Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
File: W2fkuRJYp4VpukUKXno0e0MR1FE.mft (raw, json)
Hash identifier: ndZ4UM98ADQQ0YtPplz/Z4RLqejnJpLQa6WAVlPLMco=
Subject key identifier: F8:3D:45:F0:FA:D2:C2:35:3A:96:C5:F7:F6:94:C5:14:71:EC:B8:3C
Authority key identifier: 5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
Certificate issuer: /CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Certificate serial: 019FAA50D904DE85EF4395DEE36D4EBE3BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
Manifest number: 92
Signing time: Tue 28 Jul 2026 20:00:52 +0000
Manifest this update: Tue 28 Jul 2026 20:00:52 +0000
Manifest next update: Wed 29 Jul 2026 20:00:52 +0000
Files and hashes: 1: W2fkuRJYp4VpukUKXno0e0MR1FE.crl (hash: OU0TcydyGsTQ4hTbC3dxz+0dzfW6BZneo4A5jRLTPC0=)
2: yBxwaW11AdzCtD2abIPzlUZyrb0.asa (hash: sgvoWb8Eg0fLOeE4h8rR/2GP62YHBrZ5DZ553gmHgZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d9:04:de:85:ef:43:95:de:e3:6d:4e:be:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Validity
Not Before: Jul 28 20:00:52 2026 GMT
Not After : Jul 29 20:00:52 2026 GMT
Subject: CN=f83d45f0fad2c2353a96c5f7f694c51471ecb83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:20:48:53:46:e2:54:db:ab:43:35:a2:9e:
b9:05:7b:53:44:99:9d:d6:04:10:f5:f1:7f:48:c5:
97:35:fd:c9:c3:a5:fc:17:e2:03:49:66:e7:fa:c0:
fe:26:8e:da:d8:c6:1a:c9:53:fa:a0:c9:14:a9:73:
96:2f:76:42:9e:67:16:bd:e6:26:fc:e1:3b:0d:23:
af:51:c5:83:f9:fd:8d:89:98:8f:1d:de:c5:f8:00:
cf:db:b0:8d:d4:a3:7d:35:1e:9d:d2:89:ed:00:03:
2e:2d:2b:02:3b:82:65:b9:01:dd:72:61:54:cf:91:
47:16:53:5a:63:0b:b1:4b:1f:2b:be:80:f8:c9:95:
f3:2c:88:23:41:9c:32:21:25:65:e4:bc:96:e2:dd:
c0:9e:c6:69:db:d5:bc:b8:07:33:91:82:c9:c4:2c:
05:74:97:bf:67:9b:f9:d2:4e:60:91:c4:92:af:9a:
d5:aa:de:ad:a2:e2:10:4e:93:72:80:18:06:76:f1:
4a:de:43:b7:48:c7:09:de:f9:f2:de:ad:e7:b6:21:
d2:44:3d:cb:39:55:06:e0:c7:60:02:0a:84:1d:ad:
cc:12:6c:82:5b:70:3f:8d:2d:a7:f5:a9:79:e7:b8:
cf:88:b4:ed:bb:1b:47:cd:73:48:2c:2e:45:20:a0:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3D:45:F0:FA:D2:C2:35:3A:96:C5:F7:F6:94:C5:14:71:EC:B8:3C
X509v3 Authority Key Identifier:
keyid:5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:30:41:66:84:13:c2:b2:47:3e:1a:2c:87:91:16:17:fb:81:
c5:24:a4:c9:3e:63:bd:c6:e0:fb:cc:cd:11:91:bc:57:df:94:
