Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: ng+HuXj7eKSi5Zobix2Hsi6rPDQfJyzrEZ5EkPBEFAg=
Subject key identifier: C2:53:F6:65:CA:5C:0E:6F:BC:34:3F:0A:03:17:F8:99:F6:46:4C:DA
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 019FAA889CAE225550DCC8125902EC41ACBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 21:01:47 +0000
Manifest this update: Tue 28 Jul 2026 21:01:47 +0000
Manifest next update: Wed 29 Jul 2026 21:01:47 +0000
Files and hashes: 1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: fPofQlWQmu2mJMirVENUDUvZMMNxALJrM09SrnPlHfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:9c:ae:22:55:50:dc:c8:12:59:02:ec:41:ac:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Jul 28 21:01:47 2026 GMT
Not After : Jul 29 21:01:47 2026 GMT
Subject: CN=c253f665ca5c0e6fbc343f0a0317f899f6464cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:51:4a:c7:d7:4b:f9:4e:d8:29:e6:b5:e6:
60:16:b1:ed:3c:4a:e0:4a:62:c1:6d:08:c1:54:88:
3a:16:8c:fd:84:80:57:09:6e:e0:5b:da:39:65:d7:
64:81:a3:86:13:df:28:db:4b:81:56:f2:4f:db:98:
36:43:03:7c:42:ef:6f:38:e9:7a:04:68:6b:3d:ac:
a8:f6:17:c6:47:19:36:f2:91:f7:36:64:95:0b:76:
d3:a3:3e:04:5a:30:cf:2f:44:3b:cd:06:50:e6:7d:
39:e0:9f:3f:c3:4d:84:3c:a6:5f:45:4c:e0:4c:5f:
ed:4d:9e:e3:94:30:d7:5b:53:e3:67:5f:14:d9:5c:
d0:0f:af:76:2a:b6:b3:47:58:31:48:35:46:fd:0a:
96:07:4d:df:4b:2d:0c:83:90:a0:ff:c3:d3:b5:37:
db:85:f2:78:d4:52:9c:ee:86:8f:b9:8f:ca:73:01:
c5:34:65:77:52:59:dd:45:4f:f4:6f:66:89:65:57:
e2:29:af:71:81:83:9d:a2:6f:57:70:72:39:4a:4a:
4d:d7:78:e7:7e:91:8f:1a:32:62:8b:02:70:e5:d8:
33:bf:25:28:f0:bb:06:4b:cc:30:82:ee:57:6e:a8:
c5:cc:d9:2a:42:41:62:b4:7d:7a:4d:46:d5:39:7b:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:53:F6:65:CA:5C:0E:6F:BC:34:3F:0A:03:17:F8:99:F6:46:4C:DA
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:82:f9:dc:e8:2c:47:6d:e8:b7:22:ae:70:cb:92:3f:37:86:
d5:d5:5d:b7:60:5a:e3:42:e0:e4:f4:8b:d7:e0:f3:47:92:5e:
ef:5d:34:9f:73:19:89:d5:76:71:4e:ad:07:d8:a2:7d:bb:49:
f1:05:86:56:af:fe:77:41:44:a1:68:3c:45:0e:98:2c:62:89:
b2:71:e8:e2:00:1a:8a:09:e3:94:ad:7a:24:2b:f9:33:6f:b7:
a9:e7:eb:97:ce:91:23:4c:cd:4e:ce:19:83:3a:4b:03:1a:95:
01:8e:1b:98:5d:7e:30:44:f5:29:bb:16:f1:ef:a0:4f:dd:df:
10:b6:88:0c:7f:30:a4:48:58:79:aa:86:28:88:00:f6:33:70:
9b:92:68:62:ee:28:d4:59:6d:15:e6:82:74:32:9a:a6:c1:a5:
6e:38:81:d2:c0:62:ca:92:ad:fd:02:16:d2:e7:0e:a3:97:d2:
e3:6b:2c:07:21:13:cf:3b:63:d8:b3:cc:0a:b9:38:1b:20:85:
fd:87:7e:8e:3f:73:5d:89:26:df:4d:14:15:5f:60:fb:f6:50:
47:a1:06:c8:4a:30:ed:c3:66:fc:5e:e3:62:91:92:05:ff:55:
dc:c1:79:8c:28:b8:d9:2f:8d:a1:18:61:1b:f6:b6:dd:43:02:
de:60:8a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiJyuIlVQ3MgSWQLsQay6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi
MGEwYjcwHhcNMjYwNzI4MjEwMTQ3WhcNMjYwNzI5MjEwMTQ3WjAzMTEwLwYDVQQD
EyhjMjUzZjY2NWNhNWMwZTZmYmMzNDNmMGEwMzE3Zjg5OWY2NDY0Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG9RSsfXS/lO2CnmteZgFrHtPErg
SmLBbQjBVIg6Foz9hIBXCW7gW9o5ZddkgaOGE98o20uBVvJP25g2QwN8Qu9vOOl6
BGhrPayo9hfGRxk28pH3NmSVC3bToz4EWjDPL0Q7zQZQ5n054J8/w02EPKZfRUzg
TF/tTZ7jlDDXW1PjZ18U2VzQD692KrazR1gxSDVG/QqWB03fSy0Mg5Cg/8PTtTfb
hfJ41FKc7oaPuY/KcwHFNGV3UlndRU/0b2aJZVfiKa9xgYOdom9XcHI5SkpN13jn
fpGPGjJiiwJw5dgzvyUo8LsGS8wwgu5XbqjFzNkqQkFitH16TUbVOXu/pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJT9mXKXA5vvDQ/CgMX+Jn2RkzaMB8GA1UdIwQY
MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt
ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx
LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4L53Ogs
R23otyKucMuSPzeG1dVdt2Ba40Lg5PSL1+DzR5Je7100n3MZidV2cU6tB9iifbtJ
8QWGVq/+d0FEoWg8RQ6YLGKJsnHo4gAaignjlK16JCv5M2+3qefrl86RI0zNTs4Z
gzpLAxqVAY4bmF1+MET1KbsW8e+gT93fELaIDH8wpEhYeaqGKIgA9jNwm5JoYu4o
1FltFeaCdDKapsGlbjiB0sBiypKt/QIW0ucOo5fS42ssByETzztj2LPMCrk4GyCF
/Yd+jj9zXYkm300UFV9g+/ZQR6EGyEow7cNm/F7jYpGSBf9V3MF5jCi42S+NoRhh
G/a23UMC3mCKFQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:40:45 2026 by rpki-client