Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: 6/EVo7Z3GfPvZN3CNRoxtGwoTJ+Ug5IJHUdpQPrk0X0=
Subject key identifier: DC:6B:35:69:A2:FF:B5:BF:56:05:AE:82:AB:B5:C8:C6:F3:02:5B:21
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019D39E5E9C1FE44C4CBEEAFB6AB61AC6E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0D11
Signing time: Sun 29 Mar 2026 14:01:02 +0000
Manifest this update: Sun 29 Mar 2026 14:01:02 +0000
Manifest next update: Mon 30 Mar 2026 14:01:02 +0000
Files and hashes: 1: KrihM0-M-9dbOhmKaKlJsVRPjLE.asa (hash: 1tpnATyjLiEC8Y1JllxOdUuP2TfvewFCh8KSgFzAI/Q=)
2: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: r+Msw6XAhd2YX4Un5reNKOf81g5+BkKmJuyJg15R458=)
3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e9:c1:fe:44:c4:cb:ee:af:b6:ab:61:ac:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Mar 29 14:01:02 2026 GMT
Not After : Mar 30 14:01:02 2026 GMT
Subject: CN=dc6b3569a2ffb5bf5605ae82abb5c8c6f3025b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:46:3f:83:e8:5f:a9:6d:3c:b2:d1:13:d5:
f6:ff:c8:d8:d2:e9:66:d3:c2:d1:f2:c0:21:3b:de:
23:9c:27:c9:c9:bd:7e:9d:27:cc:6d:fd:d8:50:3d:
ed:d6:f1:c0:00:e3:50:59:d3:27:98:aa:7c:17:9f:
54:b0:6a:32:c6:68:b0:1b:0a:9f:d5:a3:a3:d9:d0:
e7:3e:57:01:8b:a6:c4:d7:b1:a8:6d:46:85:93:44:
44:e8:2b:ef:cb:26:42:46:ba:73:29:c4:c7:19:1a:
57:32:03:c2:e7:a5:f9:2b:df:0e:2f:7a:21:6a:ba:
1b:88:69:bd:b3:81:99:d2:70:1a:35:49:9d:e9:ea:
52:3a:c3:75:31:b0:c8:47:76:15:be:81:86:07:43:
07:3c:a2:e7:22:b2:69:73:55:a1:df:75:78:cc:13:
3d:22:50:74:50:02:45:61:ef:6c:5d:90:c2:11:e0:
b0:8d:d8:dc:e9:8d:ed:0a:19:bf:e0:43:ef:c2:7c:
ef:4a:df:9d:a9:bf:51:8e:2f:12:2a:cd:89:db:6a:
ef:06:ad:c5:41:4a:97:62:fc:97:39:b9:b9:87:70:
f8:6f:5f:d0:a3:11:b2:e1:55:07:17:ba:81:4d:4d:
cb:ec:59:57:90:86:7c:27:a7:13:ab:f0:b5:a4:55:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:35:69:A2:FF:B5:BF:56:05:AE:82:AB:B5:C8:C6:F3:02:5B:21
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:33:24:11:7b:f2:c7:6d:f6:d5:07:5b:02:35:15:bf:8b:18:
af:33:03:ee:77:7f:b6:d9:56:16:dd:a6:43:2e:e2:59:5f:d4:
c1:43:da:be:25:7e:11:c3:42:7b:92:6a:07:0d:67:ab:dc:2f:
52:aa:73:a2:db:91:55:d7:ff:8e:a7:9d:30:a6:21:bf:1e:3f:
6b:10:90:c9:6f:90:03:f9:00:08:7e:28:61:6d:2a:59:10:26:
77:f5:ab:41:26:25:e1:77:00:99:0a:4d:e8:5f:c5:d2:80:06:
e3:90:f8:3b:92:ff:5e:be:34:78:50:4d:64:7e:c0:e2:0f:c8:
8f:4b:d3:8f:c5:c4:0b:b4:c0:84:59:d3:f2:db:31:33:78:41:
42:8a:0c:1d:ef:56:2c:40:d1:c8:76:fe:32:6b:9a:0a:ef:2b:
a9:88:31:21:44:af:1a:49:bb:01:9e:6f:e9:4f:4f:b8:37:60:
5c:ad:f8:d7:13:dc:b7:fb:17:82:29:a9:bf:1f:26:df:a6:5a:
c4:24:3d:41:f9:5c:84:ba:ed:55:32:b6:aa:08:63:fb:1b:8d:
f7:80:8d:64:d1:38:97:eb:ab:52:0c:c3:5f:0b:78:99:80:93:
33:be:72:56:78:6c:11:90:b6:92:9a:3c:2f:7d:0a:bf:62:7b:
bf:cf:28:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055enB/kTEy+6vtqthrG5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OWE3NDBmNGJjMzBhMmMwNGNkY2IzMzQ0YWYwZDZhMmQw
NWE0ODEwHhcNMjYwMzI5MTQwMTAyWhcNMjYwMzMwMTQwMTAyWjAzMTEwLwYDVQQD
EyhkYzZiMzU2OWEyZmZiNWJmNTYwNWFlODJhYmI1YzhjNmYzMDI1YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhpGP4PoX6ltPLLRE9X2/8jY0ulm
08LR8sAhO94jnCfJyb1+nSfMbf3YUD3t1vHAAONQWdMnmKp8F59UsGoyxmiwGwqf
1aOj2dDnPlcBi6bE17GobUaFk0RE6CvvyyZCRrpzKcTHGRpXMgPC56X5K98OL3oh
arobiGm9s4GZ0nAaNUmd6epSOsN1MbDIR3YVvoGGB0MHPKLnIrJpc1Wh33V4zBM9
IlB0UAJFYe9sXZDCEeCwjdjc6Y3tChm/4EPvwnzvSt+dqb9Rji8SKs2J22rvBq3F
QUqXYvyXObm5h3D4b1/QoxGy4VUHF7qBTU3L7FlXkIZ8J6cTq/C1pFX0YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxrNWmi/7W/VgWugqu1yMbzAlshMB8GA1UdIwQY
MBaAFFmadA9LwwosBM3LM0SvDWotBaSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYt
OTEwMmMzYzA1MTM4LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYtOTEwMmMzYzA1MTM4
LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTMkEXvy
x2321QdbAjUVv4sYrzMD7nd/ttlWFt2mQy7iWV/UwUPaviV+EcNCe5JqBw1nq9wv
UqpzotuRVdf/jqedMKYhvx4/axCQyW+QA/kACH4oYW0qWRAmd/WrQSYl4XcAmQpN
6F/F0oAG45D4O5L/Xr40eFBNZH7A4g/Ij0vTj8XEC7TAhFnT8tsxM3hBQooMHe9W
LEDRyHb+MmuaCu8rqYgxIUSvGkm7AZ5v6U9PuDdgXK341xPct/sXgimpvx8m36Za
xCQ9QflchLrtVTK2qghj+xuN94CNZNE4l+urUgzDXwt4mYCTM75yVnhsEZC2kpo8
L30Kv2J7v88oIA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:59 2026 by rpki-client