Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.mft
File: Wxbf0sLMCcpD-DytXL0rGzdwV4g.mft (raw, json)
Hash identifier: NGsCcdYSMpHpLJ77fP8GfurKRr1+RiqwdYa+uxBwO7E=
Subject key identifier: 24:5F:59:5A:79:13:3C:38:85:B3:81:4D:94:02:A6:0A:93:0C:08:00
Authority key identifier: 5B:16:DF:D2:C2:CC:09:CA:43:F8:3C:AD:5C:BD:2B:1B:37:70:57:88
Certificate issuer: /CN=5b16dfd2c2cc09ca43f83cad5cbd2b1b37705788
Certificate serial: 01A0D9BA6A1884374823395A3A2F70665FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wxbf0sLMCcpD-DytXL0rGzdwV4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:07 +0000
Manifest this update: Fri 25 Sep 2026 18:01:07 +0000
Manifest next update: Sat 26 Sep 2026 18:01:07 +0000
Files and hashes: 1: V_6ETgFokpmsxlB5IDs58HpBsn4.roa (hash: d3+xVmsvrYyKAdN+fbo3j7W3KUpcA9XW1IWt8au3+Mo=)
2: Wxbf0sLMCcpD-DytXL0rGzdwV4g.crl (hash: LTexg/k4PJeZod/zuoQ0AJ4WVlomYWHaVrqgKnAeqXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wxbf0sLMCcpD-DytXL0rGzdwV4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:6a:18:84:37:48:23:39:5a:3a:2f:70:66:5f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b16dfd2c2cc09ca43f83cad5cbd2b1b37705788
Validity
Not Before: Sep 25 18:01:07 2026 GMT
Not After : Sep 26 18:01:07 2026 GMT
Subject: CN=245f595a79133c3885b3814d9402a60a930c0800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:dc:44:ee:42:76:da:48:18:3e:5b:fd:c4:
29:4d:60:77:31:dc:96:48:4c:de:d8:a1:aa:07:0f:
85:50:78:8a:45:0b:1e:c2:d3:2d:c9:9a:f0:f6:27:
b0:87:15:d3:cb:ec:4b:47:b3:21:58:66:34:49:06:
c0:74:e1:55:6f:d1:40:2f:3e:1d:9a:9f:07:6e:5a:
c9:6c:c9:36:4e:50:34:f7:f6:9b:21:1d:02:f8:d9:
7f:e0:fd:a1:f4:b1:60:0c:56:4b:d3:7a:41:45:89:
12:bf:56:d9:ac:ca:9b:86:af:bf:00:2c:c4:4d:7f:
9e:aa:59:63:fc:4f:9b:77:6d:72:75:bd:c9:d1:c8:
4a:ea:2b:f7:6e:7a:a8:43:79:1d:40:e0:f8:11:0a:
d7:45:5d:81:51:74:6a:67:73:b6:d8:89:4f:6e:ef:
11:33:62:1a:80:6c:be:73:91:6d:85:f1:2c:dd:f6:
e5:4a:70:de:c9:3b:c2:1b:49:0d:c2:a5:a2:7e:b3:
bf:30:ea:55:ee:65:c8:73:e6:fd:c5:b7:e2:e6:df:
61:5c:54:a5:c0:82:73:5a:2e:ba:2e:ea:45:3e:dc:
71:3f:ce:6d:5d:96:bf:ff:d6:4a:7e:eb:4c:02:8f:
ee:e7:14:09:1b:5e:28:3c:99:d9:29:2b:90:fc:49:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:59:5A:79:13:3C:38:85:B3:81:4D:94:02:A6:0A:93:0C:08:00
X509v3 Authority Key Identifier:
keyid:5B:16:DF:D2:C2:CC:09:CA:43:F8:3C:AD:5C:BD:2B:1B:37:70:57:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxbf0sLMCcpD-DytXL0rGzdwV4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5b:20:5d:29:65:a5:4d:e6:d9:e1:d8:97:15:dd:51:8c:b4:
