Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: VJlXLlJqs647oFG47R74nnEuE90BbdlyUaNdR3XxtyY=
Subject key identifier: 53:38:61:6F:7C:72:DE:03:96:ED:46:AF:6E:FA:6A:6F:A5:F7:22:DE
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 01A13522F6BD6A06EB6B54E92B2E24FCABF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 0555
Signing time: Tue 13 Oct 2026 12:00:46 +0000
Manifest this update: Tue 13 Oct 2026 12:00:46 +0000
Manifest next update: Wed 14 Oct 2026 12:00:46 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: 5vzUlMKz9/Avvsl63mhXdNeHVc8ucHw8CA2z9kexwno=)
2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:22:f6:bd:6a:06:eb:6b:54:e9:2b:2e:24:fc:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Oct 13 12:00:46 2026 GMT
Not After : Oct 14 12:00:46 2026 GMT
Subject: CN=5338616f7c72de0396ed46af6efa6a6fa5f722de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:4e:16:ba:fa:66:66:54:b0:53:6c:40:68:
79:95:25:39:ea:2b:ae:23:d9:4b:19:e8:f9:5c:07:
e4:fb:b7:de:ce:5f:66:62:2d:ee:f3:d5:98:2e:6f:
77:51:2e:9d:17:7a:47:a1:44:9f:1f:36:ec:18:a9:
c7:de:01:56:55:27:fb:00:da:53:12:59:5d:02:eb:
29:b2:4e:f8:b8:8a:d3:05:65:1b:cb:3a:1c:6e:ad:
10:bd:2f:d4:8b:21:41:36:d0:e9:be:27:00:2d:30:
8e:d4:c6:ab:2c:11:54:c1:29:c2:87:51:8e:85:31:
e2:f2:d1:25:f9:9c:ec:55:06:c5:86:7f:fa:55:7b:
3c:a3:6a:3d:fa:08:a5:9f:fc:d1:1a:64:68:07:db:
aa:8d:45:ac:2e:c4:59:7a:7e:30:40:e9:75:64:f8:
b4:f3:d8:d1:cd:1c:45:6d:30:fa:bf:63:2d:b6:90:
83:57:db:dc:56:26:50:2a:99:73:54:a0:ca:47:d0:
bb:66:45:9f:2d:f9:1d:09:a9:9f:88:12:70:1c:78:
24:bf:cb:9f:68:bd:67:25:f9:c5:f3:fe:29:60:b0:
59:70:7b:03:d7:18:e7:85:93:0f:77:d3:3c:b6:c8:
26:c1:d6:ae:93:4f:20:a5:1a:2b:d5:ac:b5:3b:52:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:61:6F:7C:72:DE:03:96:ED:46:AF:6E:FA:6A:6F:A5:F7:22:DE
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:48:4d:46:5e:54:79:35:9a:0b:80:d0:30:8e:d0:89:a9:5f:
ce:df:cd:c3:ed:59:13:dc:55:0d:8b:08:d8:88:8d:a6:b0:b1:
70:9f:d7:90:3a:33:e4:97:23:60:b5:16:c9:3d:25:ea:66:50:
f6:8e:21:59:1c:ec:ea:cb:a4:15:23:01:75:d9:22:43:ad:8a:
c9:7c:e4:0f:e6:11:8b:c7:23:57:f8:7c:5e:4a:2a:e2:5c:41:
dd:33:83:04:5c:33:dd:b3:b1:fc:53:e3:68:00:0e:7b:4b:45:
a9:3f:3e:51:ac:d0:e4:04:bc:b5:98:24:0f:9a:ad:68:d3:28:
cb:4b:df:98:c1:8c:4d:4b:de:81:11:23:03:6d:41:ae:01:d4:
e0:a9:3b:c2:fd:a9:d3:1d:02:80:57:48:8f:76:e2:cf:ad:9b:
72:78:6c:c8:44:3e:8f:c0:29:40:9c:a2:c7:bc:a3:28:d6:34:
62:5d:84:d4:01:00:5b:be:df:32:16:1c:9d:62:12:85:34:8b:
2f:69:1f:24:01:6e:b3:fb:5a:4c:74:40:2b:5c:90:c3:a8:55:
eb:8c:18:9a:1f:a3:87:b9:b4:fa:a5:0d:2a:62:38:30:5b:78:
4f:26:e6:7e:5e:e6:00:42:c9:9e:33:60:e2:51:c0:bf:cf:6e:
19:99:e8:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1Iva9agbra1TpKy4k/KvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjE1NzliODc1ZTNlMDkzZDQ3MzI1Yjk3MzVlZGJmZTc4
MDlmYmEwHhcNMjYxMDEzMTIwMDQ2WhcNMjYxMDE0MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg1MzM4NjE2ZjdjNzJkZTAzOTZlZDQ2YWY2ZWZhNmE2ZmE1ZjcyMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmtOFrr6ZmZUsFNsQGh5lSU56iuu
I9lLGej5XAfk+7fezl9mYi3u89WYLm93US6dF3pHoUSfHzbsGKnH3gFWVSf7ANpT
ElldAuspsk74uIrTBWUbyzocbq0QvS/UiyFBNtDpvicALTCO1MarLBFUwSnCh1GO
hTHi8tEl+ZzsVQbFhn/6VXs8o2o9+giln/zRGmRoB9uqjUWsLsRZen4wQOl1ZPi0
89jRzRxFbTD6v2MttpCDV9vcViZQKplzVKDKR9C7ZkWfLfkdCamfiBJwHHgkv8uf
aL1nJfnF8/4pYLBZcHsD1xjnhZMPd9M8tsgmwdauk08gpRor1ay1O1LxmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM4YW98ct4Dlu1Gr276am+l9yLeMB8GA1UdIwQY
MBaAFFhhV5uHXj4JPUcyW5c17b/ngJ+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQt
ZjUzMzYzMjdiODgxLzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQtZjUzMzYzMjdiODgx
LzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0hNRl5U
eTWaC4DQMI7Qialfzt/Nw+1ZE9xVDYsI2IiNprCxcJ/XkDoz5JcjYLUWyT0l6mZQ
9o4hWRzs6sukFSMBddkiQ62KyXzkD+YRi8cjV/h8Xkoq4lxB3TODBFwz3bOx/FPj
aAAOe0tFqT8+UazQ5AS8tZgkD5qtaNMoy0vfmMGMTUvegREjA21BrgHU4Kk7wv2p
0x0CgFdIj3biz62bcnhsyEQ+j8ApQJyix7yjKNY0Yl2E1AEAW77fMhYcnWIShTSL
L2kfJAFus/taTHRAK1yQw6hV64wYmh+jh7m0+qUNKmI4MFt4Tybmfl7mAELJnjNg
4lHAv89uGZnoow==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:58:54 2026 by rpki-client