Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: 5X43To2W10EmCYbyujuwiqeX3mAlCjaLSblzlIOQoz8=
Subject key identifier: AF:18:20:05:C1:4C:9C:43:16:27:8B:5B:AA:69:76:6C:6F:21:EE:B2
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 019D39AF13D9DAB649A44926F6E942A7241A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0F1C
Signing time: Sun 29 Mar 2026 13:01:08 +0000
Manifest this update: Sun 29 Mar 2026 13:01:08 +0000
Manifest next update: Mon 30 Mar 2026 13:01:08 +0000
Files and hashes: 1: 1mKr2BYewzXDecj0nNw7rfiYO80.roa (hash: 6ynFOsQcc4+COoSJWkYKLEzNdnYU6AWGSoX2YiGPF3I=)
2: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: 6ZAifme2mj5N1yG3/EpQwOQvZFklMfsg+1ukbwZ1+AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:13:d9:da:b6:49:a4:49:26:f6:e9:42:a7:24:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Mar 29 13:01:08 2026 GMT
Not After : Mar 30 13:01:08 2026 GMT
Subject: CN=af182005c14c9c4316278b5baa69766c6f21eeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:19:50:fa:37:86:4d:47:82:74:a8:58:c8:
8f:10:aa:53:5e:85:7f:4e:aa:23:6d:34:7f:6d:a7:
15:d5:4c:90:e1:96:1b:98:f1:8a:8a:00:64:5e:d8:
2a:e5:6e:c1:5d:a6:83:de:ec:1a:c5:35:4f:94:5b:
85:09:3b:df:d5:8b:cc:53:08:1c:0c:2e:ce:97:b7:
9f:bb:7b:33:04:f0:5a:96:09:99:a2:96:ae:42:ca:
0f:d8:f6:93:b2:bb:fe:e9:fb:ab:f0:7d:8f:c8:6e:
96:64:c7:3a:6e:45:96:ff:bb:59:ad:d1:eb:ec:0e:
bc:4f:2a:75:30:a4:b6:6f:2f:d3:85:99:f4:2f:66:
70:6f:01:82:53:46:df:6e:33:ca:58:c5:4c:17:15:
5b:a4:5d:fb:aa:4f:71:2f:c6:e7:36:28:fb:2b:31:
1c:a4:1a:8e:fc:3d:40:07:f6:65:f4:b7:88:66:79:
67:1d:96:43:f6:df:07:9c:ad:7a:83:5f:a0:02:6a:
ef:c4:6c:07:d3:da:8d:88:1e:f7:86:de:fe:97:98:
2e:a6:00:58:65:31:ae:b7:a9:99:9f:87:d4:69:67:
a3:4c:45:3d:56:83:3e:0e:48:f6:4e:86:b4:3a:96:
91:fa:ea:e9:88:27:04:03:2f:e9:86:2d:d0:92:ae:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:20:05:C1:4C:9C:43:16:27:8B:5B:AA:69:76:6C:6F:21:EE:B2
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:69:75:e4:36:89:8e:e7:48:ef:1e:d3:47:a9:1e:6b:69:8a:
5c:fa:ea:b4:f6:85:f8:6c:bf:41:bb:38:88:5d:b9:5a:35:02:
6d:1f:a9:b7:01:13:29:f8:8c:b6:d7:ed:15:15:7d:b7:8e:9d:
e4:d3:f9:ff:2e:cc:78:a0:b0:b3:63:1c:81:87:69:7d:17:f8:
d0:03:50:65:be:18:59:c8:dc:22:04:f2:8b:c3:33:a7:da:fc:
e2:50:a6:84:ad:55:62:f5:95:08:c5:d2:0f:64:5a:2e:5a:6f:
8e:c8:7d:57:f5:9a:7d:c9:95:e7:7f:cc:0d:b3:ea:0e:7f:c5:
63:17:15:5f:da:41:fb:1c:29:3f:99:74:ed:84:15:5e:67:f7:
04:7b:c9:0c:17:11:5e:c3:05:89:7c:cc:44:cc:18:64:55:05:
11:e9:fc:5c:a7:d5:28:66:b9:96:11:77:ec:89:44:26:b3:ef:
7b:95:22:4a:b7:5e:77:de:61:a7:8e:09:7e:3c:8c:d6:5e:a1:
71:5f:ed:6f:e8:e1:b2:af:cc:26:da:eb:e7:7c:ea:d4:15:5d:
92:04:a9:27:79:65:88:86:1a:ea:a4:fa:e6:12:38:f3:08:55:
d3:57:7f:1e:69:27:86:c4:81:f1:b9:04:88:e9:85:e4:35:2d:
f1:ff:d4:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rxPZ2rZJpEkm9ulCpyQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNDc2YzhkYjU0OWY3YjU4OGE5MDJiMGY0Y2U4MGJlYjZk
MjU3NDgwHhcNMjYwMzI5MTMwMTA4WhcNMjYwMzMwMTMwMTA4WjAzMTEwLwYDVQQD
EyhhZjE4MjAwNWMxNGM5YzQzMTYyNzhiNWJhYTY5NzY2YzZmMjFlZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqYZUPo3hk1HgnSoWMiPEKpTXoV/
TqojbTR/bacV1UyQ4ZYbmPGKigBkXtgq5W7BXaaD3uwaxTVPlFuFCTvf1YvMUwgc
DC7Ol7efu3szBPBalgmZopauQsoP2PaTsrv+6fur8H2PyG6WZMc6bkWW/7tZrdHr
7A68Typ1MKS2by/ThZn0L2ZwbwGCU0bfbjPKWMVMFxVbpF37qk9xL8bnNij7KzEc
pBqO/D1AB/Zl9LeIZnlnHZZD9t8HnK16g1+gAmrvxGwH09qNiB73ht7+l5gupgBY
ZTGut6mZn4fUaWejTEU9VoM+Dkj2Toa0OpaR+urpiCcEAy/phi3Qkq6DvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8YIAXBTJxDFieLW6ppdmxvIe6yMB8GA1UdIwQY
MBaAFMJHbI21Sfe1iKkCsPTOgL620ldIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2It
MWYwYmYwZDhjYjM2LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2ItMWYwYmYwZDhjYjM2
LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvml15DaJ
judI7x7TR6kea2mKXPrqtPaF+Gy/Qbs4iF25WjUCbR+ptwETKfiMttftFRV9t46d
5NP5/y7MeKCws2McgYdpfRf40ANQZb4YWcjcIgTyi8Mzp9r84lCmhK1VYvWVCMXS
D2RaLlpvjsh9V/WafcmV53/MDbPqDn/FYxcVX9pB+xwpP5l07YQVXmf3BHvJDBcR
XsMFiXzMRMwYZFUFEen8XKfVKGa5lhF37IlEJrPve5UiSrded95hp44JfjyM1l6h
cV/tb+jhsq/MJtrr53zq1BVdkgSpJ3lliIYa6qT65hI48whV01d/HmknhsSB8bkE
iOmF5DUt8f/U1g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:33 2026 by rpki-client