Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File: wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier: ANYoww9rL5qs8Rm4nl6Rp7pMXyZSHRVWsVa+oMT0eDU=
Subject key identifier: 68:09:D2:69:39:A6:8D:9F:81:11:6F:EC:C2:06:0E:16:94:C6:7A:83
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer: /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial: 019D3909D5141E4BF14BA7A7750EAC4F169C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number: 0457
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: cteGZrXVQTzZk8l0QKUTc5GLCgw.roa (hash: 7vVUH27gqwWuDvrtOX55FjGkEONXdCw+D3c878DK6LE=)
2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: Zkx1yqOwq21k9+xeGo8qoVin0UaHLmq0WLTvyTKwk6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d5:14:1e:4b:f1:4b:a7:a7:75:0e:ac:4f:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=6809d26939a68d9f81116fecc2060e1694c67a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:5a:df:84:3f:0f:f8:8c:b5:5a:df:04:84:
49:3c:d3:64:70:ec:75:a8:6d:29:d6:26:f6:dc:91:
70:d8:ad:94:0f:c1:17:a0:0b:1a:34:52:f6:40:cc:
b7:7f:a4:f2:5a:0f:c8:42:4b:ce:63:ba:94:15:af:
26:d7:ed:65:78:92:38:c4:6a:50:e6:5a:80:aa:a0:
de:bb:b4:a4:f1:e1:01:16:3f:bd:dc:b3:aa:93:00:
90:bd:1a:99:e6:15:8a:c9:fe:40:f0:38:66:09:a9:
91:99:b3:0d:66:4e:d3:75:e7:45:32:2d:c8:d5:e5:
09:c2:92:e2:9d:50:24:d3:b6:26:b6:26:03:ea:52:
68:e3:0a:d7:8b:88:ec:e6:f1:2e:d2:aa:ad:68:7c:
b7:11:40:1e:1e:e7:57:11:53:58:de:83:d0:cf:c1:
70:25:44:cd:79:a8:4f:55:07:97:1a:53:4e:62:82:
76:44:94:33:2b:d4:3a:6a:3d:11:50:48:e1:c1:c3:
86:07:2f:5a:bd:35:15:2f:48:17:0f:89:66:a1:30:
38:b9:d2:5b:01:fe:4e:ed:0b:5a:bd:54:01:0f:48:
5a:33:c0:aa:35:c9:83:d5:ca:4c:8c:a3:fe:8e:db:
0a:45:a5:09:23:9d:5a:58:e9:9a:26:f1:c5:93:57:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:09:D2:69:39:A6:8D:9F:81:11:6F:EC:C2:06:0E:16:94:C6:7A:83
X509v3 Authority Key Identifier:
keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fe:26:a1:4a:3c:d8:20:7c:2a:43:10:74:cb:2e:8e:8d:b1:
b3:a6:52:97:76:c6:bd:ef:11:9e:95:67:c9:39:fa:00:ae:a1:
f1:81:05:a5:37:c2:4c:54:ae:3c:c8:e6:8b:55:eb:79:0d:45:
1a:58:7a:b0:c8:75:36:37:0c:62:1f:9d:8f:56:b6:e6:60:5c:
58:3e:12:21:d0:32:ef:69:1f:1a:ff:c3:d4:6b:d2:05:a8:38:
9b:ea:b7:66:14:ed:ba:26:c9:6d:bf:58:f4:36:f0:52:0b:a5:
47:a2:c8:4c:6f:ae:ec:44:78:66:3a:d2:f6:2e:4c:6e:88:8e:
71:55:b0:37:e9:9c:c9:8e:4a:b1:15:bf:1f:2b:b7:a6:2a:65:
7c:18:3f:b4:6b:cd:62:d3:e0:fe:68:6f:32:bd:f0:f2:b5:d9:
b6:58:40:a9:42:31:f2:bf:10:e5:eb:38:92:71:e4:49:98:6a:
ba:69:8b:f8:3c:3d:cf:fe:c0:00:e5:4f:15:cc:f3:d0:f1:2f:
5a:c5:7d:66:fc:a3:5d:a7:46:30:b7:8a:4a:5b:f7:71:d5:ee:
6b:b8:40:a1:7b:c6:d2:ff:a6:d1:d1:b6:ad:95:7e:4c:28:a1:
e9:af:0d:74:a0:ac:c5:63:51:d2:f8:1c:ec:fa:a5:8f:07:80:
40:71:b1:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CdUUHkvxS6endQ6sTxacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYWM4ZjcwOTYxZDJkYzczZTJmZTNhNzk5MDgzMmU5M2Q0
OTU2MTEwHhcNMjYwMzI5MTAwMDM4WhcNMjYwMzMwMTAwMDM4WjAzMTEwLwYDVQQD
Eyg2ODA5ZDI2OTM5YTY4ZDlmODExMTZmZWNjMjA2MGUxNjk0YzY3YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBda34Q/D/iMtVrfBIRJPNNkcOx1
qG0p1ib23JFw2K2UD8EXoAsaNFL2QMy3f6TyWg/IQkvOY7qUFa8m1+1leJI4xGpQ
5lqAqqDeu7Sk8eEBFj+93LOqkwCQvRqZ5hWKyf5A8DhmCamRmbMNZk7TdedFMi3I
1eUJwpLinVAk07YmtiYD6lJo4wrXi4js5vEu0qqtaHy3EUAeHudXEVNY3oPQz8Fw
JUTNeahPVQeXGlNOYoJ2RJQzK9Q6aj0RUEjhwcOGBy9avTUVL0gXD4lmoTA4udJb
Af5O7QtavVQBD0haM8CqNcmD1cpMjKP+jtsKRaUJI51aWOmaJvHFk1ckQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgJ0mk5po2fgRFv7MIGDhaUxnqDMB8GA1UdIwQY
MBaAFMKsj3CWHS3HPi/jp5kIMuk9SVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NTZmZDItMGRkMy00ZDRmLThiMzct
YzZkODZhMWIwOGUwLzEvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85NTZmZDItMGRkMy00ZDRmLThiMzctYzZkODZhMWIwOGUw
LzEvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf4moUo8
2CB8KkMQdMsujo2xs6ZSl3bGve8RnpVnyTn6AK6h8YEFpTfCTFSuPMjmi1XreQ1F
Glh6sMh1NjcMYh+dj1a25mBcWD4SIdAy72kfGv/D1GvSBag4m+q3ZhTtuibJbb9Y
9DbwUgulR6LITG+u7ER4ZjrS9i5MboiOcVWwN+mcyY5KsRW/Hyu3piplfBg/tGvN
YtPg/mhvMr3w8rXZtlhAqUIx8r8Q5es4knHkSZhqummL+Dw9z/7AAOVPFczz0PEv
WsV9ZvyjXadGMLeKSlv3cdXua7hAoXvG0v+m0dG2rZV+TCih6a8NdKCsxWNR0vgc
7PqljweAQHGxXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:08 2026 by rpki-client