Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: XizVtS2Vb3VQzCsXkMgMMGZpwahU/V2qsGenNcfp/tk=
Subject key identifier: C5:47:D9:54:01:DB:E0:C7:59:A6:10:AC:31:6A:85:53:3E:83:C5:29
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 019D389C4095A5129E4B760D664ABF50F597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 17FE
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: Jzo0bz9GpdF-EVQqtofEC4giH00.roa (hash: l6YPgC2yacKAlMOSWCV7HMeqcfgyqHxPQcRlIAV/XdE=)
2: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: 2DhmHdmThDukpx2yo7Nb+/2WFh0G0aMKY2UfcfRvwAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:40:95:a5:12:9e:4b:76:0d:66:4a:bf:50:f5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=c547d95401dbe0c759a610ac316a85533e83c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:23:2a:d3:64:6f:f1:24:77:6e:8e:b1:a4:
4e:3a:3c:a4:66:eb:1b:a4:26:09:60:6f:71:6f:b2:
06:43:e8:ef:36:85:2b:22:00:20:4f:07:f3:a8:f2:
36:c5:ad:d6:3c:4c:05:f2:1a:8d:ea:7e:26:13:91:
0d:53:34:d2:40:b8:63:b6:39:3c:11:08:d5:d3:48:
24:94:df:9c:57:93:00:42:b7:a8:d2:13:4b:f5:13:
68:85:50:4b:c4:13:49:6f:82:e9:c7:68:f5:9e:fd:
65:90:9a:77:d4:fa:58:c9:75:8d:5e:78:5c:9c:bd:
df:e0:3c:38:04:d2:e9:e7:6b:3f:63:c1:2e:34:c7:
f4:01:e5:95:00:a6:28:b1:92:f9:c4:cb:dc:f7:4d:
8d:e5:53:66:99:0e:99:42:13:da:73:5e:c6:b3:39:
02:07:5f:d1:f7:d0:e1:b4:30:18:78:98:94:8c:87:
25:24:25:9c:fb:7d:f9:35:c6:7d:bf:25:6f:62:15:
29:2b:10:75:0c:e1:ea:d2:d5:fb:4e:6b:24:07:68:
d8:2a:cc:29:06:e8:1b:c5:d3:2f:b4:99:68:37:06:
4a:fa:1f:20:e4:2a:5d:65:ca:29:9d:04:91:a8:60:
91:47:7e:0f:50:a1:6d:5f:74:7e:d7:a9:74:58:ac:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:47:D9:54:01:DB:E0:C7:59:A6:10:AC:31:6A:85:53:3E:83:C5:29
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a3:d6:3b:9c:94:18:6a:b0:a8:4d:6b:aa:50:c9:04:d0:59:
a6:4e:fb:59:e1:f1:de:36:7d:1a:26:4d:60:32:98:39:98:ab:
c8:56:31:60:81:a0:df:9b:46:f5:85:56:27:1c:bd:c6:5b:72:
bd:0f:14:17:73:75:d7:ee:3c:41:dd:7c:53:66:ae:5a:4b:58:
5e:12:05:8d:8b:84:06:c7:7d:5e:65:8b:0a:78:40:56:bd:cc:
33:57:4b:31:f9:8b:05:f1:18:97:17:c9:e3:86:9e:09:df:27:
c6:29:6e:ed:66:bd:27:05:51:ea:30:13:48:70:ea:64:bc:8f:
d5:d3:79:d0:68:5c:51:b8:db:ab:e4:52:20:72:32:3d:a9:72:
ea:a6:d5:64:91:27:ee:0e:a5:d4:a8:bf:13:f8:1f:25:4a:05:
87:3e:09:a0:c3:fe:42:3f:d5:9a:02:91:2e:bf:b8:17:70:17:
70:27:50:d0:19:b1:bf:11:a7:34:75:d3:19:66:b0:09:ef:13:
3a:d0:47:3d:e8:de:33:3e:93:fd:5f:03:52:bd:02:45:02:2c:
55:2b:cd:a2:8e:3e:f0:3e:8a:1f:d4:ec:f0:6f:72:97:bf:e5:
5c:fe:8d:84:6e:67:d7:44:60:28:ea:b4:fe:fa:94:19:bc:57:
f4:c3:f4:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nECVpRKeS3YNZkq/UPWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2
YzQxODgwHhcNMjYwMzI5MDgwMDU3WhcNMjYwMzMwMDgwMDU3WjAzMTEwLwYDVQQD
EyhjNTQ3ZDk1NDAxZGJlMGM3NTlhNjEwYWMzMTZhODU1MzNlODNjNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVYjKtNkb/Ekd26OsaROOjykZusb
pCYJYG9xb7IGQ+jvNoUrIgAgTwfzqPI2xa3WPEwF8hqN6n4mE5ENUzTSQLhjtjk8
EQjV00gklN+cV5MAQreo0hNL9RNohVBLxBNJb4Lpx2j1nv1lkJp31PpYyXWNXnhc
nL3f4Dw4BNLp52s/Y8EuNMf0AeWVAKYosZL5xMvc902N5VNmmQ6ZQhPac17GszkC
B1/R99DhtDAYeJiUjIclJCWc+335NcZ9vyVvYhUpKxB1DOHq0tX7TmskB2jYKswp
BugbxdMvtJloNwZK+h8g5CpdZcopnQSRqGCRR34PUKFtX3R+16l0WKxBlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVH2VQB2+DHWaYQrDFqhVM+g8UpMB8GA1UdIwQY
MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt
ZjQyNzJlZWMyODBkLzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk
LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKPWO5yU
GGqwqE1rqlDJBNBZpk77WeHx3jZ9GiZNYDKYOZiryFYxYIGg35tG9YVWJxy9xlty
vQ8UF3N11+48Qd18U2auWktYXhIFjYuEBsd9XmWLCnhAVr3MM1dLMfmLBfEYlxfJ
44aeCd8nxilu7Wa9JwVR6jATSHDqZLyP1dN50GhcUbjbq+RSIHIyPaly6qbVZJEn
7g6l1Ki/E/gfJUoFhz4JoMP+Qj/VmgKRLr+4F3AXcCdQ0BmxvxGnNHXTGWawCe8T
OtBHPejeMz6T/V8DUr0CRQIsVSvNoo4+8D6KH9Ts8G9yl7/lXP6NhG5n10RgKOq0
/vqUGbxX9MP0eg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:14 2026 by rpki-client