3f:bc:4c:c4:4e:e1:d6:e8:87:ec:e7:6e:a2:cb:99:3b:87:
1e:9e:9d:33:93:18:51:26:0a:62:e7:1e:e2:00:20:30:01:47:
ba:40:0d:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UzaZdO0YBwwCBIz6GTBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl
MGUzZTQwHhcNMjYwMzI5MDIwMTMzWhcNMjYwMzMwMDIwMTMzWjAzMTEwLwYDVQQD
Eyg1Y2QyNTAxNzJlZWY0NjljMTQ4MzQxMzc5MTAxYmRhMDU2YWIzMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliiDQKbyE4qummxTHMZFKdPrcBWU
wvhU5GSX0+xV5k1MmrQnj6SZLWuUgtw+j1RRmohz2o135fXHi8moY066A0OdI1Hu
5mENwe50MpPXphgA2cMlaNU+9zLjvs2uF7vwAunPfgST2UCMEgZaZNPiRkwxjXqZ
9+SrShHSMaBge5HzwjgAK7WAno80h9jfRQO/9RCtMpG1zd4wlu5kNvIjehwqPl1T
g1sgdUy7FV5o6vLYym8NRHwm1p9DoKG1sc384G3ep1nOM43Boz/MTnVU06gtBJEL
SyHtDtkm5gYNy3jK98oofK8Y4q95QlDYeIPbtPoNS48bsyCTPK5vuF9QIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzSUBcu70acFINBN5EBvaBWqzKNMB8GA1UdIwQY
MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPli/qQBw
BZWSJma44KZI8ZHatx26Afe5AA7WThmTKMoSRi207m7BN5GedEyuHWH1lxBhhVyu
mU5toq+CK1wEqHIuOm+fdIOATFUHINPpcHnEIDRiJUoqgpQFKEkQ2KXmHkXQe45p
/LNqjsj7FHPmoK3eD0Cx8WouL53wY5zJLLtSBKqyYhmG2L7Ka6IxdzE3/TRfe9lw
xawKsfI+lEOAkBbOf8LRUa19ahUwHCe/A0uOZplbGyMCgSyok/xP8I7tzc5BmIUK
40x8jCTf0tEfSk1+O4g1zzsMLD+8TMRO4dboh+znbqLLmTuHHp6dM5MYUSYKYuce
4gAgMAFHukANHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:47 2026 by rpki-client