Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: WzHMsAQlm9AkXX/VIiZTjnW6KVIShrUBfHsMEXM1Vno=
Subject key identifier: 36:84:3B:1F:32:D6:8B:1F:10:2C:40:A8:EE:F1:FC:C4:3C:BC:B8:CA
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019D981875F539673F75300819426D6593EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: HN/XwCKeSWNGy+gEc03Bxo1VCgRoXsazz+u8ikaPDr4=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:75:f5:39:67:3f:75:30:08:19:42:6d:65:93:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=36843b1f32d68b1f102c40a8eef1fcc43cbcb8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:f8:9d:74:73:f6:83:c8:ef:49:34:84:9d:
06:0d:9b:6c:e4:e6:86:3d:ec:e3:bc:da:8b:4c:cf:
f1:1b:72:bf:f1:c2:2f:cb:bc:83:1b:6b:1a:b1:de:
22:c0:61:87:1d:b0:c8:5b:79:05:a2:16:db:a8:45:
37:c9:a9:0e:34:45:e8:3c:bd:eb:dd:5b:57:5e:75:
4f:6f:0b:c0:26:cb:18:91:f3:85:f2:da:e1:86:6f:
69:fc:45:db:58:8c:43:18:a4:c0:3c:75:25:b5:dc:
dd:9f:3d:22:13:ff:d6:5a:59:0a:ef:e6:65:a9:49:
0c:67:53:c9:f9:c6:5b:b7:68:f7:95:21:01:ee:23:
ca:4e:42:ea:27:9f:df:b8:ef:66:fa:1a:9f:e0:30:
80:b9:0f:78:27:57:f5:07:df:33:d2:a7:d1:8d:06:
a2:38:01:bd:82:68:b6:13:c0:d6:eb:04:ae:50:7c:
d6:ad:63:d9:ea:f0:67:20:09:7e:94:b9:85:6c:54:
75:72:99:37:25:2e:ff:cd:45:6c:0b:95:48:c1:a3:
aa:8c:20:25:57:79:23:0e:cb:2d:d5:99:5a:62:1b:
e5:2b:69:84:90:81:59:50:c4:69:08:ef:02:01:49:
3b:ac:f8:3f:78:3d:9a:c7:92:cc:03:d2:81:a7:4b:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:3B:1F:32:D6:8B:1F:10:2C:40:A8:EE:F1:FC:C4:3C:BC:B8:CA
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:80:cd:22:f7:b4:21:7c:a8:ed:6d:67:47:b7:bb:2a:56:05:
a7:f7:ae:ae:8b:97:91:a3:74:5e:eb:19:1b:ed:b0:c4:31:45:
04:9f:1a:06:fe:84:a8:ce:56:bd:d4:29:81:41:11:39:2d:15:
a4:15:37:20:37:2e:17:4e:0c:8f:45:b1:32:9b:11:c5:c4:a1:
79:cc:96:c4:6b:ef:5a:a3:02:87:9c:87:a5:53:3d:65:70:ed:
02:5a:aa:91:0b:53:33:24:2b:12:ff:95:be:b3:4b:20:8f:4d:
5a:44:b8:4a:bd:9e:41:02:34:6b:47:cf:6d:d5:1c:5c:f8:0e:
2c:f3:9c:cf:2f:5f:bf:56:d3:ed:e6:95:84:48:c8:b5:c0:9e:
d9:4c:e7:d6:f8:c5:26:4d:aa:b6:46:10:21:ce:ac:cc:ea:a1:
18:33:2f:5b:52:7f:11:55:55:2b:f3:b3:b7:ba:4d:f4:7a:57:
75:05:10:96:16:89:22:fe:9b:67:4e:70:e7:f5:aa:8b:c9:b8:
ff:49:d8:95:ef:a4:76:d8:d2:47:fa:bd:b0:11:f4:af:3c:e7:
ba:59:99:f5:44:85:11:51:7c:3b:6f:de:1a:cd:5b:b5:4b:23:
15:7b:e4:6b:9c:71:91:89:38:d2:22:19:77:44:b4:64:11:fd:
a9:45:2f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGHX1OWc/dTAIGUJtZZPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzNjYzk5ODk5MzczYzg1OTc0ZjAxYzljZDdhYTA1N2Fi
OTdmYWIwHhcNMjYwNDE2MjEwMDMyWhcNMjYwNDE3MjEwMDMyWjAzMTEwLwYDVQQD
EygzNjg0M2IxZjMyZDY4YjFmMTAyYzQwYThlZWYxZmNjNDNjYmNiOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz/4nXRz9oPI70k0hJ0GDZts5OaG
PezjvNqLTM/xG3K/8cIvy7yDG2sasd4iwGGHHbDIW3kFohbbqEU3yakONEXoPL3r
3VtXXnVPbwvAJssYkfOF8trhhm9p/EXbWIxDGKTAPHUltdzdnz0iE//WWlkK7+Zl
qUkMZ1PJ+cZbt2j3lSEB7iPKTkLqJ5/fuO9m+hqf4DCAuQ94J1f1B98z0qfRjQai
OAG9gmi2E8DW6wSuUHzWrWPZ6vBnIAl+lLmFbFR1cpk3JS7/zUVsC5VIwaOqjCAl
V3kjDsst1ZlaYhvlK2mEkIFZUMRpCO8CAUk7rPg/eD2ax5LMA9KBp0sPKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaEOx8y1osfECxAqO7x/MQ8vLjKMB8GA1UdIwQY
MBaAFFnDzJmJk3PIWXTwHJzXqgV6uX+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMt
MWE1ZWI1MDg4NWFlLzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMtMWE1ZWI1MDg4NWFl
LzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYDNIve0
IXyo7W1nR7e7KlYFp/eurouXkaN0XusZG+2wxDFFBJ8aBv6EqM5WvdQpgUEROS0V
pBU3IDcuF04Mj0WxMpsRxcShecyWxGvvWqMCh5yHpVM9ZXDtAlqqkQtTMyQrEv+V
vrNLII9NWkS4Sr2eQQI0a0fPbdUcXPgOLPOczy9fv1bT7eaVhEjItcCe2Uzn1vjF
Jk2qtkYQIc6szOqhGDMvW1J/EVVVK/Ozt7pN9HpXdQUQlhaJIv6bZ05w5/Wqi8m4
/0nYle+kdtjSR/q9sBH0rzznulmZ9USFEVF8O2/eGs1btUsjFXvka5xxkYk40iIZ
d0S0ZBH9qUUvGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:45 2026 by rpki-client