Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File: wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier: hbHdKCYGszi7HldL7yaEX8BMOMs4NNsXXN8X1l3aA/w=
Subject key identifier: 66:88:6D:5F:C0:92:01:79:CD:04:48:D6:7E:83:CD:14:B1:D4:09:29
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer: /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial: 019D3977FB08D0ADD6AD79138EE1572CB8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number: 0A29
Signing time: Sun 29 Mar 2026 12:00:57 +0000
Manifest this update: Sun 29 Mar 2026 12:00:57 +0000
Manifest next update: Mon 30 Mar 2026 12:00:57 +0000
Files and hashes: 1: B0Uzs5RoulMpxtKQXud6u4TA0PM.roa (hash: mR2i4aLtlRQUg0BXj5ANdcDouKnEouJa0KGOvU/8HYM=)
2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: SqKt4Me4gFgLFewS29R3nfZoencwvZ2Ua9pNxXgiX1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:fb:08:d0:ad:d6:ad:79:13:8e:e1:57:2c:b8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Validity
Not Before: Mar 29 12:00:57 2026 GMT
Not After : Mar 30 12:00:57 2026 GMT
Subject: CN=66886d5fc0920179cd0448d67e83cd14b1d40929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:e7:79:d3:42:bb:e3:50:7b:2a:8d:62:f3:
4a:d0:1a:1f:39:b3:33:db:ec:c2:50:9b:0d:5b:53:
82:24:5b:2b:96:c1:1e:ef:6e:05:36:ea:a7:c8:f7:
d4:c3:6b:4c:ab:2c:26:7e:84:1e:e5:b7:5d:af:a8:
ed:25:67:58:39:25:32:43:99:14:07:75:0a:e7:bf:
35:97:a0:3b:74:3c:59:42:1f:60:c6:39:13:7c:7a:
ea:c6:5b:b1:27:d5:fb:49:3e:ae:75:e1:00:5a:04:
4d:89:4b:32:b2:ed:08:c4:f0:da:86:fc:57:cf:4c:
68:13:b6:02:07:c2:7c:71:ee:60:8a:bf:17:dd:f3:
06:88:d0:e5:de:66:7b:b1:00:ee:26:cd:7a:86:15:
5f:7c:23:14:57:2e:81:47:3d:58:25:6e:10:99:62:
c1:6f:78:21:6e:82:c8:a2:05:dc:f6:a1:69:62:df:
5b:23:08:dc:f6:4a:83:6c:8d:a6:44:29:c8:3d:90:
ed:d1:af:a2:ec:a5:1c:6b:3d:88:0f:32:0e:11:48:
3c:b4:d7:e7:52:25:c5:2f:4a:0e:10:6d:19:83:9f:
d0:d8:c5:b1:b1:b4:5a:a1:19:ba:0c:75:78:5f:17:
6e:11:e0:6d:58:86:ff:1b:9c:6d:90:ca:cb:c9:b7:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:88:6D:5F:C0:92:01:79:CD:04:48:D6:7E:83:CD:14:B1:D4:09:29
X509v3 Authority Key Identifier:
keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b4:d6:16:ee:23:23:6e:b1:e9:41:4c:2f:c2:3c:86:3f:42:
42:e6:2a:c0:d8:09:55:8f:52:d5:a4:9e:e4:20:2a:12:cc:f3:
d0:af:d2:26:31:ba:b3:47:6f:af:7b:f5:fd:8e:af:c1:ef:9f:
b8:ec:25:92:0b:07:6d:47:74:3c:d5:59:b3:d9:51:06:3d:91:
61:0c:45:12:6f:a3:40:5e:be:a6:1e:f9:3e:a2:e0:93:b7:91:
44:51:27:97:65:47:3e:7c:86:97:e3:bd:ec:da:a1:7d:21:eb:
54:88:05:77:01:7c:71:de:36:59:5c:f2:c2:13:1b:e1:6b:4f:
85:cf:a4:7b:30:9d:4c:23:d5:ef:c2:3c:16:36:24:e2:d5:ad:
ca:19:6c:dc:3f:2d:59:27:43:8a:80:03:c5:b1:ee:65:5f:f7:
6c:6f:2d:31:40:27:34:3b:22:10:45:75:c9:93:36:95:16:41:
8e:95:53:c8:0b:78:e8:4e:2c:ab:de:c6:be:3b:b7:07:47:a4:
35:7e:0a:14:5e:de:9e:ed:67:de:a5:75:19:98:d7:c9:8c:a0:
14:63:c8:41:e3:53:00:5b:89:af:6c:de:47:34:ef:45:ce:fa:
14:04:5e:10:74:fa:ff:20:9c:79:6f:c1:64:c0:3a:14:22:a8:
b1:bd:1e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d/sI0K3WrXkTjuFXLLjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDRjZThlMzNmNzA4NGIwOGM0NWFhMTc3ZjJlMzNmNjkw
ODE3YTAwHhcNMjYwMzI5MTIwMDU3WhcNMjYwMzMwMTIwMDU3WjAzMTEwLwYDVQQD
Eyg2Njg4NmQ1ZmMwOTIwMTc5Y2QwNDQ4ZDY3ZTgzY2QxNGIxZDQwOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RfnedNCu+NQeyqNYvNK0BofObMz
2+zCUJsNW1OCJFsrlsEe724FNuqnyPfUw2tMqywmfoQe5bddr6jtJWdYOSUyQ5kU
B3UK5781l6A7dDxZQh9gxjkTfHrqxluxJ9X7ST6udeEAWgRNiUsysu0IxPDahvxX
z0xoE7YCB8J8ce5gir8X3fMGiNDl3mZ7sQDuJs16hhVffCMUVy6BRz1YJW4QmWLB
b3ghboLIogXc9qFpYt9bIwjc9kqDbI2mRCnIPZDt0a+i7KUcaz2IDzIOEUg8tNfn
UiXFL0oOEG0Zg5/Q2MWxsbRaoRm6DHV4XxduEeBtWIb/G5xtkMrLybcgYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaIbV/AkgF5zQRI1n6DzRSx1AkpMB8GA1UdIwQY
MBaAFMHUzo4z9whLCMRaoXfy4z9pCBegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMt
YzQ1YjI4YWFiYzFhLzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMtYzQ1YjI4YWFiYzFh
LzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7TWFu4j
I26x6UFML8I8hj9CQuYqwNgJVY9S1aSe5CAqEszz0K/SJjG6s0dvr3v1/Y6vwe+f
uOwlkgsHbUd0PNVZs9lRBj2RYQxFEm+jQF6+ph75PqLgk7eRRFEnl2VHPnyGl+O9
7NqhfSHrVIgFdwF8cd42WVzywhMb4WtPhc+kezCdTCPV78I8FjYk4tWtyhls3D8t
WSdDioADxbHuZV/3bG8tMUAnNDsiEEV1yZM2lRZBjpVTyAt46E4sq97Gvju3B0ek
NX4KFF7enu1n3qV1GZjXyYygFGPIQeNTAFuJr2zeRzTvRc76FAReEHT6/yCceW/B
ZMA6FCKosb0e7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:25 2026 by rpki-client