Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: Wla0kWyAOhZVaQD1pFuzKy4+AeMGKVY1F/T8kIotoTE=
Subject key identifier: 68:5A:D3:C4:68:96:AB:8F:B5:84:B0:A0:94:A7:09:17:21:77:AA:90
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019FACE3941A716AA21C14F7D2953E412294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 07B8
Signing time: Wed 29 Jul 2026 08:00:23 +0000
Manifest this update: Wed 29 Jul 2026 08:00:23 +0000
Manifest next update: Thu 30 Jul 2026 08:00:23 +0000
Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: v/Q3tA1id8dWoMuuPHkqve0AX7cuSzwC1+ftI6QUWRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:94:1a:71:6a:a2:1c:14:f7:d2:95:3e:41:22:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Jul 29 08:00:23 2026 GMT
Not After : Jul 30 08:00:23 2026 GMT
Subject: CN=685ad3c46896ab8fb584b0a094a709172177aa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:98:40:23:3b:8d:d9:3e:77:37:5a:03:0b:
d7:d6:65:ea:d4:64:cd:03:70:46:f8:07:f0:20:2d:
80:f4:aa:b1:39:62:5b:1e:4f:45:d8:83:dd:94:73:
fa:7a:19:e4:09:da:20:a2:40:37:55:0f:dc:c6:99:
0b:a1:73:a9:5e:36:cc:fd:6e:92:75:75:61:10:2b:
2a:94:63:29:a8:bf:2a:b6:1f:2d:72:6d:eb:9b:47:
0b:28:61:05:30:c0:2e:c9:a5:98:95:85:f4:bf:1e:
7c:42:43:fa:58:a8:dd:88:d6:05:9e:17:ec:ab:8b:
e9:9b:e6:66:3c:4a:29:96:3e:10:d4:60:22:77:4c:
2a:45:07:22:e6:c8:b6:26:76:b0:93:a7:b2:ad:5c:
83:e8:3b:55:b0:af:35:9b:0a:52:93:ee:4a:19:c2:
a7:ab:31:87:8c:f3:00:9e:cc:df:66:81:c4:ac:05:
1d:d6:53:48:47:db:39:ee:da:70:90:ad:bf:51:ad:
7d:79:6e:ef:96:70:33:a8:c9:9e:ec:78:d1:4d:f5:
76:df:46:d2:92:2d:09:cc:a0:7f:0f:63:d8:cf:d9:
3a:2d:40:aa:c3:a6:cf:0f:4b:f1:7e:13:c2:98:74:
e1:3b:ce:c2:16:d2:9a:6a:ee:ef:33:14:7b:9d:88:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:D3:C4:68:96:AB:8F:B5:84:B0:A0:94:A7:09:17:21:77:AA:90
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:a4:4a:a6:42:94:9a:98:cc:7f:3a:93:eb:f8:b8:f9:2f:
b5:d9:ea:f7:a4:f7:54:e4:cc:ee:7c:63:7f:50:28:60:43:a5:
ec:54:1a:3f:ea:81:e9:a8:cb:1d:12:2c:53:ee:ee:52:00:c5:
d4:1d:5c:f4:d8:17:7f:00:d4:35:b1:21:55:2f:ec:a5:99:5f:
f8:70:95:3d:97:77:2c:f5:ac:24:73:ff:15:da:b8:36:ca:61:
ed:05:4b:46:50:a6:d7:7e:c4:56:09:0c:60:24:5e:bc:f9:19:
2b:c3:21:57:88:9b:e7:48:e1:f1:3d:76:60:a8:65:00:ff:cf:
6b:87:90:35:b0:d6:91:c1:5e:ac:bf:05:ee:69:07:1c:72:4c:
f5:da:1c:80:fc:87:14:37:38:25:35:da:c7:13:75:84:de:0d:
93:6d:0c:e1:52:50:fe:c1:d5:4d:b6:c4:7c:4f:35:c9:07:b7:
34:b3:93:56:21:91:48:4a:8c:63:82:fd:47:55:44:57:6e:b0:
78:35:b0:d0:de:a6:da:a1:4e:c8:55:12:2f:65:81:10:c3:9b:
99:40:b6:bf:80:9c:91:24:f5:26:0d:81:9e:fe:c3:3b:6b:62:
67:4f:d7:16:17:52:87:4b:0e:d0:6c:67:7d:14:74:09:b1:91:
f9:78:26:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s45QacWqiHBT30pU+QSKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj
ZmVmZDcwHhcNMjYwNzI5MDgwMDIzWhcNMjYwNzMwMDgwMDIzWjAzMTEwLwYDVQQD
Eyg2ODVhZDNjNDY4OTZhYjhmYjU4NGIwYTA5NGE3MDkxNzIxNzdhYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAGYQCM7jdk+dzdaAwvX1mXq1GTN
A3BG+AfwIC2A9KqxOWJbHk9F2IPdlHP6ehnkCdogokA3VQ/cxpkLoXOpXjbM/W6S
dXVhECsqlGMpqL8qth8tcm3rm0cLKGEFMMAuyaWYlYX0vx58QkP6WKjdiNYFnhfs
q4vpm+ZmPEoplj4Q1GAid0wqRQci5si2Jnawk6eyrVyD6DtVsK81mwpSk+5KGcKn
qzGHjPMAnszfZoHErAUd1lNIR9s57tpwkK2/Ua19eW7vlnAzqMme7HjRTfV230bS
ki0JzKB/D2PYz9k6LUCqw6bPD0vxfhPCmHThO87CFtKaau7vMxR7nYhKhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGha08RolquPtYSwoJSnCRchd6qQMB8GA1UdIwQY
MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt
MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5
LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaWkSqZC
lJqYzH86k+v4uPkvtdnq96T3VOTM7nxjf1AoYEOl7FQaP+qB6ajLHRIsU+7uUgDF
1B1c9NgXfwDUNbEhVS/spZlf+HCVPZd3LPWsJHP/Fdq4Nsph7QVLRlCm137EVgkM
YCRevPkZK8MhV4ib50jh8T12YKhlAP/Pa4eQNbDWkcFerL8F7mkHHHJM9docgPyH
FDc4JTXaxxN1hN4Nk20M4VJQ/sHVTbbEfE81yQe3NLOTViGRSEqMY4L9R1VEV26w
eDWw0N6m2qFOyFUSL2WBEMObmUC2v4CckST1Jg2Bnv7DO2tiZ0/XFhdSh0sO0Gxn
fRR0CbGR+XgmNw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:32 2026 by rpki-client