Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier: AwkKf0RSHNaC8lReNX0TVeauvEOCmRM9ZGEMoUcbS0s=
Subject key identifier: 38:50:08:06:0C:F4:42:61:50:52:E7:A5:D5:56:B3:86:2C:2C:E4:A3
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer: /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial: 019D3909DE58DC4C1A12B42E3484D7644C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number: 022A
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: opV5K4TDIZwg2_Ke6wz0k_YRsno.roa (hash: L3PdsoBBCqtcSMykMoxo+EhISOF23hs0Fdp4ciolx2U=)
2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: IOBaCx8wmaa+VPrSsuXOnygVgAMytDQ8ktSvhKrq6Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:de:58:dc:4c:1a:12:b4:2e:34:84:d7:64:4c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=385008060cf442615052e7a5d556b3862c2ce4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:4e:42:52:43:dc:6a:02:26:40:7f:3f:be:
df:39:7f:13:2e:39:97:f0:0a:3a:18:50:4b:61:0c:
86:ad:08:a9:fa:3c:20:18:e9:02:b6:94:e8:11:f0:
ef:f8:84:63:2b:97:6c:11:48:1f:11:00:0b:25:5b:
2c:00:42:93:d6:33:10:20:78:43:cc:99:31:33:ca:
ec:f6:b1:cc:1f:14:9a:00:fa:ed:15:e6:4b:52:36:
ff:03:bd:83:4b:88:36:6a:c8:6d:47:92:1b:71:43:
31:1c:3f:2a:7c:38:c3:46:bd:f5:94:26:13:89:71:
17:00:f0:0b:97:11:08:c5:fd:48:f3:98:0d:4c:f1:
57:5d:88:c0:92:9d:85:c6:26:2b:6b:83:1a:cd:cc:
b1:d0:7c:b4:c4:47:06:8f:85:f3:c1:04:c2:db:90:
f6:8c:7c:98:51:c1:f1:49:f7:10:14:8d:ca:e7:67:
46:c9:e7:eb:1b:cf:97:ca:76:ca:b9:c7:98:f4:a0:
da:cf:1b:fd:44:bd:62:e2:de:cb:3c:d9:82:26:1f:
2f:5f:8a:50:8d:db:15:8f:cf:b0:41:98:48:ec:b0:
53:c5:28:9b:d8:e0:0b:65:45:0c:71:9b:bf:40:0a:
46:6e:e6:4d:c9:46:2a:30:f8:62:e4:43:80:4b:79:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:50:08:06:0C:F4:42:61:50:52:E7:A5:D5:56:B3:86:2C:2C:E4:A3
X509v3 Authority Key Identifier:
keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:63:3b:20:80:61:4b:bc:02:86:3a:97:a6:1c:b8:38:08:84:
a0:08:74:c4:dc:5b:d5:6e:ae:bb:d2:d7:a8:bb:ea:47:fc:55:
c3:e7:de:02:1a:e9:90:28:75:cf:be:94:fc:82:d4:4b:8c:6b:
89:83:a5:cc:68:ce:18:80:2e:e8:e3:28:d6:46:50:0d:82:7c:
58:a0:27:b5:ab:ae:44:55:1a:97:4a:5f:2c:3e:fe:f9:72:a1:
be:ec:66:2d:44:11:cd:71:78:34:61:dc:1e:07:cd:c1:52:49:
6e:0d:3e:27:f6:2d:3d:ba:c4:dd:e5:f3:de:e8:18:9f:4c:14:
f7:d7:f2:ac:e0:b0:22:8a:98:9b:b8:f1:ab:89:4b:f8:ce:b5:
a1:9c:f0:e7:5b:99:a3:5a:45:06:99:66:0e:91:d6:b1:8c:19:
28:f5:28:c4:13:a5:e8:66:b5:a8:fb:8a:db:3c:20:8c:4d:75:
aa:c5:ba:6b:55:34:3c:3f:dc:11:51:9b:9a:d4:f6:dd:46:f8:
ed:78:26:74:05:ae:54:4b:b0:fc:75:8f:54:c0:23:4a:81:dd:
a6:18:0b:0c:52:7c:72:2d:43:91:2f:f1:f2:d7:0c:f7:0b:1d:
70:78:fe:92:20:b5:42:87:a6:5d:93:43:94:c7:26:54:03:9e:
09:75:95:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cd5Y3EwaErQuNITXZEw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3
NzJjZDIwHhcNMjYwMzI5MTAwMDQxWhcNMjYwMzMwMTAwMDQxWjAzMTEwLwYDVQQD
EygzODUwMDgwNjBjZjQ0MjYxNTA1MmU3YTVkNTU2YjM4NjJjMmNlNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhJOQlJD3GoCJkB/P77fOX8TLjmX
8Ao6GFBLYQyGrQip+jwgGOkCtpToEfDv+IRjK5dsEUgfEQALJVssAEKT1jMQIHhD
zJkxM8rs9rHMHxSaAPrtFeZLUjb/A72DS4g2ashtR5IbcUMxHD8qfDjDRr31lCYT
iXEXAPALlxEIxf1I85gNTPFXXYjAkp2FxiYra4Mazcyx0Hy0xEcGj4XzwQTC25D2
jHyYUcHxSfcQFI3K52dGyefrG8+XynbKuceY9KDazxv9RL1i4t7LPNmCJh8vX4pQ
jdsVj8+wQZhI7LBTxSib2OALZUUMcZu/QApGbuZNyUYqMPhi5EOAS3lBMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhQCAYM9EJhUFLnpdVWs4YsLOSjMB8GA1UdIwQY
MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt
ZWM1NzhlMWNjZWVkLzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk
LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2M7IIBh
S7wChjqXphy4OAiEoAh0xNxb1W6uu9LXqLvqR/xVw+feAhrpkCh1z76U/ILUS4xr
iYOlzGjOGIAu6OMo1kZQDYJ8WKAntauuRFUal0pfLD7++XKhvuxmLUQRzXF4NGHc
HgfNwVJJbg0+J/YtPbrE3eXz3ugYn0wU99fyrOCwIoqYm7jxq4lL+M61oZzw51uZ
o1pFBplmDpHWsYwZKPUoxBOl6Ga1qPuK2zwgjE11qsW6a1U0PD/cEVGbmtT23Ub4
7XgmdAWuVEuw/HWPVMAjSoHdphgLDFJ8ci1DkS/x8tcM9wsdcHj+kiC1QoemXZND
lMcmVAOeCXWVmQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:29 2026 by rpki-client