bc:b7:64:00:48:29:ca:00:57:60:69:eb:56:85:ec:c9:6c:7a:
f5:d5:b4:86:a1:25:36:b9:94:6d:75:f3:92:bb:0a:5b:59:13:
77:74:1d:19:30:a4:4a:88:73:34:97:7f:4f:40:2c:5c:1d:32:
52:5d:48:10:e8:55:a1:3f:ae:57:5e:b4:07:33:05:a5:47:2a:
73:da:0b:0a:ff:08:f4:ff:3b:51:c8:72:e1:ab:fd:fc:e4:dd:
44:4b:52:7c:97:74:45:6b:8e:60:61:f1:cb:90:cb:ec:41:51:
25:03:e9:7f:5a:27:39:36:82:13:a3:ac:34:a0:0b:73:60:a2:
ea:af:26:4b:46:2d:20:93:e2:11:11:6c:e2:c2:a8:81:21:cb:
d6:4e:1b:97:0a:d9:20:c2:e5:65:e6:82:41:68:5f:ee:9a:cb:
6e:e9:6d:30:78:2e:c9:49:d1:5e:7e:66:8f:a2:f3:7e:07:7c:
14:41:83:58:38:af:ac:96:f1:bb:12:1c:69:71:33:94:e6:46:
bf:23:c5:dc:72:70:70:7e:b4:7c:df:d1:37:71:13:93:1b:25:
9f:e5:9f:28:b7:40:05:96:3b:c0:51:80:04:6f:86:e7:98:d2:
9f:9b:ab:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZumoYhDdIIzlaOi9wZl/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMTZkZmQyYzJjYzA5Y2E0M2Y4M2NhZDVjYmQyYjFiMzc3
MDU3ODgwHhcNMjYwOTI1MTgwMTA3WhcNMjYwOTI2MTgwMTA3WjAzMTEwLwYDVQQD
EygyNDVmNTk1YTc5MTMzYzM4ODViMzgxNGQ5NDAyYTYwYTkzMGMwODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRXcRO5CdtpIGD5b/cQpTWB3MdyW
SEze2KGqBw+FUHiKRQsewtMtyZrw9iewhxXTy+xLR7MhWGY0SQbAdOFVb9FALz4d
mp8HblrJbMk2TlA09/abIR0C+Nl/4P2h9LFgDFZL03pBRYkSv1bZrMqbhq+/ACzE
TX+eqllj/E+bd21ydb3J0chK6iv3bnqoQ3kdQOD4EQrXRV2BUXRqZ3O22IlPbu8R
M2IagGy+c5FthfEs3fblSnDeyTvCG0kNwqWifrO/MOpV7mXIc+b9xbfi5t9hXFSl
wIJzWi66LupFPtxxP85tXZa//9ZKfutMAo/u5xQJG14oPJnZKSuQ/Em8UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRfWVp5Ezw4hbOBTZQCpgqTDAgAMB8GA1UdIwQY
MBaAFFsW39LCzAnKQ/g8rVy9Kxs3cFeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3hiZjBzTE1DY3BELUR5dFhMMHJHemR3VjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUt
NTIzNTZjZDVkYTkwLzEvV3hiZjBzTE1DY3BELUR5dFhMMHJHemR3VjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUtNTIzNTZjZDVkYTkw
LzEvV3hiZjBzTE1DY3BELUR5dFhMMHJHemR3VjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlsgXSll
pU3m2eHYlxXdUYy0vLdkAEgpygBXYGnrVoXsyWx69dW0hqElNrmUbXXzkrsKW1kT
d3QdGTCkSohzNJd/T0AsXB0yUl1IEOhVoT+uV160BzMFpUcqc9oLCv8I9P87Uchy
4av9/OTdREtSfJd0RWuOYGHxy5DL7EFRJQPpf1onOTaCE6OsNKALc2Ci6q8mS0Yt
IJPiERFs4sKogSHL1k4blwrZIMLlZeaCQWhf7prLbultMHguyUnRXn5mj6Lzfgd8
FEGDWDivrJbxuxIcaXEzlOZGvyPF3HJwcH60fN/RN3ETkxsln+WfKLdABZY7wFGA
BG+G55jSn5urJQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:25:27 2026 by rpki-client