Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: GuOyBVt9TWVMWpqhCMdmqhFEfcYf2x+60GKwaYgnG8Q=
Subject key identifier: 38:93:D4:13:4C:68:57:0C:D2:32:32:A7:B3:D6:B3:A3:7D:A0:69:28
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 01A0CA46848F22089F129DC36D3E8AF5AB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 18:00:14 +0000
Manifest this update: Tue 22 Sep 2026 18:00:14 +0000
Manifest next update: Wed 23 Sep 2026 18:00:14 +0000
Files and hashes: 1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: WurO+fRlWxgtsLkdfWLLTaTX5pVth17n2KookUu0YEg=)
2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:84:8f:22:08:9f:12:9d:c3:6d:3e:8a:f5:ab:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Sep 22 18:00:14 2026 GMT
Not After : Sep 23 18:00:14 2026 GMT
Subject: CN=3893d4134c68570cd23232a7b3d6b3a37da06928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:21:f0:9f:fe:44:35:dc:fe:ad:e9:e0:2d:
bc:a2:05:3a:0b:ca:3e:47:c1:b8:09:d8:98:9e:e6:
6a:f4:a1:4a:3a:28:7b:12:1c:9c:17:13:ad:e2:c8:
8c:d0:67:10:3a:9d:a4:23:75:d6:03:ee:85:bd:0d:
ea:21:5b:82:15:b7:d2:d6:28:8c:d8:94:69:34:08:
b7:9c:88:ab:3e:86:a0:e6:d5:4d:41:8e:94:0d:5c:
ae:8e:c1:4a:89:9f:8b:42:34:24:27:d5:d0:88:7b:
54:14:2f:13:be:33:28:26:b8:eb:46:11:e4:e1:1e:
9f:e2:a7:ba:31:70:a0:ea:62:91:a4:40:c4:e5:5f:
07:ac:e5:24:cd:a6:ff:65:f0:4f:26:88:61:ac:0b:
b4:c0:99:40:37:2d:99:2a:28:7b:92:f1:fc:35:9a:
47:b5:dc:a8:d2:95:56:16:b2:71:48:8b:9a:6b:6f:
d2:4c:69:fb:a9:0c:80:c3:ba:38:a7:e9:b9:a0:44:
11:64:19:6a:fc:62:df:9e:95:e7:54:72:b0:06:d9:
a2:39:fb:81:0a:97:09:9b:80:c2:e8:2b:17:56:eb:
2f:b7:8a:8f:1c:06:64:99:1e:be:0d:56:b1:d1:06:
bb:1f:47:da:76:9b:e5:24:5b:79:66:d7:96:e9:50:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:93:D4:13:4C:68:57:0C:D2:32:32:A7:B3:D6:B3:A3:7D:A0:69:28
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:27:ed:a5:1e:1a:5f:4c:29:ed:70:05:ac:e6:9f:74:1b:65:
6c:0b:23:bb:8f:da:96:1a:69:ea:5b:27:2d:df:10:28:73:02:
6d:39:37:8b:a9:3f:9e:9c:62:2f:1f:c4:ce:e5:8e:88:b2:a5:
59:e7:e8:7b:fc:bd:d8:22:67:ef:ff:05:4c:e8:25:f4:fa:0f:
8e:16:36:b3:93:b9:4e:ce:86:24:9f:9c:3c:c4:72:59:e2:1b:
43:6c:81:9e:4a:71:14:a0:f8:cc:e0:bf:ba:63:68:aa:92:1f:
3b:39:d0:40:47:ca:ac:14:ad:15:9b:26:e9:ca:4b:f2:aa:19:
58:ef:e8:67:3f:56:e2:d9:f6:b1:dd:86:2b:4d:9b:67:27:6a:
70:15:87:c7:0a:78:17:f3:1d:f0:89:fa:4f:6a:f3:17:9e:3d:
7f:8d:07:c1:95:9e:93:48:22:1f:e0:b8:96:a4:b3:89:6c:93:
47:36:1a:a3:6f:18:a9:04:3a:01:27:71:af:eb:bb:3d:10:43:
e3:df:fb:ad:b2:dc:17:26:f7:f7:aa:6c:31:ec:9f:f2:d9:a4:
40:be:8c:08:6c:29:c6:68:de:a6:1c:94:90:1b:35:54:02:40:
80:45:3f:f7:0b:98:15:e6:b2:4f:24:ff:fc:3b:95:f0:77:4e:
6e:73:2d:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRoSPIgifEp3DbT6K9atuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx
NTZkN2MwHhcNMjYwOTIyMTgwMDE0WhcNMjYwOTIzMTgwMDE0WjAzMTEwLwYDVQQD
EygzODkzZDQxMzRjNjg1NzBjZDIzMjMyYTdiM2Q2YjNhMzdkYTA2OTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoywh8J/+RDXc/q3p4C28ogU6C8o+
R8G4CdiYnuZq9KFKOih7EhycFxOt4siM0GcQOp2kI3XWA+6FvQ3qIVuCFbfS1iiM
2JRpNAi3nIirPoag5tVNQY6UDVyujsFKiZ+LQjQkJ9XQiHtUFC8TvjMoJrjrRhHk
4R6f4qe6MXCg6mKRpEDE5V8HrOUkzab/ZfBPJohhrAu0wJlANy2ZKih7kvH8NZpH
tdyo0pVWFrJxSIuaa2/STGn7qQyAw7o4p+m5oEQRZBlq/GLfnpXnVHKwBtmiOfuB
CpcJm4DC6CsXVusvt4qPHAZkmR6+DVax0Qa7H0fadpvlJFt5ZteW6VDr4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiT1BNMaFcM0jIyp7PWs6N9oGkoMB8GA1UdIwQY
MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt
OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh
LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyftpR4a
X0wp7XAFrOafdBtlbAsju4/alhpp6lsnLd8QKHMCbTk3i6k/npxiLx/EzuWOiLKl
Wefoe/y92CJn7/8FTOgl9PoPjhY2s5O5Ts6GJJ+cPMRyWeIbQ2yBnkpxFKD4zOC/
umNoqpIfOznQQEfKrBStFZsm6cpL8qoZWO/oZz9W4tn2sd2GK02bZydqcBWHxwp4
F/Md8In6T2rzF549f40HwZWek0giH+C4lqSziWyTRzYao28YqQQ6ASdxr+u7PRBD
49/7rbLcFyb396psMeyf8tmkQL6MCGwpxmjephyUkBs1VAJAgEU/9wuYFeayTyT/
/DuV8HdObnMtgA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:29 2026 by rpki-client