Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: kDsELsnhLp4o3Drb3p+B3yyEqKVNLOcS5l+Ml6eYRzQ=
Subject key identifier: C3:BD:88:F9:05:AE:DF:43:45:70:35:1B:84:B6:2B:A2:1C:A5:D2:1A
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019D382E931FC0545D2763FA223C71687809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0E8F
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: bxEhF7k6zC6gyFxPoZ5js1yEjgOMYQA9Ui8iKNkBLB4=)
2: h5VWwLm5sJPb8Mq6egOvSDm1ZbE.roa (hash: lIFIr7IW4fJHhWCQmREyv0ZLQpwRC/atkqoeOTTCLNA=)
3: oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa (hash: thUeFABDpIEkTpbKZW+FpdsviA9MqeC7/Ij0qsHenC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:93:1f:c0:54:5d:27:63:fa:22:3c:71:68:78:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=c3bd88f905aedf434570351b84b62ba21ca5d21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:d1:69:49:7c:52:5b:23:e1:98:f1:37:b6:
e2:3a:32:db:0c:e6:f7:6a:fd:9b:7d:ee:07:92:1c:
e3:36:29:9c:c0:e0:fa:04:fb:3d:cf:66:9f:9a:12:
f1:f2:40:d1:ce:bb:52:43:b3:29:ce:06:6c:d1:95:
69:bf:c8:19:cf:73:9f:ea:55:67:d3:a2:94:11:4e:
ce:a4:42:d2:cb:12:6d:37:72:6a:d1:44:1f:d3:c4:
85:7a:9f:c9:05:30:8e:02:2d:b9:33:a0:c5:16:3b:
6e:a2:a8:3b:62:34:f1:86:df:2e:ca:53:32:03:93:
bd:06:f7:be:6b:5c:58:38:46:de:5e:14:02:22:fc:
f5:39:59:13:98:fe:c5:15:07:3e:44:9a:61:cb:6a:
42:e6:42:a7:6f:f5:4e:3a:cf:0a:e8:db:ed:a2:d7:
20:41:84:17:24:44:c3:c9:d6:42:5b:ab:d4:d2:1b:
cf:9d:1f:0e:b1:a2:fe:9f:56:27:a4:b3:99:e6:12:
cd:15:d9:58:fc:55:a2:a4:62:4a:64:75:c8:4f:a2:
4a:48:61:28:56:10:d7:df:d4:76:e6:77:f4:2f:c0:
61:6d:ef:e3:dc:e1:95:17:f0:28:71:a4:29:b1:e6:
8e:b5:50:58:4b:90:8c:77:8b:cb:9d:64:fb:74:c6:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:88:F9:05:AE:DF:43:45:70:35:1B:84:B6:2B:A2:1C:A5:D2:1A
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ce:fb:b5:fd:22:14:01:da:3f:88:c8:93:ef:f3:30:f9:75:
22:47:63:c2:71:d2:1a:09:85:8a:cd:b1:90:36:9f:bb:9c:68:
93:c1:ad:1f:5f:ec:04:2b:4b:68:ef:07:aa:36:9f:16:18:92:
12:cf:22:06:5b:11:23:d6:82:d8:bb:55:fb:6d:32:c2:76:1b:
0a:66:8c:1e:f7:c4:0d:83:03:1d:bc:50:83:c2:70:7d:5b:fe:
11:87:79:0f:9b:9c:c4:50:42:0f:47:1b:0b:96:b8:5f:51:ff:
5a:12:32:02:17:b1:12:df:80:c5:ea:25:4e:7e:68:d7:d1:eb:
6a:3e:0a:09:50:f2:40:5c:42:61:bc:8f:dc:38:05:25:dc:30:
d1:c3:b7:e1:0a:34:c8:a9:b9:bd:ff:ec:89:b2:a3:4a:d1:bc:
4a:fe:41:9c:78:a0:f4:43:22:5e:5a:f6:80:0e:3f:50:2d:56:
97:94:be:ab:88:07:88:2b:ff:c9:9d:5c:71:06:de:ac:50:2e:
bd:1b:ca:7d:c7:57:a5:92:d5:89:6f:2f:b7:61:d3:c6:05:90:
43:b1:9b:f8:1b:0e:bb:71:0b:91:60:fb:e9:19:85:fa:f3:f0:
75:5c:e8:c2:52:08:8a:9d:da:28:4c:94:2f:cf:6c:38:1c:61:
e3:5c:0a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LpMfwFRdJ2P6IjxxaHgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWMxZTA2MjQwMzliZDFmMWE5NDZjYjUxM2M5MzM4NmZh
YjZiMTkwHhcNMjYwMzI5MDYwMTA5WhcNMjYwMzMwMDYwMTA5WjAzMTEwLwYDVQQD
EyhjM2JkODhmOTA1YWVkZjQzNDU3MDM1MWI4NGI2MmJhMjFjYTVkMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFbRaUl8Ulsj4ZjxN7biOjLbDOb3
av2bfe4HkhzjNimcwOD6BPs9z2afmhLx8kDRzrtSQ7MpzgZs0ZVpv8gZz3Of6lVn
06KUEU7OpELSyxJtN3Jq0UQf08SFep/JBTCOAi25M6DFFjtuoqg7YjTxht8uylMy
A5O9Bve+a1xYOEbeXhQCIvz1OVkTmP7FFQc+RJphy2pC5kKnb/VOOs8K6Nvtotcg
QYQXJETDydZCW6vU0hvPnR8OsaL+n1YnpLOZ5hLNFdlY/FWipGJKZHXIT6JKSGEo
VhDX39R25nf0L8Bhbe/j3OGVF/AocaQpseaOtVBYS5CMd4vLnWT7dMbDEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMO9iPkFrt9DRXA1G4S2K6IcpdIaMB8GA1UdIwQY
MBaAFFscHgYkA5vR8alGy1E8kzhvq2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgt
YmZiNmNmMGYwODM1LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgtYmZiNmNmMGYwODM1
LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApM77tf0i
FAHaP4jIk+/zMPl1IkdjwnHSGgmFis2xkDafu5xok8GtH1/sBCtLaO8HqjafFhiS
Es8iBlsRI9aC2LtV+20ywnYbCmaMHvfEDYMDHbxQg8JwfVv+EYd5D5ucxFBCD0cb
C5a4X1H/WhIyAhexEt+AxeolTn5o19Hraj4KCVDyQFxCYbyP3DgFJdww0cO34Qo0
yKm5vf/sibKjStG8Sv5BnHig9EMiXlr2gA4/UC1Wl5S+q4gHiCv/yZ1ccQberFAu
vRvKfcdXpZLViW8vt2HTxgWQQ7Gb+BsOu3ELkWD76RmF+vPwdVzowlIIip3aKEyU
L89sOBxh41wKbQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:30 2026 by rpki-client