Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
File: wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json)
Hash identifier: zAvMdfBwr6G4Lem/C4Q6YetojhpKs+PQYM8c1d+FHIw=
Subject key identifier: 03:4C:74:CE:E3:E6:9B:D2:79:AB:0F:19:EC:9D:CB:E4:C0:57:10:DA
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 019D3941182F02393E7E0A6B7822E91ABBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
Manifest number: 091D
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: R84wROoCeZRCPbUs7Ib0UyTuxC4.roa (hash: Q6YMEZButrOoIhObHP4dYcfrrzpuagES1oIBIzupcEU=)
2: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: 4C7ec1wKezmqos7lja7Hj8H7dlHkhpe7Zj7kfD1tcms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:18:2f:02:39:3e:7e:0a:6b:78:22:e9:1a:bb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=034c74cee3e69bd279ab0f19ec9dcbe4c05710da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:15:db:cf:9f:79:50:0f:a4:21:7c:fe:42:
0b:a6:ba:af:98:ee:89:5e:0e:54:06:17:63:6c:68:
1f:31:67:64:90:7b:f3:4d:95:a6:58:1c:04:e5:b6:
e0:de:29:d8:12:a5:34:4d:eb:fb:40:4e:07:a5:d3:
8a:e8:ce:3a:c9:56:17:7e:d9:df:1f:a7:b4:7e:92:
8d:e6:9b:b9:11:83:14:a4:82:e1:43:1f:23:39:07:
8c:65:f2:5f:47:db:f5:c1:e4:09:fe:5a:4a:4f:a3:
44:f6:7d:f5:cf:cd:fd:e0:7c:39:6d:76:d0:aa:52:
2a:df:7e:cd:a3:fd:8c:72:98:7c:27:56:39:ec:ab:
73:0e:2e:4a:ff:c5:e4:2d:03:25:5d:c0:be:6f:fa:
e7:2d:6c:1f:04:35:36:e7:59:e4:6f:73:9c:d5:6c:
99:56:6b:4a:1f:03:ce:25:04:f9:b7:11:2d:12:34:
22:77:88:bc:7e:aa:a2:82:2d:c6:1b:9f:36:73:a2:
52:89:16:94:c3:f2:9c:73:9c:a1:d3:3f:ac:bf:94:
65:bd:ed:9d:53:a4:a2:64:9a:52:40:9c:b0:55:9d:
83:38:0e:e4:51:84:d9:a3:0c:45:75:d8:2f:f9:d9:
3c:4d:7b:35:3b:62:ce:1c:1d:14:bc:43:eb:3e:2c:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4C:74:CE:E3:E6:9B:D2:79:AB:0F:19:EC:9D:CB:E4:C0:57:10:DA
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:67:dd:33:a4:90:e7:bc:5f:51:88:23:e7:cd:e8:ec:29:
01:aa:5c:06:d6:0d:7c:43:d5:0a:c5:40:42:11:d1:5e:c7:65:
f8:dd:33:8d:86:c9:90:de:e0:a7:d6:4b:75:7b:05:53:55:60:
72:f1:01:44:b5:f9:3d:e2:2e:06:be:c8:09:f2:0f:75:7b:81:
9b:3e:e3:3d:8b:10:59:d5:8e:7f:a6:6f:60:49:ec:c0:bb:c5:
de:41:f0:59:af:56:09:a5:c8:56:1b:8b:d1:5a:bf:66:77:7e:
10:53:78:03:83:d9:7a:6e:75:c0:02:92:3e:4b:7f:49:df:12:
e5:f5:f0:8a:75:34:e4:85:e1:dc:96:52:b5:2b:6d:8c:cd:af:
a5:3c:32:4c:58:03:95:91:59:df:70:bd:6b:e2:7b:2b:34:2a:
a3:81:12:ae:00:51:f4:99:57:a9:e7:01:bc:c8:a9:9c:fb:11:
51:e8:0d:5b:d8:be:4a:d6:46:64:12:7b:66:5d:23:4e:69:ad:
dd:6f:70:32:8a:a4:96:d7:47:b3:03:9b:fd:fa:dd:4d:95:c2:
41:9e:be:43:0b:cb:49:a3:dd:5f:a7:c2:63:7c:f6:f0:9f:51:
f3:bf:cc:d3:51:14:c3:da:70:5a:d2:28:c3:38:0b:09:54:6b:
07:a4:19:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QRgvAjk+fgpreCLpGru8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5
YmY3N2YwHhcNMjYwMzI5MTEwMTAwWhcNMjYwMzMwMTEwMTAwWjAzMTEwLwYDVQQD
EygwMzRjNzRjZWUzZTY5YmQyNzlhYjBmMTllYzlkY2JlNGMwNTcxMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FwV28+feVAPpCF8/kILprqvmO6J
Xg5UBhdjbGgfMWdkkHvzTZWmWBwE5bbg3inYEqU0Tev7QE4HpdOK6M46yVYXftnf
H6e0fpKN5pu5EYMUpILhQx8jOQeMZfJfR9v1weQJ/lpKT6NE9n31z8394Hw5bXbQ
qlIq337No/2Mcph8J1Y57KtzDi5K/8XkLQMlXcC+b/rnLWwfBDU251nkb3Oc1WyZ
VmtKHwPOJQT5txEtEjQid4i8fqqigi3GG582c6JSiRaUw/Kcc5yh0z+sv5Rlve2d
U6SiZJpSQJywVZ2DOA7kUYTZowxFddgv+dk8TXs1O2LOHB0UvEPrPiz8cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANMdM7j5pvSeasPGeydy+TAVxDaMB8GA1UdIwQY
MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt
MzQ3YTBmN2M1YjA4LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4
LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9dn3TOk
kOe8X1GII+fN6OwpAapcBtYNfEPVCsVAQhHRXsdl+N0zjYbJkN7gp9ZLdXsFU1Vg
cvEBRLX5PeIuBr7ICfIPdXuBmz7jPYsQWdWOf6ZvYEnswLvF3kHwWa9WCaXIVhuL
0Vq/Znd+EFN4A4PZem51wAKSPkt/Sd8S5fXwinU05IXh3JZStSttjM2vpTwyTFgD
lZFZ33C9a+J7KzQqo4ESrgBR9JlXqecBvMipnPsRUegNW9i+StZGZBJ7Zl0jTmmt
3W9wMoqkltdHswOb/frdTZXCQZ6+QwvLSaPdX6fCY3z28J9R87/M01EUw9pwWtIo
wzgLCVRrB6QZMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:56 2026 by rpki-client