Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: 1LPhW5WrCBoKjn8g+bPYzqPBSXlBeBQsoQTOiaBqff8=
Subject key identifier: A3:D4:9E:B6:CE:4D:C8:12:AA:F7:98:00:B7:E3:EA:6D:1E:43:D9:94
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019D3753106CA41E988CE3C30A89B13C9E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 12C5
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: iHVVqZEzXVjGEFHHsFfA2bDBIbyxmWmUP7Lt6nUOPjc=)
2: jRw_hCaxwNXQsYzA3PzlY4fOvh8.roa (hash: TsARQtUlpIVlezRpKUxgn9JnDhx3xOYYjd6M4rAmM6E=)
3: wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (hash: uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:10:6c:a4:1e:98:8c:e3:c3:0a:89:b1:3c:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=a3d49eb6ce4dc812aaf79800b7e3ea6d1e43d994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:2f:a1:0c:a0:51:d2:db:09:55:8f:9e:ae:
33:3a:03:12:53:78:e4:4b:f5:1c:09:9a:ad:4e:fe:
99:a1:5e:91:25:54:11:41:26:b4:a8:de:f5:2b:3d:
33:48:fa:fa:09:db:69:b9:38:e3:50:0e:9c:62:f4:
06:f1:0d:b6:fd:73:96:c1:d8:90:82:ec:b6:a4:d0:
27:21:67:0d:b2:80:a3:71:00:31:31:73:02:0d:d9:
51:72:bb:a4:20:a3:3e:a5:49:89:fd:2a:28:fc:e0:
3d:88:fa:de:af:2d:91:77:b3:68:8e:85:07:09:9d:
f9:76:51:16:1a:46:49:26:70:ac:d6:89:fb:42:36:
2f:49:ee:64:d8:c3:9d:92:ca:5f:9c:d1:4e:63:8f:
78:84:6c:08:18:20:e0:6f:b3:48:f9:2b:21:33:09:
15:bc:24:ab:e0:39:a8:ba:db:46:28:53:e2:3a:f4:
a5:1c:63:56:97:bb:73:fd:9c:c6:67:e0:1c:d2:00:
0f:e4:3a:4c:f5:b6:36:70:90:f1:03:a6:91:42:6c:
82:b3:5e:4f:cd:64:51:60:74:56:5e:bc:a7:27:0e:
d8:4d:06:0b:d8:48:03:da:1e:95:34:86:a0:38:62:
69:8d:87:85:95:93:92:9d:50:01:52:c1:fb:fc:94:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D4:9E:B6:CE:4D:C8:12:AA:F7:98:00:B7:E3:EA:6D:1E:43:D9:94
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d9:a4:5e:4e:c9:18:39:0f:d0:e9:ab:be:68:fe:7a:ae:20:
92:72:9a:8f:20:a2:21:1b:1b:fa:90:81:75:7f:70:2d:81:97:
53:72:e1:55:9c:41:e3:27:b9:8a:06:9c:17:04:c0:02:5a:a7:
43:01:04:48:54:9a:9e:10:5a:09:6c:24:13:1c:5d:a4:59:68:
ed:0b:4d:f2:62:42:d2:d3:48:1e:ea:02:e9:88:49:f4:9f:31:
a7:ff:ab:2c:ba:8d:8e:c2:e5:b3:61:a2:13:c6:aa:54:66:0f:
1a:d3:e8:cc:0d:b4:59:69:2e:3b:61:aa:c0:9e:ba:67:75:c9:
da:8a:69:a8:dc:6c:da:4a:b6:fd:ac:96:72:91:01:50:7c:a9:
9c:70:4d:71:73:10:cb:b7:9f:c4:1d:a9:34:69:da:d8:d6:4b:
60:e2:58:b0:ac:93:d2:7a:cb:8d:8e:bd:4b:90:59:08:c7:63:
1d:8c:bf:75:68:7d:6e:ad:77:cd:c3:20:81:c7:2c:72:f3:f0:
cb:40:3a:ff:76:94:ea:13:40:6b:15:12:9d:5f:4d:cc:99:26:
31:59:96:e4:69:af:ae:92:5c:ee:19:3f:28:17:ef:37:b2:b2:
39:3d:67:9c:32:e3:3a:55:2e:07:3c:29:c2:e0:3c:8e:a2:6f:
79:d3:23:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UxBspB6YjOPDComxPJ4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNjM2OTI3MWI2ZDEzYTZhZWRjYWEyM2ViYjI5ZTI5Yjc5
NmE0NmIwHhcNMjYwMzI5MDIwMTIzWhcNMjYwMzMwMDIwMTIzWjAzMTEwLwYDVQQD
EyhhM2Q0OWViNmNlNGRjODEyYWFmNzk4MDBiN2UzZWE2ZDFlNDNkOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYwvoQygUdLbCVWPnq4zOgMSU3jk
S/UcCZqtTv6ZoV6RJVQRQSa0qN71Kz0zSPr6CdtpuTjjUA6cYvQG8Q22/XOWwdiQ
guy2pNAnIWcNsoCjcQAxMXMCDdlRcrukIKM+pUmJ/Soo/OA9iPrery2Rd7NojoUH
CZ35dlEWGkZJJnCs1on7QjYvSe5k2MOdkspfnNFOY494hGwIGCDgb7NI+SshMwkV
vCSr4DmouttGKFPiOvSlHGNWl7tz/ZzGZ+Ac0gAP5DpM9bY2cJDxA6aRQmyCs15P
zWRRYHRWXrynJw7YTQYL2EgD2h6VNIagOGJpjYeFlZOSnVABUsH7/JQs0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPUnrbOTcgSqveYALfj6m0eQ9mUMB8GA1UdIwQY
MBaAFP1jaScbbROmrtyqI+uynim3lqRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZDVlMTUtNGYxNC00OWU2LWE2ZGQt
NDUzNTFmOWRiYjUyLzEvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lZDVlMTUtNGYxNC00OWU2LWE2ZGQtNDUzNTFmOWRiYjUy
LzEvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNmkXk7J
GDkP0Omrvmj+eq4gknKajyCiIRsb+pCBdX9wLYGXU3LhVZxB4ye5igacFwTAAlqn
QwEESFSanhBaCWwkExxdpFlo7QtN8mJC0tNIHuoC6YhJ9J8xp/+rLLqNjsLls2Gi
E8aqVGYPGtPozA20WWkuO2GqwJ66Z3XJ2oppqNxs2kq2/ayWcpEBUHypnHBNcXMQ
y7efxB2pNGna2NZLYOJYsKyT0nrLjY69S5BZCMdjHYy/dWh9bq13zcMggccscvPw
y0A6/3aU6hNAaxUSnV9NzJkmMVmW5GmvrpJc7hk/KBfvN7KyOT1nnDLjOlUuBzwp
wuA8jqJvedMjmg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:16 2026 by rpki-client