Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier: zbwNH+E1+wG7BwVJnndV9i5u0xGGOO+tEQiEOeVJ/ag=
Subject key identifier: 28:F6:64:6A:40:EA:D9:17:EA:AC:E1:37:34:3B:39:52:09:6A:D8:FD
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial: 019D382E626AEE042222B8B4EB8A929E16B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number: 0505
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa (hash: QMMxxl6fyPVIcpenT7PqBSSmMyHkr6udMWC3CqmEp8U=)
2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: x0L0phrW5zKSQIcuwhFwCJ9CTFeVbYI58KZk/jwcNWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:62:6a:ee:04:22:22:b8:b4:eb:8a:92:9e:16:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=28f6646a40ead917eaace137343b3952096ad8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:2c:9a:5f:10:cf:f0:9d:7b:9a:58:f4:71:
df:f6:51:37:69:bd:73:67:ea:35:53:d7:a7:c0:78:
a0:13:38:f5:92:2d:76:de:5a:f9:00:55:ba:c0:58:
2e:3a:79:f5:07:77:1b:b2:be:d4:51:64:6b:90:8f:
db:47:8d:7a:08:8c:77:36:e8:97:5e:27:6a:89:54:
e3:d1:37:d2:38:61:6c:52:04:13:9d:01:b9:21:2d:
a4:87:21:49:c3:b4:92:e5:7f:15:16:ac:ad:27:73:
f3:fb:be:72:c9:f1:81:64:f4:eb:aa:33:5e:a3:ff:
09:f0:63:0f:94:b4:0e:75:97:4b:95:f9:20:37:93:
d5:9d:64:e0:29:d0:41:11:5b:31:aa:c6:03:06:59:
17:35:59:79:b8:ad:0e:a9:f7:24:54:18:32:18:c2:
06:50:f8:24:8a:7e:00:cc:fd:11:c8:e6:14:ae:ef:
b2:85:ce:dc:ea:90:44:62:f5:fc:ce:f3:b1:9e:c4:
b3:0a:f2:ab:97:1c:a7:71:af:dc:cc:27:06:e2:87:
00:cb:f3:76:2e:9e:48:90:33:64:f4:ca:dd:75:75:
d6:a5:ff:2b:df:9b:6e:32:8c:86:66:e8:73:a1:2e:
1f:b0:5d:bc:b7:ad:7b:f1:cb:ab:3a:a3:10:77:99:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F6:64:6A:40:EA:D9:17:EA:AC:E1:37:34:3B:39:52:09:6A:D8:FD
X509v3 Authority Key Identifier:
keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:17:33:c3:95:70:28:45:39:76:48:80:b1:95:6a:6e:57:2c:
00:4b:ba:de:86:8a:4c:24:d9:4b:0f:cf:33:9b:06:4b:d0:e0:
2e:87:7c:a1:e3:0a:5a:16:50:55:e9:5c:5c:e6:37:dd:c2:00:
57:fb:dd:60:08:79:12:ca:41:0a:50:30:f1:62:2e:70:85:e0:
7b:66:b0:84:90:d4:24:b9:33:75:9f:3d:49:9f:ec:48:80:c8:
4e:bc:19:de:e1:59:68:82:59:d4:80:ce:4e:e4:10:24:bd:29:
c8:ed:76:86:35:f8:e4:a4:b8:7c:b2:1d:f6:a6:33:90:bc:0d:
25:fe:42:8c:fa:e3:f2:f6:ea:61:1e:a4:5e:4c:07:89:3c:5d:
b0:9b:43:d3:52:6f:06:04:0d:94:d4:92:f2:51:4f:d3:ae:2d:
84:98:04:1c:1b:c8:c5:1a:13:28:ae:0d:6b:81:5b:4a:1c:52:
43:6c:41:93:04:61:c2:44:f8:3a:3f:a4:44:eb:8f:23:70:f4:
ac:e6:09:aa:3a:7e:4b:9f:06:43:cb:75:95:93:ca:bb:a2:4f:
bc:74:c9:8b:ad:f5:5b:df:a0:4d:8f:88:24:66:41:14:3a:4f:
d5:10:19:2d:fb:39:74:d7:19:48:ba:ec:fe:07:fa:c9:3c:9d:
ab:1f:e8:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LmJq7gQiIri064qSnhazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz
YjE3NmQwHhcNMjYwMzI5MDYwMDU3WhcNMjYwMzMwMDYwMDU3WjAzMTEwLwYDVQQD
EygyOGY2NjQ2YTQwZWFkOTE3ZWFhY2UxMzczNDNiMzk1MjA5NmFkOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhssml8Qz/Cde5pY9HHf9lE3ab1z
Z+o1U9enwHigEzj1ki123lr5AFW6wFguOnn1B3cbsr7UUWRrkI/bR416CIx3NuiX
XidqiVTj0TfSOGFsUgQTnQG5IS2khyFJw7SS5X8VFqytJ3Pz+75yyfGBZPTrqjNe
o/8J8GMPlLQOdZdLlfkgN5PVnWTgKdBBEVsxqsYDBlkXNVl5uK0OqfckVBgyGMIG
UPgkin4AzP0RyOYUru+yhc7c6pBEYvX8zvOxnsSzCvKrlxynca/czCcG4ocAy/N2
Lp5IkDNk9MrddXXWpf8r35tuMoyGZuhzoS4fsF28t6178curOqMQd5kpqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj2ZGpA6tkX6qzhNzQ7OVIJatj9MB8GA1UdIwQY
MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt
NDRkMGQwODkxOTg5LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5
LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhczw5Vw
KEU5dkiAsZVqblcsAEu63oaKTCTZSw/PM5sGS9DgLod8oeMKWhZQVelcXOY33cIA
V/vdYAh5EspBClAw8WIucIXge2awhJDUJLkzdZ89SZ/sSIDITrwZ3uFZaIJZ1IDO
TuQQJL0pyO12hjX45KS4fLId9qYzkLwNJf5CjPrj8vbqYR6kXkwHiTxdsJtD01Jv
BgQNlNSS8lFP064thJgEHBvIxRoTKK4Na4FbShxSQ2xBkwRhwkT4Oj+kROuPI3D0
rOYJqjp+S58GQ8t1lZPKu6JPvHTJi631W9+gTY+IJGZBFDpP1RAZLfs5dNcZSLrs
/gf6yTydqx/oTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:43 2026 by rpki-client