Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier: wUFscfKM1AYOPLJWyZuQyYBErc0nFY3lLDOx1WzKIkg=
Subject key identifier: CE:02:16:07:7A:2E:2E:E4:53:45:49:70:D5:E0:0E:4E:D8:F4:5A:97
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial: 019DCF7540BE1DFAFA0185F408B6946DFD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number: 0889
Signing time: Mon 27 Apr 2026 15:01:01 +0000
Manifest this update: Mon 27 Apr 2026 15:01:01 +0000
Manifest next update: Tue 28 Apr 2026 15:01:01 +0000
Files and hashes: 1: VRZL4lqnlQdNXl1ew-BO5Jtzf78.roa (hash: lWi4+CdVg9U/MmtchWvR41UmLMSzY3HTa3grdEf3jrk=)
2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: Z9vxdfcr7w88j1sOiT8V3W5VOJIrCXNCUCfYonzsRVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:40:be:1d:fa:fa:01:85:f4:08:b6:94:6d:fd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Validity
Not Before: Apr 27 15:01:01 2026 GMT
Not After : Apr 28 15:01:01 2026 GMT
Subject: CN=ce0216077a2e2ee453454970d5e00e4ed8f45a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:a3:fb:73:45:43:f5:e2:d0:dc:7b:46:38:
cf:80:fe:87:a6:21:f0:d4:6a:a8:f9:8a:75:11:13:
f1:93:4e:4c:58:79:c0:1e:bb:4b:b1:8e:96:cd:ee:
e9:51:26:99:40:06:8d:ed:0d:d3:d7:c9:4d:f4:ef:
f1:c4:c9:dc:49:58:f8:b4:6c:a3:fb:5b:ce:a2:cb:
ee:d5:98:ae:c7:8c:5a:25:4d:ff:22:7a:c7:1e:90:
7e:96:f0:9a:f2:bc:fa:06:2e:37:24:96:ae:36:c3:
ed:2d:d5:19:16:6d:e4:bb:58:a8:6a:ec:1e:07:76:
1c:b5:95:29:57:4d:27:e7:37:35:a4:5e:60:48:3e:
12:e2:80:1a:40:08:4a:ba:44:09:43:a2:f0:c9:45:
3f:fd:e5:bb:21:03:1e:e4:5f:0e:4a:5e:6b:cf:8a:
e6:ca:4e:67:25:6b:b4:50:09:3f:97:e5:d6:6f:82:
60:b4:2c:61:37:32:74:02:2d:20:f0:47:31:44:58:
7a:1a:5f:d0:b3:f4:4c:c2:72:91:49:1c:7c:d5:24:
e8:90:47:3c:32:b7:da:e6:cf:b1:83:b3:0f:b4:73:
02:d9:6d:4e:58:37:10:db:cf:1c:f7:b0:b5:fd:49:
d0:73:72:58:67:69:41:be:70:97:07:08:0e:9a:c4:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:16:07:7A:2E:2E:E4:53:45:49:70:D5:E0:0E:4E:D8:F4:5A:97
X509v3 Authority Key Identifier:
keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b2:42:3d:5e:ae:59:a5:06:43:9c:fc:fa:9e:e4:7a:a1:88:
ea:7e:9c:c4:f8:bf:9d:77:66:b3:fc:aa:c6:99:46:be:a9:f8:
70:da:8a:ad:79:02:bf:17:7a:d4:92:55:c6:fd:d5:d3:ad:8b:
f6:37:fe:21:81:91:78:94:9d:69:d2:bb:a1:55:b7:80:1f:b7:
9a:a1:66:64:0b:e5:5c:4c:2f:ac:89:f4:73:59:20:87:c2:a1:
5b:9e:d2:2b:36:23:a2:fb:1c:99:d3:1a:81:b3:4f:94:30:3d:
8f:f6:4c:ca:68:d5:2c:76:b2:91:ea:df:a3:b8:02:b8:80:d7:
72:3f:49:6b:2f:25:33:68:a2:b7:a2:07:de:ad:0c:c5:2b:67:
8d:62:d4:7c:51:f5:4a:e4:b1:12:fe:2d:ff:84:b1:83:8e:bf:
fd:f3:36:9f:bf:a9:60:de:a9:f4:27:d1:8e:db:47:4e:48:8a:
cf:3d:a0:cc:3e:f2:38:1e:0e:00:8f:a1:1a:c6:fd:ed:47:a1:
ce:bc:90:fb:d0:79:17:3f:55:fb:f5:e1:84:11:f7:83:e8:aa:
01:fa:1d:f4:d4:b9:eb:11:7d:4e:21:58:25:06:ca:69:5c:5c:
1d:72:77:f6:f6:10:68:7a:cd:ca:fc:84:b0:cd:dc:7f:50:7a:
a1:61:52:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdUC+Hfr6AYX0CLaUbf0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTk1YjZjOGFlODZjZjkwNjlhYmEzZWJhNmRkZjJhNjgy
MzdmMDgwHhcNMjYwNDI3MTUwMTAxWhcNMjYwNDI4MTUwMTAxWjAzMTEwLwYDVQQD
EyhjZTAyMTYwNzdhMmUyZWU0NTM0NTQ5NzBkNWUwMGU0ZWQ4ZjQ1YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52ej+3NFQ/Xi0Nx7RjjPgP6HpiHw
1Gqo+Yp1ERPxk05MWHnAHrtLsY6Wze7pUSaZQAaN7Q3T18lN9O/xxMncSVj4tGyj
+1vOosvu1Ziux4xaJU3/InrHHpB+lvCa8rz6Bi43JJauNsPtLdUZFm3ku1ioauwe
B3YctZUpV00n5zc1pF5gSD4S4oAaQAhKukQJQ6LwyUU//eW7IQMe5F8OSl5rz4rm
yk5nJWu0UAk/l+XWb4JgtCxhNzJ0Ai0g8EcxRFh6Gl/Qs/RMwnKRSRx81STokEc8
Mrfa5s+xg7MPtHMC2W1OWDcQ288c97C1/UnQc3JYZ2lBvnCXBwgOmsQ1OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4CFgd6Li7kU0VJcNXgDk7Y9FqXMB8GA1UdIwQY
MBaAFMBZW2yK6Gz5Bpq6Prpt3ypoI38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAt
MTkxYjJhZTNmYTVhLzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAtMTkxYjJhZTNmYTVh
LzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArJCPV6u
WaUGQ5z8+p7keqGI6n6cxPi/nXdms/yqxplGvqn4cNqKrXkCvxd61JJVxv3V062L
9jf+IYGReJSdadK7oVW3gB+3mqFmZAvlXEwvrIn0c1kgh8KhW57SKzYjovscmdMa
gbNPlDA9j/ZMymjVLHaykerfo7gCuIDXcj9Jay8lM2iit6IH3q0MxStnjWLUfFH1
SuSxEv4t/4Sxg46//fM2n7+pYN6p9CfRjttHTkiKzz2gzD7yOB4OAI+hGsb97Ueh
zryQ+9B5Fz9V+/XhhBH3g+iqAfod9NS56xF9TiFYJQbKaVxcHXJ39vYQaHrNyvyE
sM3cf1B6oWFSHg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:46:55 2026 by rpki-client