Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: 7M8kWgixgt/DQLAGmxzRuDWYt/F9IrXbAIe35XRd5/s=
Subject key identifier: 3B:C7:6A:40:EE:FF:DE:2A:D7:38:C9:4E:1E:D3:9F:E8:74:E4:DC:74
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 019D3A8B09A8BD41355A954EC427708307D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 0B5C
Signing time: Sun 29 Mar 2026 17:01:23 +0000
Manifest this update: Sun 29 Mar 2026 17:01:23 +0000
Manifest next update: Mon 30 Mar 2026 17:01:23 +0000
Files and hashes: 1: eObhnSgoClkZSg4OphnzH9Kih4s.roa (hash: suuBBjjjYm5X0ydrhy9hau3hPxlzgCy0q7n74RUKwk4=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: XU6IM6zEvL6PIHxxWCrUT9t58NI92IVz/ZijVFqZ0qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:09:a8:bd:41:35:5a:95:4e:c4:27:70:83:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Mar 29 17:01:23 2026 GMT
Not After : Mar 30 17:01:23 2026 GMT
Subject: CN=3bc76a40eeffde2ad738c94e1ed39fe874e4dc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:31:d3:91:9e:85:91:56:0d:a2:e8:eb:32:
52:61:d2:4a:de:ba:93:f3:e0:d6:21:cf:54:74:7a:
3c:a4:eb:c1:56:8f:84:99:9a:87:b5:a7:15:7b:ae:
08:2b:3a:0d:bc:73:e8:3c:be:ab:9d:3d:63:18:a3:
69:19:a0:bd:56:0d:a2:f6:96:f2:9e:4e:89:4f:82:
2f:2f:cc:fe:f6:ab:33:63:8a:51:03:ee:68:d5:ff:
67:e4:c3:4c:1e:a8:c4:66:2c:8a:1a:71:a7:6c:89:
4b:5b:27:2c:7a:4b:9d:5e:d5:78:1d:3f:75:e3:83:
66:ee:6a:f6:df:ab:ad:0e:99:a5:4f:67:0f:44:d8:
bc:55:5b:6e:2a:b3:a8:15:71:6c:42:36:09:14:83:
df:8d:5b:c1:d8:ef:87:cf:16:c6:78:cf:93:16:1e:
04:b8:bd:09:e2:8d:2f:4f:e1:f6:5a:47:f0:d9:ec:
e9:9b:c5:0d:11:99:3b:d4:b9:8e:88:fd:10:5e:82:
00:4f:31:1c:a5:82:65:c6:ec:58:fd:dd:23:a2:ee:
9a:dd:eb:13:37:cf:d9:1a:b0:41:26:bf:8b:5c:84:
e0:fe:cf:75:99:c9:cf:1f:55:76:a1:5a:dd:6b:b2:
e7:f3:0e:ea:a6:3d:d9:a5:a5:8b:28:9d:ff:66:98:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:6A:40:EE:FF:DE:2A:D7:38:C9:4E:1E:D3:9F:E8:74:E4:DC:74
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5c:67:7d:b4:19:af:7e:1d:1f:a3:3f:b4:d3:68:43:4e:c7:
61:a2:43:21:81:1b:ce:7c:13:c5:d1:03:3f:82:a8:7f:6f:79:
99:e5:81:9d:99:51:fd:c7:dc:15:3b:63:30:16:f3:6b:89:56:
e6:d6:cc:ba:fc:e6:b6:85:e7:76:79:5c:14:21:7c:01:62:eb:
86:41:63:82:e9:0f:ea:51:f6:79:66:d4:7c:9e:9d:27:14:50:
d5:df:fe:d8:73:58:f1:72:d0:db:ac:c0:72:7a:9f:25:be:88:
78:01:f1:da:24:e7:2a:7c:21:ad:6b:3a:b5:65:4e:a6:f3:41:
f5:40:a0:05:03:eb:c1:ad:28:db:60:95:22:06:9c:cc:e1:01:
5f:d6:06:01:0a:8c:45:d5:0c:39:96:df:20:37:56:c6:34:c9:
51:19:98:38:e0:65:49:47:76:cd:d3:e3:f6:f6:81:2d:22:6b:
d2:76:67:25:31:b0:b5:8e:1b:2d:bf:e4:06:31:18:f7:f1:6e:
d3:cc:8d:c7:6f:9e:87:d4:3a:8c:e2:1e:58:7f:0e:af:73:c3:
8e:7f:ac:e5:b9:90:b8:34:fc:1f:f5:47:7d:c6:ed:c8:34:93:
cf:f6:2e:d2:a5:30:6d:01:fe:23:86:18:81:5c:b7:af:42:f5:
8e:30:7f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06iwmovUE1WpVOxCdwgwfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjVkM2FmZDBiNzJlYjczNGMyMWVkNzgyMzI5ZWI2ZTdj
MWNlNDEwHhcNMjYwMzI5MTcwMTIzWhcNMjYwMzMwMTcwMTIzWjAzMTEwLwYDVQQD
EygzYmM3NmE0MGVlZmZkZTJhZDczOGM5NGUxZWQzOWZlODc0ZTRkYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpwx05GehZFWDaLo6zJSYdJK3rqT
8+DWIc9UdHo8pOvBVo+EmZqHtacVe64IKzoNvHPoPL6rnT1jGKNpGaC9Vg2i9pby
nk6JT4IvL8z+9qszY4pRA+5o1f9n5MNMHqjEZiyKGnGnbIlLWycsekudXtV4HT91
44Nm7mr236utDpmlT2cPRNi8VVtuKrOoFXFsQjYJFIPfjVvB2O+HzxbGeM+TFh4E
uL0J4o0vT+H2Wkfw2ezpm8UNEZk71LmOiP0QXoIATzEcpYJlxuxY/d0jou6a3esT
N8/ZGrBBJr+LXITg/s91mcnPH1V2oVrda7Ln8w7qpj3ZpaWLKJ3/ZpjxtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvHakDu/94q1zjJTh7Tn+h05Nx0MB8GA1UdIwQY
MBaAFMK106/Qty63NMIe14Iynrbnwc5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUt
NDUzYmQ4OTk1YmNhLzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUtNDUzYmQ4OTk1YmNh
LzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFxnfbQZ
r34dH6M/tNNoQ07HYaJDIYEbznwTxdEDP4Kof295meWBnZlR/cfcFTtjMBbza4lW
5tbMuvzmtoXndnlcFCF8AWLrhkFjgukP6lH2eWbUfJ6dJxRQ1d/+2HNY8XLQ26zA
cnqfJb6IeAHx2iTnKnwhrWs6tWVOpvNB9UCgBQPrwa0o22CVIgaczOEBX9YGAQqM
RdUMOZbfIDdWxjTJURmYOOBlSUd2zdPj9vaBLSJr0nZnJTGwtY4bLb/kBjEY9/Fu
08yNx2+eh9Q6jOIeWH8Or3PDjn+s5bmQuDT8H/VHfcbtyDSTz/Yu0qUwbQH+I4YY
gVy3r0L1jjB/qA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:58 2026 by rpki-client