Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: fm9D3HFlv2fzqjJUoheODfDtfivwFCsKUOsG+XvUQZM=
Subject key identifier: 59:E3:85:19:4D:52:E3:3C:18:30:88:37:5E:2A:47:59:7B:21:7E:10
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 019D37C0B09059C343C256AC943DC8FB5F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: RAiUuWAS6kcQ-QJt6I-SFZa80cQ.roa (hash: ttJu1TEjHl6NqHl89N7ouZ4TGNYPAl0suf8bz/Ts/Kg=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: 0LOhvAjvBHIq3cXVtQYzuyduFGe28W1hsoqMXKGJeGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b0:90:59:c3:43:c2:56:ac:94:3d:c8:fb:5f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=59e385194d52e33c183088375e2a47597b217e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:10:27:45:fb:d7:77:f7:c0:4f:80:8d:52:
a2:64:81:b7:c2:9d:c1:48:26:a0:88:d6:38:f8:d7:
6e:bf:55:37:60:6a:bf:8d:01:4b:a8:5a:92:2e:2d:
93:60:0f:af:8b:e2:9d:e3:b7:d8:58:49:49:b6:3b:
bb:5c:e5:9e:c3:15:64:94:9a:c7:d5:a6:42:48:bc:
91:0e:3c:96:0d:5c:38:a6:c5:b4:42:23:4d:52:a4:
20:17:1d:44:69:0f:ce:74:e4:3d:c0:40:da:16:06:
3e:75:a5:ab:5e:51:8f:6c:b8:cb:ff:8c:16:33:8f:
ef:88:9c:c4:1f:a8:a4:73:a2:ae:a5:50:45:82:9b:
8e:a5:82:17:20:72:8b:b3:9b:73:8b:48:67:dd:5b:
e5:bc:c5:6e:3c:07:af:84:42:1b:04:32:3a:1d:25:
97:8a:22:df:0c:48:c3:03:3a:f9:ba:9d:e5:27:9c:
ad:e3:7e:10:da:78:e6:d1:20:cd:b0:e9:a6:8d:fe:
39:07:0e:7e:bf:a9:3c:c6:37:ef:b2:29:54:21:cf:
4e:55:1c:62:3d:9e:da:f3:aa:2d:ce:66:53:c9:07:
31:f0:20:d4:90:0d:29:e5:2b:eb:61:61:53:8b:cd:
ef:11:e5:e0:6e:11:f1:28:90:ae:8f:16:64:23:1b:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:85:19:4D:52:E3:3C:18:30:88:37:5E:2A:47:59:7B:21:7E:10
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d9:b2:ed:ad:d3:fe:90:a7:36:29:f3:7d:68:e5:be:64:da:
6e:09:a0:ec:19:42:2f:78:dd:61:a5:a9:ae:38:74:f2:82:97:
f3:3f:c9:56:df:9c:14:2c:a8:9f:c5:eb:17:02:99:31:fa:1c:
7e:bb:19:21:cf:26:bc:61:0f:ce:c0:7b:64:8a:a1:bc:66:d5:
c7:a5:49:94:76:4f:c1:2b:47:8b:60:34:55:9f:9e:37:e6:41:
22:3f:de:8f:41:ce:ec:85:81:da:ce:65:27:90:bd:a9:bd:b2:
88:b9:b8:57:81:3b:f4:6a:d8:15:5b:23:f5:2a:08:b7:ff:ca:
f3:ae:b4:b2:0e:26:22:20:83:7c:6f:ee:f2:cf:5e:c2:60:c1:
61:eb:a0:99:51:2d:aa:61:ec:86:05:d3:ce:12:22:b1:b8:59:
8f:f1:31:03:3f:53:1f:6f:6f:00:0f:79:87:d4:10:41:2a:71:
a1:11:8c:44:b6:70:20:c0:cc:68:fd:21:0f:4a:f7:dc:78:0a:
a5:50:50:29:7f:ed:bf:32:9a:79:ee:f8:e5:44:b9:a3:0e:da:
31:f5:13:81:6b:ce:46:1d:85:33:93:84:f9:d7:93:53:c8:34:
50:54:8f:ba:69:0b:93:05:c4:d8:00:83:1e:eb:8c:29:4e:65:
6f:60:9f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLCQWcNDwlaslD3I+19LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTNmYTg3ZWIzMTY5YTdkMmRkNzQ0NTMyODMwMjFhMjcw
M2M3NjkwHhcNMjYwMzI5MDQwMTA4WhcNMjYwMzMwMDQwMTA4WjAzMTEwLwYDVQQD
Eyg1OWUzODUxOTRkNTJlMzNjMTgzMDg4Mzc1ZTJhNDc1OTdiMjE3ZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL4QJ0X713f3wE+AjVKiZIG3wp3B
SCagiNY4+Nduv1U3YGq/jQFLqFqSLi2TYA+vi+Kd47fYWElJtju7XOWewxVklJrH
1aZCSLyRDjyWDVw4psW0QiNNUqQgFx1EaQ/OdOQ9wEDaFgY+daWrXlGPbLjL/4wW
M4/viJzEH6ikc6KupVBFgpuOpYIXIHKLs5tzi0hn3VvlvMVuPAevhEIbBDI6HSWX
iiLfDEjDAzr5up3lJ5yt434Q2njm0SDNsOmmjf45Bw5+v6k8xjfvsilUIc9OVRxi
PZ7a86otzmZTyQcx8CDUkA0p5SvrYWFTi83vEeXgbhHxKJCujxZkIxsxLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnjhRlNUuM8GDCIN14qR1l7IX4QMB8GA1UdIwQY
MBaAFMLj+ofrMWmn0t10RTKDAhonA8dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYt
ZGZlNTY2NDExMDE2LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYtZGZlNTY2NDExMDE2
LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNmy7a3T
/pCnNinzfWjlvmTabgmg7BlCL3jdYaWprjh08oKX8z/JVt+cFCyon8XrFwKZMfoc
frsZIc8mvGEPzsB7ZIqhvGbVx6VJlHZPwStHi2A0VZ+eN+ZBIj/ej0HO7IWB2s5l
J5C9qb2yiLm4V4E79GrYFVsj9SoIt//K8660sg4mIiCDfG/u8s9ewmDBYeugmVEt
qmHshgXTzhIisbhZj/ExAz9TH29vAA95h9QQQSpxoRGMRLZwIMDMaP0hD0r33HgK
pVBQKX/tvzKaee745US5ow7aMfUTgWvORh2FM5OE+deTU8g0UFSPumkLkwXE2ACD
HuuMKU5lb2CfgA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:02 2026 by rpki-client