d2:77:ae:1d:18:1f:ae:46:cc:7e:25:3a:f0:1f:64:72:b8:3e:
89:23:1f:cb:90:c6:7e:44:35:b5:e0:a7:83:93:a7:81:76:14:
3a:43:41:ef:9b:4d:45:f4:79:52:22:52:f3:7d:6c:69:fd:4f:
ec:d9:b7:98:04:4d:33:23:8f:e8:4f:36:dd:ee:15:41:ca:fb:
45:06:73:d6:4b:b4:54:3d:b1:38:73:71:7a:db:cf:d6:8f:ec:
6c:7e:60:ff:ee:e4:34:f6:75:0c:e5:e8:68:53:f4:f2:99:b0:
1a:7b:a4:c7:b8:2c:98:ef:03:99:80:45:51:80:43:c4:4c:71:
06:e6:12:42:8a:2f:3f:54:f2:e5:7d:bf:13:93:82:0b:d7:80:
46:21:c6:64:4e:e2:86:c6:b2:13:31:c7:4b:66:a7:76:9c:2d:
ac:4a:4e:cb:75:a7:e0:39:36:8d:4e:0d:f8:c7:3d:6a:d8:be:
96:ef:0e:26:f4:ee:55:7e:16:ca:a6:50:cc:91:ef:3d:39:9a:
ed:c8:52:90:18:ce:8f:68:6f:25:4b:ca:26:12:f2:05:e1:51:
95:28:47:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUNkE3oXvQ5Xe421OvjvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjdlNGI5MTI1OGE3ODU2OWJhNDUwYTVlN2EzNDdiNDMx
MWQ0NTEwHhcNMjYwNzI4MjAwMDUyWhcNMjYwNzI5MjAwMDUyWjAzMTEwLwYDVQQD
EyhmODNkNDVmMGZhZDJjMjM1M2E5NmM1ZjdmNjk0YzUxNDcxZWNiODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IEgSFNG4lTbq0M1op65BXtTRJmd
1gQQ9fF/SMWXNf3Jw6X8F+IDSWbn+sD+Jo7a2MYayVP6oMkUqXOWL3ZCnmcWveYm
/OE7DSOvUcWD+f2NiZiPHd7F+ADP27CN1KN9NR6d0ontAAMuLSsCO4JluQHdcmFU
z5FHFlNaYwuxSx8rvoD4yZXzLIgjQZwyISVl5LyW4t3AnsZp29W8uAczkYLJxCwF
dJe/Z5v50k5gkcSSr5rVqt6touIQTpNygBgGdvFK3kO3SMcJ3vny3q3ntiHSRD3L
OVUG4MdgAgqEHa3MEmyCW3A/jS2n9al557jPiLTtuxtHzXNILC5FIKBONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg9RfD60sI1OpbF9/aUxRRx7Lg8MB8GA1UdIwQY
MBaAFFtn5LkSWKeFabpFCl56NHtDEdRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJma3VSSllwNFZwdWtVS1hubzBlME1SMUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84OGZkYzktZmUxNi00ZjJiLTk3MmIt
ODk3YTg5OTAyZDIzLzEvVzJma3VSSllwNFZwdWtVS1hubzBlME1SMUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84OGZkYzktZmUxNi00ZjJiLTk3MmItODk3YTg5OTAyZDIz
LzEvVzJma3VSSllwNFZwdWtVS1hubzBlME1SMUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjBBZoQT
wrJHPhosh5EWF/uBxSSkyT5jvcbg+8zNEZG8V9+U0neuHRgfrkbMfiU68B9kcrg+
iSMfy5DGfkQ1teCng5OngXYUOkNB75tNRfR5UiJS831saf1P7Nm3mARNMyOP6E82
3e4VQcr7RQZz1ku0VD2xOHNxetvP1o/sbH5g/+7kNPZ1DOXoaFP08pmwGnukx7gs
mO8DmYBFUYBDxExxBuYSQoovP1Ty5X2/E5OCC9eARiHGZE7ihsayEzHHS2andpwt
rEpOy3Wn4Dk2jU4N+Mc9ati+lu8OJvTuVX4WyqZQzJHvPTma7chSkBjOj2hvJUvK
JhLyBeFRlShHBw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:09 2026 by rpki-client