Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File: wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier: 4kHa42GQBNv3mmVkRD3gcjH2mSWtTJYtz0IsgVuq11E=
Subject key identifier: 48:7F:B3:EF:CB:A8:72:8C:F8:4E:32:D7:E9:41:51:52:F2:5E:B9:F4
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial: 019D386581D14846A2A886616CA186F872FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number: 0EF6
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: jHB7xQRhme5IgDPSIjvcZtfv9aQ.roa (hash: pcTgx9nDgIx90gGTJ16PrKl7UPy4GXJVIOHRZSZS2G8=)
2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: 0QCjn8iVoGZ2TU039fA4T6db7+llhkBHtbNqCCxMNNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:81:d1:48:46:a2:a8:86:61:6c:a1:86:f8:72:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=487fb3efcba8728cf84e32d7e9415152f25eb9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:01:02:7d:fa:9f:f3:45:43:d3:6a:be:70:ad:
98:ec:e1:d9:92:6d:3b:64:2b:ca:38:ff:0a:d7:3b:
a9:e7:50:be:b9:e9:ae:08:84:31:33:57:cd:fa:aa:
23:5a:b5:5c:23:e2:d2:67:53:a4:5f:33:bc:6c:87:
19:4a:1e:a0:65:72:3f:5e:82:a9:9b:a7:c0:ee:47:
69:c4:16:c9:18:0e:c1:90:34:8f:86:af:99:99:6d:
e1:6b:e5:08:05:c0:da:40:57:e6:38:c9:ec:57:c1:
32:b6:d1:9d:e7:cc:0a:d3:c0:89:00:47:e4:12:64:
99:8b:5b:21:33:c6:9e:91:4d:01:32:fc:0a:cb:50:
36:e2:ea:53:80:b9:ce:7a:f8:72:ee:41:a4:a0:78:
4e:a8:b8:74:16:80:87:47:4e:c7:71:50:64:06:a6:
d1:1a:3f:73:82:ad:d5:06:c3:0c:c9:bb:b2:98:3c:
77:d4:13:2d:92:35:8a:ee:d6:5d:32:27:8c:99:09:
bb:f5:b0:03:d6:10:05:30:40:f6:1b:fb:0f:61:7e:
ff:1a:1d:4f:16:dd:fa:e1:9c:25:da:ec:f9:32:f4:
4b:8b:be:47:39:f1:10:df:7a:8c:20:62:1c:2c:ce:
21:51:8b:6a:1b:c4:b6:94:d9:9c:67:b5:38:cd:50:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7F:B3:EF:CB:A8:72:8C:F8:4E:32:D7:E9:41:51:52:F2:5E:B9:F4
X509v3 Authority Key Identifier:
keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ac:bd:90:f7:d8:d2:0d:37:d0:dc:2c:37:bd:de:df:53:11:
56:8a:21:c1:da:dd:1f:39:d6:ba:3a:3f:3b:9c:4f:c4:a2:f4:
1a:f3:0b:a4:64:44:4c:25:0d:7b:c5:a1:55:1c:6d:b1:24:fb:
b6:96:5a:e7:de:33:ee:ea:8b:0e:ca:11:45:d4:5e:5f:dc:1b:
45:96:58:a5:54:f6:64:83:13:cf:ee:97:51:de:b3:97:3d:f5:
7f:2f:4e:ac:15:a9:c7:64:4a:66:56:cf:7b:a4:cb:65:a6:87:
34:ba:d4:51:7d:44:ee:20:46:48:be:95:02:1a:f8:a2:e1:61:
3d:06:aa:f5:04:d8:7f:76:c1:d4:e9:25:43:a2:e7:8d:9e:aa:
50:8e:20:a3:c5:3d:6e:3d:f4:90:ed:00:94:3b:95:19:77:33:
37:22:59:5f:44:fd:29:76:80:13:3f:bf:0c:55:99:10:dd:22:
0c:81:a6:ca:7f:c4:af:0a:fa:b7:0e:c9:14:49:a5:1b:50:14:
55:59:d6:38:c5:bc:08:17:38:ba:4c:61:62:4f:6d:15:72:d6:
b1:6a:e4:55:c1:04:0b:fd:10:8a:43:1e:38:1c:98:c9:f4:4f:
df:31:88:e7:ed:3f:16:dc:26:0f:f3:ca:36:05:69:aa:05:79:
de:ef:1f:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYHRSEaiqIZhbKGG+HL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwM2MyOTU2NmVmNTlmY2YxYTkwZDgyZDA4YWUxMGM2MzBm
OTRiODgwHhcNMjYwMzI5MDcwMTA5WhcNMjYwMzMwMDcwMTA5WjAzMTEwLwYDVQQD
Eyg0ODdmYjNlZmNiYTg3MjhjZjg0ZTMyZDdlOTQxNTE1MmYyNWViOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gECffqf80VD02q+cK2Y7OHZkm07
ZCvKOP8K1zup51C+uemuCIQxM1fN+qojWrVcI+LSZ1OkXzO8bIcZSh6gZXI/XoKp
m6fA7kdpxBbJGA7BkDSPhq+ZmW3ha+UIBcDaQFfmOMnsV8EyttGd58wK08CJAEfk
EmSZi1shM8aekU0BMvwKy1A24upTgLnOevhy7kGkoHhOqLh0FoCHR07HcVBkBqbR
Gj9zgq3VBsMMybuymDx31BMtkjWK7tZdMieMmQm79bAD1hAFMED2G/sPYX7/Gh1P
Ft364Zwl2uz5MvRLi75HOfEQ33qMIGIcLM4hUYtqG8S2lNmcZ7U4zVB/yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh/s+/LqHKM+E4y1+lBUVLyXrn0MB8GA1UdIwQY
MBaAFMA8KVZu9Z/PGpDYLQiuEMYw+UuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYt
MDgxMTExMDNjY2Y5LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYtMDgxMTExMDNjY2Y5
LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqy9kPfY
0g030NwsN73e31MRVoohwdrdHznWujo/O5xPxKL0GvMLpGRETCUNe8WhVRxtsST7
tpZa594z7uqLDsoRRdReX9wbRZZYpVT2ZIMTz+6XUd6zlz31fy9OrBWpx2RKZlbP
e6TLZaaHNLrUUX1E7iBGSL6VAhr4ouFhPQaq9QTYf3bB1OklQ6LnjZ6qUI4go8U9
bj30kO0AlDuVGXczNyJZX0T9KXaAEz+/DFWZEN0iDIGmyn/Erwr6tw7JFEmlG1AU
VVnWOMW8CBc4ukxhYk9tFXLWsWrkVcEEC/0QikMeOByYyfRP3zGI5+0/FtwmD/PK
NgVpqgV53u8fKw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:22 2026 by rpki-client