
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: hWVg4S6l2E3A92R4nfUG7VeMSgxHYGsdCcfjUVRknos=
Subject key identifier: 3E:A4:9E:94:B4:6D:15:3A:EB:0B:60:8E:41:5A:DA:3B:BD:88:97:AD
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01A0C47C607BD43912DF24B4B2B64E039749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 14C6
Signing time: Mon 21 Sep 2026 15:01:20 +0000
Manifest this update: Mon 21 Sep 2026 15:01:20 +0000
Manifest next update: Tue 22 Sep 2026 15:01:20 +0000
Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=)
2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: HkCtYarT0qncUHJUeuQJdS0OL1w/kc/y4tMUAmFsxRk=)
3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:60:7b:d4:39:12:df:24:b4:b2:b6:4e:03:97:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Sep 21 15:01:20 2026 GMT
Not After : Sep 22 15:01:20 2026 GMT
Subject: CN=3ea49e94b46d153aeb0b608e415ada3bbd8897ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:1b:af:50:bd:66:7c:e2:00:6a:51:c7:6c:
7e:db:7c:16:25:7d:66:37:07:e5:b5:a3:d8:02:04:
0d:10:dd:c1:c4:d7:95:90:fa:ff:da:a7:5a:2b:68:
d1:49:5b:1b:57:96:b5:76:94:ca:29:bc:9b:5e:9c:
b2:a7:22:92:ba:c4:ef:4d:89:f4:30:13:1d:da:71:
37:53:a3:91:79:80:7b:e7:ea:65:f7:09:24:52:95:
f3:b7:3b:36:7e:f3:77:dc:a8:cc:77:32:7b:46:72:
86:55:62:cc:64:7c:73:cc:2a:2b:5c:a5:39:e7:55:
e7:18:59:52:9d:f3:2e:da:8e:fc:37:73:2c:c9:04:
91:2e:2a:d9:07:e0:51:1f:b6:4b:f8:18:81:3b:7b:
6b:02:34:18:45:8a:7e:ff:93:43:e0:24:00:50:86:
5c:95:b6:84:66:2e:b2:a7:af:67:9f:4c:8b:7f:a2:
50:4e:af:1b:c3:ce:c8:73:1a:9f:a5:5d:25:16:4e:
fd:73:d9:3e:b1:ef:3d:f0:19:4c:b8:82:62:ff:71:
09:9a:32:e5:f0:c2:2a:11:31:e5:69:2c:b9:0c:57:
12:81:69:d9:8a:b7:ed:97:f9:0a:0e:6f:7c:0c:c9:
30:e6:8f:b3:c8:82:53:c3:23:2d:0f:96:56:68:ea:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:9E:94:B4:6D:15:3A:EB:0B:60:8E:41:5A:DA:3B:BD:88:97:AD
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:83:4e:76:cd:f8:2b:db:11:4b:b9:6b:16:74:64:56:8f:
eb:30:94:a0:00:7a:18:67:71:f4:ea:ac:74:be:ea:50:ed:06:
0e:f8:92:fb:d5:d8:31:2b:73:6a:e7:d4:91:41:c9:e0:3e:86:
b2:6b:51:23:1f:6d:01:a7:c6:3c:0d:19:75:8f:1c:46:46:cd:
5c:a9:f5:16:b0:8f:49:07:ac:d5:55:fc:d0:69:06:3e:91:3e:
d4:4c:ad:da:24:9c:36:23:ed:cc:6a:65:f7:6b:af:25:1c:2c:
05:e2:bd:a8:6e:dc:1a:7f:f5:5e:2f:a0:28:38:17:98:16:c4:
27:6d:ab:4b:33:13:37:ee:37:e8:07:df:3f:9d:39:92:85:a7:
86:44:7f:60:e3:63:b2:70:d0:74:58:33:4a:ed:ed:f2:ee:54:
0e:0a:5a:b4:af:18:45:0f:e5:fa:ea:2a:4a:91:73:78:77:e8:
27:30:e6:1c:17:63:f2:b3:7f:15:45:2a:63:8b:33:cb:e1:c1:
df:2c:99:53:68:2a:03:47:ec:31:3f:1b:c2:6b:ac:8a:e2:94:
99:5b:46:a2:d4:09:e9:10:d3:e3:8e:98:cf:06:7e:f5:c7:8a:
1c:11:8d:14:a2:ad:55:22:44:11:67:78:16:f0:af:88:e9:2c:
12:fe:5b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfGB71DkS3yS0srZOA5dJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ODc3NzIwYzAxNDY4ODQ5NGVhNjkxMGM4MzQ3NGRlMTNl
OTk4MDIwHhcNMjYwOTIxMTUwMTIwWhcNMjYwOTIyMTUwMTIwWjAzMTEwLwYDVQQD
EygzZWE0OWU5NGI0NmQxNTNhZWIwYjYwOGU0MTVhZGEzYmJkODg5N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIcbr1C9ZnziAGpRx2x+23wWJX1m
NwfltaPYAgQNEN3BxNeVkPr/2qdaK2jRSVsbV5a1dpTKKbybXpyypyKSusTvTYn0
MBMd2nE3U6OReYB75+pl9wkkUpXztzs2fvN33KjMdzJ7RnKGVWLMZHxzzCorXKU5
51XnGFlSnfMu2o78N3MsyQSRLirZB+BRH7ZL+BiBO3trAjQYRYp+/5ND4CQAUIZc
lbaEZi6yp69nn0yLf6JQTq8bw87IcxqfpV0lFk79c9k+se898BlMuIJi/3EJmjLl
8MIqETHlaSy5DFcSgWnZirftl/kKDm98DMkw5o+zyIJTwyMtD5ZWaOq3LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6knpS0bRU66wtgjkFa2ju9iJetMB8GA1UdIwQY
MBaAFFmHdyDAFGiElOppEMg0dN4T6ZgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmIt
NzRjY2Q4MjQwYmFkLzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmItNzRjY2Q4MjQwYmFk
LzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdODTnbN
+CvbEUu5axZ0ZFaP6zCUoAB6GGdx9OqsdL7qUO0GDviS+9XYMStzaufUkUHJ4D6G
smtRIx9tAafGPA0ZdY8cRkbNXKn1FrCPSQes1VX80GkGPpE+1Eyt2iScNiPtzGpl
92uvJRwsBeK9qG7cGn/1Xi+gKDgXmBbEJ22rSzMTN+436AffP505koWnhkR/YONj
snDQdFgzSu3t8u5UDgpatK8YRQ/l+uoqSpFzeHfoJzDmHBdj8rN/FUUqY4szy+HB
3yyZU2gqA0fsMT8bwmusiuKUmVtGotQJ6RDT446YzwZ+9ceKHBGNFKKtVSJEEWd4
FvCviOksEv5btg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:20:53 2026 by rpki-client