Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
File: wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json)
Hash identifier: UsFYfH/bCILDBF7zMz5nf/wIwfxJJoMmiR2AxHSmbA8=
Subject key identifier: 26:E6:A1:C3:2F:82:D0:F9:B7:EB:85:6F:D8:EC:39:07:3F:72:63:4B
Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Certificate issuer: /CN=c2937b9461a3d266e935834e5047a182238362c8
Certificate serial: 019A71EEACBE34C4A2B201EF4557BCE23DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: kDT6d1olq2g9PhBud1lpevtgwMM.roa (hash: GVT4b+j1f9W7ipFuYf2UE8OPchdOvhrHWTWGtiol0Gg=)
2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: nziVgzzO6eOxfcnIllDz0m85fokyVmP1dugqJo+BqMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ac:be:34:c4:a2:b2:01:ef:45:57:bc:e2:3d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=26e6a1c32f82d0f9b7eb856fd8ec39073f72634b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:b6:6c:f1:eb:22:c8:c8:9f:35:5d:88:74:
c7:0f:57:0c:ab:fc:db:0f:3b:f6:5b:2f:07:27:8d:
42:74:d5:8d:d4:08:44:0b:5c:00:e3:d0:f9:1c:a8:
2c:2b:b6:51:4a:99:76:7b:06:46:16:d4:82:93:f5:
7d:3a:9e:96:fc:b3:51:b5:dd:6f:7e:c4:87:a6:c4:
08:70:ec:86:19:dd:49:e8:9e:da:29:12:83:38:8c:
d9:31:6c:55:5c:41:f0:3a:42:1c:e4:ec:62:ce:67:
78:aa:25:34:d8:cb:48:a6:50:5e:49:3d:ae:0f:8e:
7e:04:5f:c7:22:bc:ca:2b:7b:69:26:ae:61:4d:e6:
91:4c:af:bf:2b:7f:41:02:bf:82:b9:d7:31:0c:fa:
04:67:ee:c1:04:8c:f5:25:c1:dc:67:87:6a:8e:b3:
bd:a5:53:ff:de:cb:bc:86:ce:a1:70:95:72:c8:86:
e7:3f:42:42:4b:27:d1:27:b3:63:67:18:36:d9:63:
31:6e:c4:59:3c:5d:01:b1:57:03:da:c6:9d:7e:43:
77:58:4c:67:a9:ea:e3:a3:88:da:93:5e:52:5c:4c:
d8:b9:15:50:8b:be:6e:79:4b:41:78:c5:54:63:89:
62:76:f2:47:8c:e5:64:fd:fa:7d:f3:6c:21:36:51:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E6:A1:C3:2F:82:D0:F9:B7:EB:85:6F:D8:EC:39:07:3F:72:63:4B
X509v3 Authority Key Identifier:
keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c6:99:58:a4:99:a2:8c:0a:7f:3d:d3:7a:b7:eb:61:46:48:
25:ea:ce:62:b1:a6:59:e8:72:f0:30:b6:7c:44:b8:89:68:b2:
3d:bb:77:26:33:3e:da:63:a5:20:99:12:83:dc:2d:46:33:ae:
fc:59:78:fe:36:f3:f3:1a:f2:50:2e:02:fe:7e:09:8f:fe:fa:
aa:a3:57:7c:fa:e8:f9:34:41:bb:1d:ce:46:2a:21:51:52:0c:
ac:9d:be:34:f5:be:7e:84:c7:c0:a3:9c:f5:b6:f8:8a:d3:3d:
e5:35:98:6c:59:0d:31:2a:90:b9:af:c4:35:a8:af:ba:e1:da:
90:34:c8:8d:f1:a6:61:64:3a:52:16:9f:18:13:79:c3:a3:5c:
f1:ac:14:a3:54:4c:0e:06:a6:2d:62:db:d4:9d:4d:c4:4a:ef:
d6:1e:7a:4c:d4:05:19:f2:d0:dc:87:17:9b:1d:57:92:a4:c9:
c2:5f:dc:47:22:a9:3b:30:34:4c:55:d5:77:5e:43:c9:eb:dd:
95:ff:90:19:de:22:23:e6:cf:be:db:4b:85:4a:f1:d1:4c:3b:
59:90:75:bd:a5:cb:18:ac:98:10:42:f6:45:b1:6c:3f:2b:08:
49:99:dc:bc:a8:c7:05:67:eb:76:2d:74:4c:af:4e:0f:c4:66:
94:f7:7a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qy+NMSisgHvRVe84j3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTM3Yjk0NjFhM2QyNjZlOTM1ODM0ZTUwNDdhMTgyMjM4
MzYyYzgwHhcNMjUxMTExMDgwMDU4WhcNMjUxMTEyMDgwMDU4WjAzMTEwLwYDVQQD
EygyNmU2YTFjMzJmODJkMGY5YjdlYjg1NmZkOGVjMzkwNzNmNzI2MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55K2bPHrIsjInzVdiHTHD1cMq/zb
Dzv2Wy8HJ41CdNWN1AhEC1wA49D5HKgsK7ZRSpl2ewZGFtSCk/V9Op6W/LNRtd1v
fsSHpsQIcOyGGd1J6J7aKRKDOIzZMWxVXEHwOkIc5Oxizmd4qiU02MtIplBeST2u
D45+BF/HIrzKK3tpJq5hTeaRTK+/K39BAr+CudcxDPoEZ+7BBIz1JcHcZ4dqjrO9
pVP/3su8hs6hcJVyyIbnP0JCSyfRJ7NjZxg22WMxbsRZPF0BsVcD2sadfkN3WExn
qerjo4jak15SXEzYuRVQi75ueUtBeMVUY4lidvJHjOVk/fp982whNlG+vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbmocMvgtD5t+uFb9jsOQc/cmNLMB8GA1UdIwQY
MBaAFMKTe5Rho9Jm6TWDTlBHoYIjg2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjIt
Mzc3NDg4MWU3ZTFlLzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjItMzc3NDg4MWU3ZTFl
LzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicaZWKSZ
oowKfz3TerfrYUZIJerOYrGmWehy8DC2fES4iWiyPbt3JjM+2mOlIJkSg9wtRjOu
/Fl4/jbz8xryUC4C/n4Jj/76qqNXfPro+TRBux3ORiohUVIMrJ2+NPW+foTHwKOc
9bb4itM95TWYbFkNMSqQua/ENaivuuHakDTIjfGmYWQ6UhafGBN5w6Nc8awUo1RM
DgamLWLb1J1NxErv1h56TNQFGfLQ3IcXmx1XkqTJwl/cRyKpOzA0TFXVd15Dyevd
lf+QGd4iI+bPvttLhUrx0Uw7WZB1vaXLGKyYEEL2RbFsPysISZncvKjHBWfrdi10
TK9OD8RmlPd6nQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:39 2025 by rpki-client