Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: 8iHesAI/xOGu/cO7I3mOoCg1+tcd16tRK09EKiuDgNQ=
Subject key identifier: AC:5B:A1:B5:33:BC:12:E3:2E:A8:90:F1:A1:3B:30:09:29:D6:66:CA
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 019FA9ABD3A9A67686421D312CB0C39BEEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 0A61
Signing time: Tue 28 Jul 2026 17:00:37 +0000
Manifest this update: Tue 28 Jul 2026 17:00:37 +0000
Manifest next update: Wed 29 Jul 2026 17:00:37 +0000
Files and hashes: 1: CZxDjwoqB4QOFIsQCNDw_dKDo2o.roa (hash: fKvo/tgzhzmSFkdOZO8OEhheB3WyD+MYf7ggWIjBrww=)
2: edt0xmZ0bSGmPNiLP1d_zAw05s8.roa (hash: j624gLbIQ30d5sWbalA5dsbX8f1xaNen+6AY5gXhfxY=)
3: veq3VGflC7EKcyTSV4PLJ0gF_AI.roa (hash: OTH3lPgKfCmDiloxLfi5qPSyfmhULCNeRQ8YV01zMtE=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: 5UDHybDf87xirZcwyMzC7xqGSZgQ7oVMjS33pkjeGvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d3:a9:a6:76:86:42:1d:31:2c:b0:c3:9b:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Jul 28 17:00:37 2026 GMT
Not After : Jul 29 17:00:37 2026 GMT
Subject: CN=ac5ba1b533bc12e32ea890f1a13b300929d666ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:92:38:c8:ff:7c:d7:2d:e4:1a:99:1b:ad:
a2:a4:e4:ee:30:a0:24:6c:c1:e3:1b:0b:73:a5:fb:
2d:11:de:9d:26:dc:1e:88:96:87:e5:3b:a3:f1:a1:
4f:10:95:7b:0c:f0:d1:d7:20:ff:4d:12:cf:44:eb:
aa:b9:f9:50:86:04:79:c7:9c:f4:d8:6e:1c:2d:65:
68:51:c3:d2:46:8a:3d:51:7a:a0:6d:20:8f:d6:7b:
7c:ee:cc:f0:10:f9:b0:c0:a0:a2:af:cb:a9:3f:eb:
0d:f5:78:d8:45:4a:1c:8c:b7:7e:ef:7b:2c:53:01:
47:3c:84:86:9e:85:78:49:36:0b:26:84:79:c2:39:
4e:40:5e:86:0c:39:94:0d:b7:10:00:f8:ed:e8:fb:
1c:1e:5b:38:08:92:29:25:35:75:d5:a2:12:a8:6d:
cd:45:ac:4a:1e:70:28:26:42:fa:7a:36:6e:9d:e0:
44:ce:7f:00:e6:21:57:1b:23:ef:a3:95:9e:dc:14:
73:16:db:ad:50:f6:6f:25:75:2b:18:e1:09:34:fc:
29:f3:0f:ca:94:c4:73:d6:87:7a:2a:ad:04:8c:ce:
4b:5b:15:eb:81:dc:1b:f7:95:e0:95:07:ca:34:b4:
25:40:12:21:47:c7:65:95:eb:8f:c8:29:b5:37:a4:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:A1:B5:33:BC:12:E3:2E:A8:90:F1:A1:3B:30:09:29:D6:66:CA
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ee:74:be:e0:50:f4:cd:2b:37:8c:7d:47:18:4d:6d:ca:53:
67:b1:4d:ec:4a:d0:e4:b6:f6:fe:46:a3:d2:61:f0:e9:89:bf:
c5:d3:62:28:ac:ac:f6:15:61:3d:07:da:eb:7a:ca:b8:64:3a:
aa:fb:2c:cd:a0:ac:97:47:6e:16:68:11:65:1b:4e:d0:1c:4b:
4f:76:41:70:a6:50:86:ac:b7:f0:37:83:26:6e:c8:47:53:76:
15:cb:47:5a:e7:59:b1:f4:a4:9e:6d:3d:2c:58:70:cb:b1:9e:
31:72:95:35:41:ad:2c:75:fd:1e:a2:82:47:69:37:13:5e:e5:
18:a7:1e:18:de:71:35:17:d1:eb:a1:53:4e:e7:12:42:c2:ce:
05:6a:72:d3:6f:39:52:b9:02:74:96:da:7f:8f:60:a1:d5:47:
18:48:26:0c:d7:75:62:ab:6e:b5:55:d5:a0:bf:93:4a:37:b5:
85:a1:83:23:09:5b:53:8a:4b:5e:b1:d1:ce:97:2a:26:bb:de:
25:67:c6:31:4c:fe:37:be:50:56:cd:be:fb:8c:f9:00:95:60:
78:3a:8c:43:57:d9:47:7e:23:fb:65:46:b8:a5:a1:6f:cf:14:
71:6f:3d:dc:72:fc:09:b7:fb:7a:77:51:a1:8f:13:bb:31:a8:
0c:60:7b:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq9OppnaGQh0xLLDDm+74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2
NGVjMjAwHhcNMjYwNzI4MTcwMDM3WhcNMjYwNzI5MTcwMDM3WjAzMTEwLwYDVQQD
EyhhYzViYTFiNTMzYmMxMmUzMmVhODkwZjFhMTNiMzAwOTI5ZDY2NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor+SOMj/fNct5BqZG62ipOTuMKAk
bMHjGwtzpfstEd6dJtweiJaH5Tuj8aFPEJV7DPDR1yD/TRLPROuquflQhgR5x5z0
2G4cLWVoUcPSRoo9UXqgbSCP1nt87szwEPmwwKCir8upP+sN9XjYRUocjLd+73ss
UwFHPISGnoV4STYLJoR5wjlOQF6GDDmUDbcQAPjt6PscHls4CJIpJTV11aISqG3N
RaxKHnAoJkL6ejZuneBEzn8A5iFXGyPvo5We3BRzFtutUPZvJXUrGOEJNPwp8w/K
lMRz1od6Kq0EjM5LWxXrgdwb95XglQfKNLQlQBIhR8dlleuPyCm1N6TibQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxbobUzvBLjLqiQ8aE7MAkp1mbKMB8GA1UdIwQY
MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt
ZjJhMmE1ZDUwNDVlLzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl
LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYe50vuBQ
9M0rN4x9RxhNbcpTZ7FN7ErQ5Lb2/kaj0mHw6Ym/xdNiKKys9hVhPQfa63rKuGQ6
qvsszaCsl0duFmgRZRtO0BxLT3ZBcKZQhqy38DeDJm7IR1N2FctHWudZsfSknm09
LFhwy7GeMXKVNUGtLHX9HqKCR2k3E17lGKceGN5xNRfR66FTTucSQsLOBWpy0285
UrkCdJbaf49godVHGEgmDNd1YqtutVXVoL+TSje1haGDIwlbU4pLXrHRzpcqJrve
JWfGMUz+N75QVs2++4z5AJVgeDqMQ1fZR34j+2VGuKWhb88UcW893HL8Cbf7endR
oY8TuzGoDGB71w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:57 2026 by rpki-client