Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: 28e1TyhFnVgyEkD0K7UdldZRjICjcZqFyIjX/0JH2cc=
Subject key identifier: B1:DE:CB:FB:76:E8:BC:5F:C5:C0:A7:07:F4:72:C7:A0:2A:5B:21:5D
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019CF0160EBC9563B78909E891236CF63E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0A78
Signing time: Sun 15 Mar 2026 06:01:43 +0000
Manifest this update: Sun 15 Mar 2026 06:01:43 +0000
Manifest next update: Mon 16 Mar 2026 06:01:43 +0000
Files and hashes: 1: J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa (hash: jjyUi8oIJbqLLegunqtnt7RNSdcYKaaZ3m2h96zldCM=)
2: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: 0pSXVaJTQHyCFV2xxUJLySsBMzcpW9ZV0N3UH0ABNXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:16:0e:bc:95:63:b7:89:09:e8:91:23:6c:f6:3e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Mar 15 06:01:43 2026 GMT
Not After : Mar 16 06:01:43 2026 GMT
Subject: CN=b1decbfb76e8bc5fc5c0a707f472c7a02a5b215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:b7:33:99:96:d1:17:a1:b3:b0:10:67:64:
11:ed:f7:12:78:72:63:a7:84:65:01:1a:64:8e:99:
56:0e:1f:1d:04:38:f7:d0:a7:f8:91:b6:9d:67:22:
92:72:4c:54:3c:6f:ab:c6:b0:a8:89:ba:db:14:7c:
e9:75:b8:68:e2:c7:ec:68:97:00:c4:75:a0:c0:eb:
78:5b:38:d4:c4:99:41:f1:43:ef:b7:5b:e9:e6:2b:
1f:bb:3a:eb:d9:22:1a:44:4b:6a:ab:c7:05:c6:8d:
b1:c8:7f:db:69:fc:69:90:86:b0:55:fc:00:02:33:
e2:0a:0c:b0:bf:2f:59:01:a4:3c:1b:35:9d:e8:39:
d6:a9:ea:b6:85:d0:64:9d:05:79:5f:52:6d:c4:45:
ec:f4:86:2a:c1:bf:05:43:15:90:dc:45:03:91:6b:
08:5e:5d:3e:e4:cb:02:1f:5b:f1:d5:6a:a9:b0:b3:
94:5c:1c:d0:e1:fa:ca:dc:32:a0:19:65:5e:fc:02:
aa:b3:bc:42:26:5b:15:64:63:13:1f:68:57:48:7e:
8e:03:fc:44:55:a2:25:21:fb:f2:24:30:6c:e3:db:
2c:24:92:ff:ca:0e:8e:9e:d7:ed:85:76:21:4f:ef:
3e:2b:a5:15:85:65:2d:fc:0a:3e:5c:54:56:62:77:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:CB:FB:76:E8:BC:5F:C5:C0:A7:07:F4:72:C7:A0:2A:5B:21:5D
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b5:bb:8e:ec:23:26:bc:98:03:3d:b3:e9:49:86:8d:81:1f:
aa:fd:2d:69:9f:a2:e3:2f:94:7f:71:1f:d0:ee:a2:8e:7b:ae:
73:9d:aa:30:63:3a:df:60:c7:77:f1:bf:a2:8f:69:94:91:27:
93:40:59:97:2e:36:90:5c:62:1b:8c:3f:c6:4f:6d:3b:0b:ad:
b7:db:d8:76:f9:50:1d:59:f1:9c:16:30:84:ef:dc:50:8c:3c:
38:95:7a:d1:4a:77:e1:7d:8e:e1:a8:00:bb:b0:5c:91:aa:45:
c6:cb:95:e1:79:de:b6:6d:79:8a:d6:e1:b5:b6:ce:7e:56:c0:
0b:f5:7e:bc:4b:66:21:9b:0b:4b:41:7f:03:fe:73:69:fc:28:
16:41:33:ce:14:c8:f4:c6:18:10:c9:ed:3a:9e:c5:93:ac:dc:
f5:c6:3f:fd:b9:3c:16:a7:53:f0:7c:2f:91:04:61:29:19:a1:
5a:8d:31:ae:2b:1b:e1:d3:96:04:63:08:ac:84:1c:1f:90:3d:
f8:87:a2:31:e0:55:a4:b3:7b:e4:d4:bd:31:b3:d5:a4:c5:bd:
19:6a:c1:a0:6b:c4:74:a9:37:ad:a6:04:a5:7e:24:8d:2b:83:
56:0b:93:f5:39:a4:cf:73:d3:02:be:ce:42:58:d0:3f:d6:6b:
d2:b7:f1:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzwFg68lWO3iQnokSNs9j6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl
YTYzYjUwHhcNMjYwMzE1MDYwMTQzWhcNMjYwMzE2MDYwMTQzWjAzMTEwLwYDVQQD
EyhiMWRlY2JmYjc2ZThiYzVmYzVjMGE3MDdmNDcyYzdhMDJhNWIyMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohO3M5mW0Rehs7AQZ2QR7fcSeHJj
p4RlARpkjplWDh8dBDj30Kf4kbadZyKSckxUPG+rxrCoibrbFHzpdbho4sfsaJcA
xHWgwOt4WzjUxJlB8UPvt1vp5isfuzrr2SIaREtqq8cFxo2xyH/bafxpkIawVfwA
AjPiCgywvy9ZAaQ8GzWd6DnWqeq2hdBknQV5X1JtxEXs9IYqwb8FQxWQ3EUDkWsI
Xl0+5MsCH1vx1WqpsLOUXBzQ4frK3DKgGWVe/AKqs7xCJlsVZGMTH2hXSH6OA/xE
VaIlIfvyJDBs49ssJJL/yg6OntfthXYhT+8+K6UVhWUt/Ao+XFRWYndohQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHey/t26LxfxcCnB/Ryx6AqWyFdMB8GA1UdIwQY
MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt
ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj
LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7W7juwj
JryYAz2z6UmGjYEfqv0taZ+i4y+Uf3Ef0O6ijnuuc52qMGM632DHd/G/oo9plJEn
k0BZly42kFxiG4w/xk9tOwutt9vYdvlQHVnxnBYwhO/cUIw8OJV60Up34X2O4agA
u7BckapFxsuV4Xnetm15itbhtbbOflbAC/V+vEtmIZsLS0F/A/5zafwoFkEzzhTI
9MYYEMntOp7Fk6zc9cY//bk8FqdT8HwvkQRhKRmhWo0xrisb4dOWBGMIrIQcH5A9
+IeiMeBVpLN75NS9MbPVpMW9GWrBoGvEdKk3raYEpX4kjSuDVguT9Tmkz3PTAr7O
QljQP9Zr0rfxDw==
-----END CERTIFICATE-----
Generated at Sun Mar 15 08:27:16 2026 by rpki-client