Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
File: WvxA0kCVgUP3KaGOLDVOucQ_E68.mft (raw, json)
Hash identifier: LznDhJRg9XaqVmpQgjQwuL+FzTWa6+8Av1kmbXZYKKw=
Subject key identifier: CE:D0:96:C9:CE:82:AC:14:48:46:B3:AC:B2:3A:EF:D1:BC:0A:D1:A7
Authority key identifier: 5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
Certificate issuer: /CN=5afc40d240958143f729a18e2c354eb9c43f13af
Certificate serial: 019FABD136D2CFEC221EB03F8F5BEB2FDCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
Manifest number: 4F
Signing time: Wed 29 Jul 2026 03:00:42 +0000
Manifest this update: Wed 29 Jul 2026 03:00:42 +0000
Manifest next update: Thu 30 Jul 2026 03:00:42 +0000
Files and hashes: 1: FRfo6l0O44AlCNnhnhmuDvpHTzg.roa (hash: 7i6dHellWiAp50OL94RpcYOJ5rAib14ynKrewSzenKY=)
2: WvxA0kCVgUP3KaGOLDVOucQ_E68.crl (hash: AvzKJRQeEK9lkC2O7EmCGpiTv8rncMMEUebOFF2c95Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:36:d2:cf:ec:22:1e:b0:3f:8f:5b:eb:2f:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc40d240958143f729a18e2c354eb9c43f13af
Validity
Not Before: Jul 29 03:00:42 2026 GMT
Not After : Jul 30 03:00:42 2026 GMT
Subject: CN=ced096c9ce82ac144846b3acb23aefd1bc0ad1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:f0:3f:f4:cf:a2:6c:c1:15:30:1c:09:67:
b6:5b:48:99:65:be:45:bf:e8:70:a6:a8:4c:36:16:
3a:56:91:b5:58:f7:4a:ce:8e:5e:55:a7:23:b6:ce:
44:f8:f4:4c:97:29:bb:59:52:f9:61:3e:d2:5c:dc:
30:7c:73:a3:d7:77:ba:08:90:f7:29:be:c4:bf:46:
55:d5:ed:48:4c:b5:e1:7d:e4:e3:ac:2c:4d:e1:18:
9b:23:84:60:d0:1c:4a:40:be:f0:8c:08:96:51:e6:
a0:99:9b:d0:33:07:cf:01:c3:86:0c:97:3c:d7:d9:
b7:b5:1c:5f:ec:31:5a:14:2b:7a:11:be:11:f5:d6:
7d:e1:29:62:80:bd:f8:30:ee:88:c5:f6:78:57:8d:
89:3b:c4:80:62:60:00:de:5f:de:51:b0:c8:df:a4:
af:90:ac:94:7a:71:a7:01:d4:23:cb:4b:40:bf:1a:
dc:cd:cd:41:37:07:4b:e6:c2:63:88:e8:8f:d2:97:
c8:02:08:3c:3e:dd:42:9b:04:0f:1b:6f:f0:05:60:
89:1e:c9:f4:35:d2:11:20:e3:fa:9e:a1:9b:c5:ea:
19:5e:ed:17:cf:5b:ee:59:99:74:21:90:b7:b4:bb:
69:18:bc:98:3f:3e:06:78:8b:72:92:86:48:59:d6:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D0:96:C9:CE:82:AC:14:48:46:B3:AC:B2:3A:EF:D1:BC:0A:D1:A7
X509v3 Authority Key Identifier:
keyid:5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1c:95:4d:e4:6b:61:3d:91:68:aa:38:fb:87:07:9c:78:20:
98:ea:c0:69:b4:3c:87:66:e3:2c:35:a0:8f:60:ad:ef:f8:7e:
