Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier: A76BfrHK6OY49ygklNThfXL6rp20DJdMBjkQQHVfZLY=
Subject key identifier: 7D:F8:DE:FB:40:5D:64:DF:14:3F:67:E8:AC:8F:F7:A6:24:60:C9:8D
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 019D3AC1E438628AE1AF4FA97B17635D708B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number: 17EB
Signing time: Sun 29 Mar 2026 18:01:18 +0000
Manifest this update: Sun 29 Mar 2026 18:01:18 +0000
Manifest next update: Mon 30 Mar 2026 18:01:18 +0000
Files and hashes: 1: 00-zPMP1I2rJTW-q2mtEMKbzbeM.roa (hash: cgTFjGaJk/3//F/TehXjKG2TiYBHQ5bxuR7MOVNN8e0=)
2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: +n4DeJN8QmiUauVyHaJvyNsQZb3iJtysXmpGrDtNQqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:e4:38:62:8a:e1:af:4f:a9:7b:17:63:5d:70:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Mar 29 18:01:18 2026 GMT
Not After : Mar 30 18:01:18 2026 GMT
Subject: CN=7df8defb405d64df143f67e8ac8ff7a62460c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:42:df:e0:c1:c0:94:95:68:b7:ed:55:0d:
c8:e6:d8:e7:2a:93:c9:bc:a8:70:d3:f6:e0:52:de:
01:eb:5d:4e:3d:9b:20:8e:7b:43:56:77:90:74:5b:
0a:e6:03:f0:a5:22:52:d1:b6:c1:b5:16:ef:d4:10:
fe:85:03:eb:dc:16:30:42:7c:d3:4e:fa:c7:b8:6e:
f8:6a:13:4e:86:76:ee:76:a8:22:fe:ea:9c:3e:73:
14:85:4e:a2:97:69:d4:33:1e:0d:e1:71:63:b5:4a:
d0:b8:e8:5b:a4:aa:24:d1:09:1d:89:ab:37:30:5e:
3b:a8:20:45:71:0d:31:aa:32:da:80:50:b1:a2:75:
52:dc:97:c5:e4:8c:c4:90:64:1e:c2:a3:e2:26:20:
4f:4b:3c:51:77:30:40:a8:47:10:55:ea:69:b4:42:
17:b8:63:12:b9:70:a1:b4:8c:81:b1:a4:b0:49:bb:
0c:91:c1:91:ba:12:0b:85:fd:78:e3:9b:71:d0:56:
29:e7:a7:70:76:31:0b:1f:61:66:5a:73:ae:74:32:
e1:d7:f0:3e:db:1c:8f:4c:6a:fb:3b:25:dc:55:ac:
d3:0a:c2:60:d6:69:a9:a8:79:5b:c6:f5:63:f7:81:
73:7a:03:ba:4d:1e:72:4f:e5:e1:1a:65:80:3c:ba:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:DE:FB:40:5D:64:DF:14:3F:67:E8:AC:8F:F7:A6:24:60:C9:8D
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:44:74:13:6f:be:fa:55:0d:1e:81:79:8a:8d:d4:8c:2f:
59:e6:e3:df:71:75:e5:30:99:0f:5f:7c:3b:3c:71:ab:4c:57:
7b:6d:1f:5a:f7:1b:4e:d8:4c:ff:18:b3:c5:fb:76:b6:7b:c0:
99:df:68:24:f0:ab:72:ec:ed:a3:dc:fb:86:ac:85:04:19:b7:
cb:11:5c:57:1e:4e:c3:17:61:5b:bd:db:1d:3a:05:3e:d6:41:
c6:1c:41:03:93:57:89:c4:ee:b6:62:a0:a0:57:38:8a:12:50:
0f:95:d2:b0:6d:04:09:fa:dc:e4:fc:54:61:d1:93:05:38:29:
58:35:21:5b:6a:a2:c1:61:7e:be:93:db:7a:4b:98:0a:4f:a1:
6d:64:cf:ff:8b:b8:73:f2:6e:08:78:9b:a5:7f:7e:b9:42:01:
c3:db:78:d2:0d:87:3a:8c:bd:38:50:54:b1:65:d0:e8:59:45:
14:c2:24:05:b3:03:db:66:7d:db:0e:d0:67:82:a8:f2:81:35:
c6:87:48:13:54:14:d9:23:61:37:a9:28:1f:32:ac:e5:c0:af:
6f:41:e4:c7:5b:54:e5:0c:6a:28:ae:f2:d0:18:9d:43:cf:28:
e5:2e:22:06:a3:1e:d6:be:1d:62:d3:50:8d:d2:23:cd:04:15:
c5:bf:d4:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06weQ4Yorhr0+pexdjXXCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMGFlZjM5NjM5NGVhNTk1MGRjNzk1NmFiMWJmNDkxMzY0
NjIyYTQwHhcNMjYwMzI5MTgwMTE4WhcNMjYwMzMwMTgwMTE4WjAzMTEwLwYDVQQD
Eyg3ZGY4ZGVmYjQwNWQ2NGRmMTQzZjY3ZThhYzhmZjdhNjI0NjBjOThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS9C3+DBwJSVaLftVQ3I5tjnKpPJ
vKhw0/bgUt4B611OPZsgjntDVneQdFsK5gPwpSJS0bbBtRbv1BD+hQPr3BYwQnzT
TvrHuG74ahNOhnbudqgi/uqcPnMUhU6il2nUMx4N4XFjtUrQuOhbpKok0Qkdias3
MF47qCBFcQ0xqjLagFCxonVS3JfF5IzEkGQewqPiJiBPSzxRdzBAqEcQVepptEIX
uGMSuXChtIyBsaSwSbsMkcGRuhILhf1445tx0FYp56dwdjELH2FmWnOudDLh1/A+
2xyPTGr7OyXcVazTCsJg1mmpqHlbxvVj94FzegO6TR5yT+XhGmWAPLqV3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH343vtAXWTfFD9n6KyP96YkYMmNMB8GA1UdIwQY
MBaAFMMK7zljlOpZUNx5Vqsb9JE2RiKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGM5YTEtNTg5Mi00NGQxLWI0OTAt
MjY3ZGE5MWZiZmY4LzEvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kZGM5YTEtNTg5Mi00NGQxLWI0OTAtMjY3ZGE5MWZiZmY4
LzEvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbNEdBNv
vvpVDR6BeYqN1IwvWebj33F15TCZD198Ozxxq0xXe20fWvcbTthM/xizxft2tnvA
md9oJPCrcuzto9z7hqyFBBm3yxFcVx5OwxdhW73bHToFPtZBxhxBA5NXicTutmKg
oFc4ihJQD5XSsG0ECfrc5PxUYdGTBTgpWDUhW2qiwWF+vpPbekuYCk+hbWTP/4u4
c/JuCHibpX9+uUIBw9t40g2HOoy9OFBUsWXQ6FlFFMIkBbMD22Z92w7QZ4Ko8oE1
xodIE1QU2SNhN6koHzKs5cCvb0Hkx1tU5QxqKK7y0BidQ88o5S4iBqMe1r4dYtNQ
jdIjzQQVxb/UUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:46 2026 by rpki-client