Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: i0Bj5VLiDNXXX1TVNdqP1B4k7UHVHJYhXP4RryjpH5k=
Subject key identifier: C3:C9:68:CA:47:D0:2A:FA:DD:B5:3E:7D:D9:F5:49:2B:17:CD:78:BF
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 01A0C3320EE1BFD9B9EB7496E045523F1AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 09:00:32 +0000
Manifest this update: Mon 21 Sep 2026 09:00:32 +0000
Manifest next update: Tue 22 Sep 2026 09:00:32 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: OMDhYTWNODc5Keu4Cl2e+quG4SH98VR2idZYugKB4bE=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:0e:e1:bf:d9:b9:eb:74:96:e0:45:52:3f:1a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Sep 21 09:00:32 2026 GMT
Not After : Sep 22 09:00:32 2026 GMT
Subject: CN=c3c968ca47d02afaddb53e7dd9f5492b17cd78bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:8f:88:d7:4b:e9:8d:00:6e:79:3b:19:4b:
93:eb:eb:50:5b:d4:a7:56:83:38:a0:54:42:42:32:
b4:8a:fc:82:37:bf:23:e9:7f:f2:c5:d9:36:66:af:
d4:94:91:99:7c:08:c0:fe:2a:af:69:d9:64:4d:0a:
b7:72:7c:b9:30:ec:26:da:f5:39:0d:c2:1b:62:09:
54:8d:4b:74:9c:4e:8a:5e:e2:14:63:b9:e8:5c:80:
e4:59:ff:d9:2d:da:be:8a:47:aa:4d:ea:78:ee:1c:
71:21:05:e9:7e:e3:72:7c:08:ac:9a:28:f9:db:df:
5e:57:0b:67:43:1e:61:ad:d4:5f:db:72:d9:ab:9c:
bf:cc:6f:c5:b4:d0:23:e3:94:4d:f0:42:5e:fa:ef:
c5:4e:26:86:a5:47:61:cc:2e:9f:b2:f4:2e:6a:74:
1b:30:fb:9a:45:1d:b9:3a:33:19:a6:ef:06:8d:8b:
cf:32:42:ff:81:97:e6:ed:b4:cb:29:b7:f1:06:ab:
db:d1:30:86:5c:a4:cd:f5:e5:02:2d:b2:44:7b:a3:
cc:cd:e6:58:25:1f:18:11:4c:21:80:97:7d:7d:d8:
23:15:d9:12:aa:1c:62:4a:25:0a:df:74:16:df:45:
3c:38:53:f2:a4:a6:ad:eb:34:32:54:aa:49:15:6e:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C9:68:CA:47:D0:2A:FA:DD:B5:3E:7D:D9:F5:49:2B:17:CD:78:BF
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:da:06:f9:61:47:a8:ef:27:60:88:e1:67:13:35:86:95:38:
db:55:40:f1:9a:71:0a:a2:67:46:77:33:ab:12:92:3e:46:c2:
11:94:56:0c:10:97:ff:59:ac:89:79:d2:32:56:09:38:6e:52:
b5:8f:a5:8c:df:79:92:cf:75:da:e5:2b:fb:3b:de:c2:7a:4b:
c7:bd:2c:11:b7:1b:01:25:cc:53:93:15:0c:c1:2b:0d:7b:bb:
e2:b0:a1:32:ed:08:2e:5a:81:ae:fc:22:f9:b4:6d:78:75:6f:
26:80:de:40:25:e6:40:a7:17:14:b5:27:0f:15:3c:59:b3:09:
8e:14:b4:6f:3d:4a:5a:d8:0d:ca:e8:31:e7:72:fb:66:47:90:
b3:b1:c7:dd:e3:28:86:78:96:02:e2:78:8a:cb:56:0e:45:4a:
42:ad:ad:93:45:98:31:16:56:85:de:28:ad:99:d6:49:bd:b8:
69:5f:26:56:9a:b1:b0:71:31:d3:e5:1b:ff:b2:6e:4e:ed:03:
98:a8:e0:25:d6:b8:28:e8:da:b1:38:68:55:5b:07:f6:4a:ae:
15:4f:04:fb:f2:29:e3:4e:93:ab:6c:e2:79:4e:8f:2a:1d:7c:
88:4d:c8:26:c4:42:b2:95:15:44:ee:18:1d:88:68:d0:b9:d2:
83:56:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:07 2026 by rpki-client