Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: rNIQZ03VWkBV900UJeuaVo43dQW6WFnAPhVl43AOWBg=
Subject key identifier: 4A:6A:F6:69:F0:F1:B7:BB:63:E9:EE:57:CF:DA:02:1C:A3:48:07:D0
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 01A0D64BB9531D52926EA1BFDDD3500D109E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 0852
Signing time: Fri 25 Sep 2026 02:01:21 +0000
Manifest this update: Fri 25 Sep 2026 02:01:21 +0000
Manifest next update: Sat 26 Sep 2026 02:01:21 +0000
Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: MKMBHfc1Kuu7KrcnuCudx1Uz9uZneepuZLAZCgMkGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:b9:53:1d:52:92:6e:a1:bf:dd:d3:50:0d:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Sep 25 02:01:21 2026 GMT
Not After : Sep 26 02:01:21 2026 GMT
Subject: CN=4a6af669f0f1b7bb63e9ee57cfda021ca34807d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:91:86:bd:e0:8d:8b:ed:09:b3:b7:9d:82:
ed:89:c9:b5:49:8a:2e:2d:3c:f9:86:70:57:50:e3:
88:42:fe:cd:36:b8:19:05:6f:9b:30:e6:28:8e:53:
e2:d7:ea:fc:74:91:ec:96:d5:25:bf:50:cc:9f:0a:
d6:30:fb:4b:94:00:bc:31:fc:e4:e5:bd:66:63:12:
7f:5f:f7:a8:b7:b6:7a:bc:da:87:e5:a6:5b:6c:03:
05:54:d4:1d:10:24:2c:0d:0f:2b:5f:23:62:a9:71:
bb:e5:6d:58:fe:2f:a0:4a:d0:ff:8b:5b:f0:cb:c1:
1b:be:54:d0:29:b4:74:35:81:be:92:4e:07:45:dd:
6d:2d:e0:17:ca:59:0f:60:b2:74:21:de:0e:e2:7d:
b2:33:09:2a:34:2f:6c:be:40:8a:9f:c4:c7:0f:2f:
0f:44:79:4c:27:8d:0f:be:1e:37:f3:7b:e7:31:22:
a6:cb:f6:61:3e:7b:af:d7:66:05:79:9c:b7:d9:7a:
1f:ea:9e:15:78:22:2d:f7:9c:5a:79:5b:c2:c4:de:
71:61:8a:cd:18:25:55:3b:b5:d3:93:c8:e2:df:d4:
c3:a7:9e:09:7d:ba:f8:7b:70:01:c0:86:bb:29:44:
91:c4:32:3e:9c:45:7f:0d:ef:8c:8e:56:62:12:fb:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:F6:69:F0:F1:B7:BB:63:E9:EE:57:CF:DA:02:1C:A3:48:07:D0
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d4:b2:44:10:f0:2d:86:8b:7e:f5:85:fa:98:64:24:43:c2:
b6:f7:f1:f2:10:29:88:ba:ed:6a:ec:9f:5f:92:3e:53:a8:08:
a7:96:d9:0e:45:35:ee:ae:f5:f0:48:a5:2e:87:59:76:67:6a:
13:f6:24:5e:54:f9:40:56:52:4e:c5:64:7d:76:e9:0c:0c:6b:
99:81:b0:4d:b0:a1:f6:e7:a4:0e:97:c7:90:ce:76:4d:1f:2c:
83:7e:34:ce:0c:ea:e7:47:4e:a9:7c:83:0d:37:72:2f:8f:06:
6d:06:3b:42:47:a1:98:4c:b8:70:05:e2:9d:18:19:61:10:7f:
7e:d4:08:eb:76:56:53:60:a4:ee:82:b0:ca:fa:9e:ec:f4:ee:
ff:c0:8f:03:f4:a7:fe:b5:5b:89:9b:e3:ea:d3:38:97:6e:47:
81:fd:c7:9e:1d:26:87:44:a3:72:59:fe:ee:cf:16:e4:39:0f:
7f:76:fb:a6:ef:21:7b:75:5d:20:ec:a3:26:14:74:fd:88:7f:
60:ca:aa:32:22:11:12:b7:f2:14:dd:7e:70:e9:08:a9:32:36:
b9:cd:fa:9d:ba:42:d1:3d:f6:ad:8f:41:bc:37:6c:f8:a6:5a:
6c:36:6a:01:af:86:f4:5f:80:78:07:71:83:fb:23:bd:38:e0:
b1:43:00:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS7lTHVKSbqG/3dNQDRCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj
ZmVmZDcwHhcNMjYwOTI1MDIwMTIxWhcNMjYwOTI2MDIwMTIxWjAzMTEwLwYDVQQD
Eyg0YTZhZjY2OWYwZjFiN2JiNjNlOWVlNTdjZmRhMDIxY2EzNDgwN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+mRhr3gjYvtCbO3nYLticm1SYou
LTz5hnBXUOOIQv7NNrgZBW+bMOYojlPi1+r8dJHsltUlv1DMnwrWMPtLlAC8Mfzk
5b1mYxJ/X/eot7Z6vNqH5aZbbAMFVNQdECQsDQ8rXyNiqXG75W1Y/i+gStD/i1vw
y8EbvlTQKbR0NYG+kk4HRd1tLeAXylkPYLJ0Id4O4n2yMwkqNC9svkCKn8THDy8P
RHlMJ40Pvh4383vnMSKmy/ZhPnuv12YFeZy32Xof6p4VeCIt95xaeVvCxN5xYYrN
GCVVO7XTk8ji39TDp54Jfbr4e3ABwIa7KUSRxDI+nEV/De+MjlZiEvujxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpq9mnw8be7Y+nuV8/aAhyjSAfQMB8GA1UdIwQY
MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt
MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5
LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActSyRBDw
LYaLfvWF+phkJEPCtvfx8hApiLrtauyfX5I+U6gIp5bZDkU17q718EilLodZdmdq
E/YkXlT5QFZSTsVkfXbpDAxrmYGwTbCh9uekDpfHkM52TR8sg340zgzq50dOqXyD
DTdyL48GbQY7QkehmEy4cAXinRgZYRB/ftQI63ZWU2Ck7oKwyvqe7PTu/8CPA/Sn
/rVbiZvj6tM4l25Hgf3Hnh0mh0Sjcln+7s8W5DkPf3b7pu8he3VdIOyjJhR0/Yh/
YMqqMiIRErfyFN1+cOkIqTI2uc36nbpC0T32rY9BvDds+KZabDZqAa+G9F+AeAdx
g/sjvTjgsUMA7g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:43:39 2026 by rpki-client