Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
File: wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json)
Hash identifier: j+R2v3CnCvOYmofuuUywD2iGmvKtzu4jcqVZeBNY36E=
Subject key identifier: ED:6F:13:65:B6:55:4B:44:C6:F8:15:48:5C:43:3E:97:B2:A2:EB:EF
Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
Certificate issuer: /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Certificate serial: 019D37F746BAC581A4C4AA61443075C08275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
Manifest number: 0421
Signing time: Sun 29 Mar 2026 05:00:45 +0000
Manifest this update: Sun 29 Mar 2026 05:00:45 +0000
Manifest next update: Mon 30 Mar 2026 05:00:45 +0000
Files and hashes: 1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: 5Q7GyKFpEQc1szmO4aBmOBtZ4j8MwT5OEqOxJ3pffCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:46:ba:c5:81:a4:c4:aa:61:44:30:75:c0:82:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Validity
Not Before: Mar 29 05:00:45 2026 GMT
Not After : Mar 30 05:00:45 2026 GMT
Subject: CN=ed6f1365b6554b44c6f815485c433e97b2a2ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:c0:7c:af:5f:39:33:1b:61:b8:c2:a3:cf:
27:a0:c0:0f:36:32:1a:e8:8a:a0:90:e0:cd:81:a0:
2c:e8:e9:7d:29:4b:6a:86:02:2e:28:28:82:b5:6b:
fd:25:e1:12:d4:db:80:3c:6a:13:6f:a9:a8:ed:a8:
a9:45:6a:09:a5:be:61:43:94:80:76:2a:6e:ae:8f:
4e:e6:1a:2c:50:a2:55:21:51:18:c0:e8:a8:ee:a7:
11:e7:de:56:34:15:52:fe:6d:9e:d4:ac:9b:d3:67:
c4:de:0f:84:7b:8f:bf:27:25:af:61:06:3a:bc:ab:
00:a4:87:4d:22:b8:db:99:b2:58:f6:12:3e:2c:da:
77:13:b8:37:2f:75:78:28:26:fd:b2:3e:6c:04:7b:
e6:58:82:08:bc:6c:fa:bc:ad:72:82:73:8a:8e:34:
fe:21:eb:e6:f4:54:11:a7:18:ea:7f:77:2b:d1:ea:
ba:32:3c:b4:99:ce:b1:70:3c:5b:a4:3b:1e:62:f2:
18:07:6f:4f:3c:02:e9:0e:dc:14:fd:36:c8:f6:b8:
fe:ed:d2:6c:39:79:d3:80:79:1a:7c:14:73:3e:2b:
65:d9:4d:af:80:bb:9e:c3:44:0f:15:a8:14:d6:a7:
13:59:ae:af:49:f5:1a:11:12:1e:f0:74:38:2d:d5:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:13:65:B6:55:4B:44:C6:F8:15:48:5C:43:3E:97:B2:A2:EB:EF
X509v3 Authority Key Identifier:
keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:63:5e:64:6d:b2:53:aa:85:cc:f2:ac:21:55:04:5e:79:a6:
f0:a8:2d:2c:d7:73:d2:21:ad:df:6b:2a:66:50:4e:15:ab:64:
7d:c1:28:4e:d9:18:ca:c6:e2:79:8f:b1:f7:11:ff:5c:c8:0a:
67:a0:a4:a8:62:29:23:9a:11:c2:2b:c5:84:60:d8:e3:33:19:
08:5d:f1:95:81:0e:89:97:fd:a7:8c:74:15:e1:6b:de:79:9d:
56:70:ec:db:60:5e:fa:33:5d:0e:36:6d:6a:b3:59:8a:c4:3d:
27:a9:bc:3d:32:8f:e0:e3:b2:36:ed:0d:a1:08:f7:9e:f1:ad:
a1:24:95:1b:62:0d:7e:ed:6c:e1:b1:41:2a:c7:59:b2:9a:c2:
4d:f8:68:a3:6f:9b:02:24:33:02:e8:28:69:dc:90:3d:e8:49:
b9:aa:d5:8d:bb:13:84:b0:d7:a8:9d:45:81:d5:1c:36:fa:b5:
c0:cf:d4:7d:ca:ce:63:79:13:e4:1e:fe:8c:7d:d9:a1:30:2b:
29:8f:5e:c3:d2:3f:2b:44:f7:ff:b7:a9:73:91:4e:1b:33:2e:
bd:c4:83:46:16:ee:36:16:b0:57:80:77:ae:e4:e8:52:3b:80:
73:c9:45:54:09:53:df:f7:eb:81:22:4e:23:72:75:d7:2d:da:
81:74:45:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390a6xYGkxKphRDB1wIJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYWQ0OTdiODA0MTYzOWM0YjNkMjIxMDc4MmNiNWQxOTgx
NGM0ZTAwHhcNMjYwMzI5MDUwMDQ1WhcNMjYwMzMwMDUwMDQ1WjAzMTEwLwYDVQQD
EyhlZDZmMTM2NWI2NTU0YjQ0YzZmODE1NDg1YzQzM2U5N2IyYTJlYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW7AfK9fOTMbYbjCo88noMAPNjIa
6IqgkODNgaAs6Ol9KUtqhgIuKCiCtWv9JeES1NuAPGoTb6mo7aipRWoJpb5hQ5SA
dipuro9O5hosUKJVIVEYwOio7qcR595WNBVS/m2e1Kyb02fE3g+Ee4+/JyWvYQY6
vKsApIdNIrjbmbJY9hI+LNp3E7g3L3V4KCb9sj5sBHvmWIIIvGz6vK1ygnOKjjT+
Ievm9FQRpxjqf3cr0eq6Mjy0mc6xcDxbpDseYvIYB29PPALpDtwU/TbI9rj+7dJs
OXnTgHkafBRzPitl2U2vgLuew0QPFagU1qcTWa6vSfUaERIe8HQ4LdWS+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1vE2W2VUtExvgVSFxDPpeyouvvMB8GA1UdIwQY
MBaAFMCtSXuAQWOcSz0iEHgstdGYFMTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYWUxZjMtODg0Zi00OGY5LTg4Yzgt
ZWRjMzI1YWU3YjE4LzEvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lYWUxZjMtODg0Zi00OGY5LTg4YzgtZWRjMzI1YWU3YjE4
LzEvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemNeZG2y
U6qFzPKsIVUEXnmm8KgtLNdz0iGt32sqZlBOFatkfcEoTtkYysbieY+x9xH/XMgK
Z6CkqGIpI5oRwivFhGDY4zMZCF3xlYEOiZf9p4x0FeFr3nmdVnDs22Be+jNdDjZt
arNZisQ9J6m8PTKP4OOyNu0NoQj3nvGtoSSVG2INfu1s4bFBKsdZsprCTfhoo2+b
AiQzAugoadyQPehJuarVjbsThLDXqJ1FgdUcNvq1wM/UfcrOY3kT5B7+jH3ZoTAr
KY9ew9I/K0T3/7epc5FOGzMuvcSDRhbuNhawV4B3ruToUjuAc8lFVAlT3/frgSJO
I3J11y3agXRFng==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:50 2026 by rpki-client