c6:a0:ac:34:7a:b8:7b:4d:2d:04:6a:0d:d4:69:79:a4:ea:53:
f6:ef:19:7b:36:34:5c:d3:7a:64:02:05:54:9a:8d:17:22:80:
cb:50:57:b0:2d:e3:40:c0:c5:dc:9a:b5:fa:b1:1d:de:86:f0:
cf:c5:05:36:99:bb:ea:fd:f6:59:98:4c:73:7e:eb:ed:3e:97:
20:7b:d8:54:c4:c2:13:ad:79:87:e7:cb:aa:79:f9:31:e4:46:
1e:df:f5:16:90:3d:d7:e2:e0:b8:f4:5e:9a:d8:7a:3c:6c:29:
41:26:1f:55:d8:c4:a9:65:68:84:b6:b6:0e:b4:c8:f5:47:56:
30:77:25:73:56:10:15:72:bb:bd:21:bf:7e:3e:ad:6b:a3:23:
1e:9b:74:18:41:99:86:58:8c:60:23:d8:5f:c8:19:b1:9d:be:
e7:98:e0:6f:6a:c3:17:58:e8:fc:79:82:64:fb:e6:7d:33:32:
c2:9e:54:d6:36:c0:e8:c2:48:4c:6b:0e:b0:cb:83:a7:2d:85:
e2:0a:1d:1c:7c:33:b8:a9:1f:89:f1:53:a9:f5:d4:b2:be:03:
0d:13:f8:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0TbSz+wiHrA/j1vrL9ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmM0MGQyNDA5NTgxNDNmNzI5YTE4ZTJjMzU0ZWI5YzQz
ZjEzYWYwHhcNMjYwNzI5MDMwMDQyWhcNMjYwNzMwMDMwMDQyWjAzMTEwLwYDVQQD
EyhjZWQwOTZjOWNlODJhYzE0NDg0NmIzYWNiMjNhZWZkMWJjMGFkMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e/wP/TPomzBFTAcCWe2W0iZZb5F
v+hwpqhMNhY6VpG1WPdKzo5eVacjts5E+PRMlym7WVL5YT7SXNwwfHOj13e6CJD3
Kb7Ev0ZV1e1ITLXhfeTjrCxN4RibI4Rg0BxKQL7wjAiWUeagmZvQMwfPAcOGDJc8
19m3tRxf7DFaFCt6Eb4R9dZ94SligL34MO6IxfZ4V42JO8SAYmAA3l/eUbDI36Sv
kKyUenGnAdQjy0tAvxrczc1BNwdL5sJjiOiP0pfIAgg8Pt1CmwQPG2/wBWCJHsn0
NdIRIOP6nqGbxeoZXu0Xz1vuWZl0IZC3tLtpGLyYPz4GeItykoZIWdZotQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7QlsnOgqwUSEazrLI679G8CtGnMB8GA1UdIwQY
MBaAFFr8QNJAlYFD9ymhjiw1TrnEPxOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Z4QTBrQ1ZnVVAzS2FHT0xEVk91Y1FfRTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjk4MGMtMTUyYi00MjZkLTk2NDkt
ZmU4ZDAyMTFkMThjLzEvV3Z4QTBrQ1ZnVVAzS2FHT0xEVk91Y1FfRTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Zjk4MGMtMTUyYi00MjZkLTk2NDktZmU4ZDAyMTFkMThj
LzEvV3Z4QTBrQ1ZnVVAzS2FHT0xEVk91Y1FfRTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchyVTeRr
YT2RaKo4+4cHnHggmOrAabQ8h2bjLDWgj2Ct7/h+xqCsNHq4e00tBGoN1Gl5pOpT
9u8ZezY0XNN6ZAIFVJqNFyKAy1BXsC3jQMDF3Jq1+rEd3obwz8UFNpm76v32WZhM
c37r7T6XIHvYVMTCE615h+fLqnn5MeRGHt/1FpA91+LguPRemth6PGwpQSYfVdjE
qWVohLa2DrTI9UdWMHclc1YQFXK7vSG/fj6ta6MjHpt0GEGZhliMYCPYX8gZsZ2+
55jgb2rDF1jo/HmCZPvmfTMywp5U1jbA6MJITGsOsMuDpy2F4godHHwzuKkfifFT
qfXUsr4DDRP4Jg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:26:51 2026 by rpki-client