Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
File: wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft (raw, json)
Hash identifier: PMHEXCvhr0UADpT69xkXMEe/R50qX1eEbbb3s92r7nY=
Subject key identifier: 6A:64:E8:AF:9A:9F:B3:9F:C2:0A:12:4C:AD:D0:41:D9:71:93:BC:47
Authority key identifier: C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
Certificate issuer: /CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Certificate serial: 019FAA88A45222E13132F35BFBE4EA3C305E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:49 +0000
Manifest this update: Tue 28 Jul 2026 21:01:49 +0000
Manifest next update: Wed 29 Jul 2026 21:01:49 +0000
Files and hashes: 1: n-LkYEYl_BKToTd94568MGgE5jc.roa (hash: dbNcQZB+XqGNZ6CWLvpvwNF67hivn9OZiLltxklIlbE=)
2: wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl (hash: mBW+AwrW/9Kr/2dY6dCLNbPjBS8xCZzDh79b/zYArzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a4:52:22:e1:31:32:f3:5b:fb:e4:ea:3c:30:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Validity
Not Before: Jul 28 21:01:49 2026 GMT
Not After : Jul 29 21:01:49 2026 GMT
Subject: CN=6a64e8af9a9fb39fc20a124cadd041d97193bc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:30:ca:41:df:fa:c6:3b:3e:8f:12:56:23:
fe:da:4a:d0:b9:31:f7:02:e1:39:58:51:57:08:e8:
50:fb:d1:f8:a3:50:cd:85:78:73:ec:aa:e4:1b:5d:
f5:47:e3:13:84:c4:c1:1f:4e:8f:1d:84:6a:b0:ad:
29:c1:09:ec:da:95:2c:fe:03:3e:8a:25:4a:a9:bf:
22:48:fb:7e:91:cd:34:70:2f:38:8e:73:14:a7:40:
a7:0e:91:5b:1b:a9:cc:f9:3a:29:26:3b:62:7b:14:
74:40:da:9f:75:9c:6f:03:c6:02:e1:d2:c0:92:ec:
b9:fe:f0:65:26:ed:80:2d:6a:ee:66:51:6a:1d:c9:
d5:57:ce:6c:6e:b6:e2:4b:12:42:59:47:33:38:21:
9b:24:25:ad:02:1b:e2:63:54:ce:0b:4a:40:80:c3:
9f:7b:ee:5c:da:ca:17:50:25:61:ae:53:7b:7a:53:
45:71:59:9d:a1:b0:bd:8a:b9:a1:5e:40:64:94:fe:
cc:19:65:9f:01:3a:08:92:32:ba:e6:65:88:d0:61:
7b:ec:94:d1:ca:6e:b7:dd:bc:97:da:d1:22:1e:6f:
73:db:07:40:4a:60:ef:3d:48:57:f8:bf:73:1b:69:
58:71:2c:64:18:4c:49:0d:30:06:86:67:c0:2d:0d:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:64:E8:AF:9A:9F:B3:9F:C2:0A:12:4C:AD:D0:41:D9:71:93:BC:47
X509v3 Authority Key Identifier:
keyid:C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:6f:5f:a7:00:b5:8e:cc:76:ad:64:47:11:3d:41:0c:e2:
da:ad:ba:80:0b:e7:fc:df:78:cc:1a:9a:56:6e:05:e7:06:a4:
a0:b9:bc:49:03:f0:27:8e:fb:bf:81:b7:f4:c9:cf:09:53:ed:
f1:b8:ea:cd:1f:38:14:95:92:4c:05:2e:0e:6d:08:68:15:7e:
7f:9d:cc:56:79:7e:e6:1d:5f:bc:f7:d2:2b:a0:4e:a1:19:65:
50:6b:4e:25:d1:78:4e:3c:a3:73:d4:95:d4:cb:a3:09:0d:54:
1c:4e:04:e7:68:6e:e3:3e:ff:28:d6:f9:86:4e:35:de:27:85:
eb:5d:81:b7:41:7f:52:70:6f:0b:0c:b2:8e:6b:43:b5:4f:77:
d9:9c:7a:2d:71:22:4f:e0:f4:cc:f2:8c:8e:c7:40:f1:23:66:
52:1a:01:a7:52:b6:0f:74:97:1e:2d:1b:f5:30:8c:50:8c:d8:
30:4e:a7:fc:99:a6:40:40:1f:c0:f1:54:c5:e6:02:ff:d6:88:
24:c9:a0:a1:64:46:dd:f3:04:43:16:73:1a:12:78:02:9a:cd:
80:f8:6d:f0:da:7f:f6:a5:e7:4e:a6:d3:01:e6:e0:45:a6:52:
93:cb:6a:72:bb:3b:48:38:cd:e3:3b:af:85:fd:0c:c1:94:f1:
f5:16:4d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiKRSIuExMvNb++TqPDBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNGQxYTQzNmI4ZDk1Y2Q2YzJhNWQwMzhiN2ExMGI1ZWU4
NWVjZjYwHhcNMjYwNzI4MjEwMTQ5WhcNMjYwNzI5MjEwMTQ5WjAzMTEwLwYDVQQD
Eyg2YTY0ZThhZjlhOWZiMzlmYzIwYTEyNGNhZGQwNDFkOTcxOTNiYzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjwwykHf+sY7Po8SViP+2krQuTH3
AuE5WFFXCOhQ+9H4o1DNhXhz7KrkG131R+MThMTBH06PHYRqsK0pwQns2pUs/gM+
iiVKqb8iSPt+kc00cC84jnMUp0CnDpFbG6nM+TopJjtiexR0QNqfdZxvA8YC4dLA
kuy5/vBlJu2ALWruZlFqHcnVV85sbrbiSxJCWUczOCGbJCWtAhviY1TOC0pAgMOf
e+5c2soXUCVhrlN7elNFcVmdobC9irmhXkBklP7MGWWfAToIkjK65mWI0GF77JTR
ym633byX2tEiHm9z2wdASmDvPUhX+L9zG2lYcSxkGExJDTAGhmfALQ0PkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpk6K+an7OfwgoSTK3QQdlxk7xHMB8GA1UdIwQY
MBaAFMJNGkNrjZXNbCpdA4t6ELXuhez2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2swYVEydU5sYzFzS2wwRGkzb1F0ZTZGN1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85YmM1YmMtOGY5OS00MmVkLWE4Y2Ut
NWI4NmJhNTg1OTIyLzEvd2swYVEydU5sYzFzS2wwRGkzb1F0ZTZGN1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85YmM1YmMtOGY5OS00MmVkLWE4Y2UtNWI4NmJhNTg1OTIy
LzEvd2swYVEydU5sYzFzS2wwRGkzb1F0ZTZGN1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuBvX6cA
tY7Mdq1kRxE9QQzi2q26gAvn/N94zBqaVm4F5wakoLm8SQPwJ477v4G39MnPCVPt
8bjqzR84FJWSTAUuDm0IaBV+f53MVnl+5h1fvPfSK6BOoRllUGtOJdF4Tjyjc9SV
1MujCQ1UHE4E52hu4z7/KNb5hk413ieF612Bt0F/UnBvCwyyjmtDtU932Zx6LXEi
T+D0zPKMjsdA8SNmUhoBp1K2D3SXHi0b9TCMUIzYME6n/JmmQEAfwPFUxeYC/9aI
JMmgoWRG3fMEQxZzGhJ4AprNgPht8Np/9qXnTqbTAebgRaZSk8tqcrs7SDjN4zuv
hf0MwZTx9RZNFw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:34 2026 by rpki-client