Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier: FP6faLBHLxVeEVBNrie9g/8B3sofXvVzRdHb4kD2ggo=
Subject key identifier: 12:BB:E2:F0:E7:85:77:21:33:E7:83:B6:05:08:CB:00:50:FF:38:40
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 019D389C0D49DD03A379D77B8380F6B82D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: T8QJHByEv64H0gjF7HGRIrb9vjE.roa (hash: HQO3K4fGqybXPG44yT3CoGrtf4JzDzj7i8w8Wh7zPMc=)
2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: fSLDgRk5TeMwFlA3aFWLxTVUKtiCI2c2aJfwjjXWa94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0d:49:dd:03:a3:79:d7:7b:83:80:f6:b8:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=12bbe2f0e785772133e783b60508cb0050ff3840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:2b:c4:35:ef:dc:af:1e:7e:fc:e6:1a:42:
02:65:69:ed:93:91:8e:10:61:51:a5:cc:d5:3a:33:
e7:ee:48:af:86:ef:02:7f:40:12:b1:c1:bd:ad:76:
e5:ea:63:f1:21:fe:c2:01:5e:6f:be:4a:27:a8:17:
8b:4d:d5:1d:17:77:36:f4:72:d1:70:36:70:86:60:
8d:62:ea:07:2d:b4:52:f0:08:be:7b:12:ad:1f:05:
1c:13:3e:bc:c4:0d:48:b0:eb:03:f5:69:e1:32:d3:
86:2a:cc:19:7a:88:da:49:d5:99:99:43:e2:a8:1e:
d8:7c:64:88:5e:62:68:cd:b9:a8:c0:9f:f9:21:a5:
2b:cf:4c:ac:93:19:77:8e:55:0d:f9:bd:d6:be:70:
42:40:04:df:b9:8e:0b:6b:54:74:34:1b:55:e0:0f:
ea:77:c7:4b:cc:2b:93:22:f6:8d:8d:3c:28:3c:26:
36:00:c8:a9:a3:72:77:2c:50:6d:21:04:f0:f2:d1:
59:6e:f4:4d:3c:0e:2f:70:46:72:29:71:01:a7:73:
1a:1a:28:9c:4e:a4:74:63:dd:24:56:96:04:1b:0d:
b1:f6:cf:0d:1a:d1:06:99:e8:3f:ee:6e:17:b9:80:
b7:9d:67:63:86:b5:9d:53:7b:c2:60:15:eb:57:de:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:E2:F0:E7:85:77:21:33:E7:83:B6:05:08:CB:00:50:FF:38:40
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ca:ef:29:19:7c:69:7c:82:3a:ec:48:c2:59:d1:df:f1:45:
09:12:ef:8e:fe:a8:47:32:98:6c:a8:b2:40:7e:a3:d0:09:9f:
2c:26:ef:de:4b:b0:6c:37:39:49:d1:3c:f4:aa:1c:ee:3e:8e:
b1:70:20:35:20:c8:d5:0e:a1:f6:fe:3a:fb:38:77:da:ab:1f:
23:e9:fc:8e:a7:0b:b3:3f:a4:a0:51:07:1c:71:cd:3d:55:f6:
6f:31:17:9f:9e:d6:7a:69:b1:9f:bb:31:7e:fa:ac:62:ad:7b:
c2:c4:e8:66:60:aa:8d:63:81:63:72:72:01:37:99:24:b8:21:
47:ad:99:26:60:42:13:3f:ee:b6:f0:bf:51:f7:06:70:c7:e6:
b0:04:50:1a:e7:4a:09:eb:ed:e1:35:dd:81:3a:24:21:54:93:
3e:e8:ae:2a:92:2d:4b:fa:a0:fe:5c:37:54:68:2f:f8:c0:ea:
6b:be:1c:0a:d1:33:be:33:7c:dc:92:da:a4:cf:c5:98:17:01:
45:5d:06:8d:09:b7:5a:c8:d3:67:08:ec:fc:1b:24:f2:56:3e:
65:8d:db:1d:a3:ba:a0:85:41:6e:ce:d4:4e:5b:10:3d:a1:e2:
d5:e2:d0:5d:05:fa:f0:9d:23:ea:8c:0e:9b:e6:21:47:e4:91:
1e:ed:40:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nA1J3QOjedd7g4D2uC0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzA1ZWNlNmM5MDhhZDg4ODI1MTNkYTNhMjVhMTYwNzAz
YmI3ZjYwHhcNMjYwMzI5MDgwMDQ0WhcNMjYwMzMwMDgwMDQ0WjAzMTEwLwYDVQQD
EygxMmJiZTJmMGU3ODU3NzIxMzNlNzgzYjYwNTA4Y2IwMDUwZmYzODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqIrxDXv3K8efvzmGkICZWntk5GO
EGFRpczVOjPn7kivhu8Cf0ASscG9rXbl6mPxIf7CAV5vvkonqBeLTdUdF3c29HLR
cDZwhmCNYuoHLbRS8Ai+exKtHwUcEz68xA1IsOsD9WnhMtOGKswZeojaSdWZmUPi
qB7YfGSIXmJozbmowJ/5IaUrz0yskxl3jlUN+b3WvnBCQATfuY4La1R0NBtV4A/q
d8dLzCuTIvaNjTwoPCY2AMipo3J3LFBtIQTw8tFZbvRNPA4vcEZyKXEBp3MaGiic
TqR0Y90kVpYEGw2x9s8NGtEGmeg/7m4XuYC3nWdjhrWdU3vCYBXrV94oZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBK74vDnhXchM+eDtgUIywBQ/zhAMB8GA1UdIwQY
MBaAFMHAXs5skIrYiCUT2joloWBwO7f2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zN2ZiNGEtNWM5Ni00ZDE3LTg2YTAt
ZWJiNjNhNDU0YTkxLzEvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zN2ZiNGEtNWM5Ni00ZDE3LTg2YTAtZWJiNjNhNDU0YTkx
LzEvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsrvKRl8
aXyCOuxIwlnR3/FFCRLvjv6oRzKYbKiyQH6j0AmfLCbv3kuwbDc5SdE89Koc7j6O
sXAgNSDI1Q6h9v46+zh32qsfI+n8jqcLsz+koFEHHHHNPVX2bzEXn57Wemmxn7sx
fvqsYq17wsToZmCqjWOBY3JyATeZJLghR62ZJmBCEz/utvC/UfcGcMfmsARQGudK
Cevt4TXdgTokIVSTPuiuKpItS/qg/lw3VGgv+MDqa74cCtEzvjN83JLapM/FmBcB
RV0GjQm3WsjTZwjs/Bsk8lY+ZY3bHaO6oIVBbs7UTlsQPaHi1eLQXQX68J0j6owO
m+YhR+SRHu1ArA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:58 2026 by rpki-client