Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: wi1GHLob+hwWrNx84bVKdzNdPcuLdpoCnF/a3cyFgIU=
Subject key identifier: 3C:CD:72:8B:8A:30:0B:CB:BC:11:DB:2A:66:84:95:34:37:44:22:17
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019FAA887FBF60AACE76759733780CD7FD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0F2D
Signing time: Tue 28 Jul 2026 21:01:40 +0000
Manifest this update: Tue 28 Jul 2026 21:01:40 +0000
Manifest next update: Wed 29 Jul 2026 21:01:40 +0000
Files and hashes: 1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: JWzKk2bUHO0p5MtAYIvQq24ZZQOEETvRXYxE4D/z8p8=)
3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:7f:bf:60:aa:ce:76:75:97:33:78:0c:d7:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Jul 28 21:01:40 2026 GMT
Not After : Jul 29 21:01:40 2026 GMT
Subject: CN=3ccd728b8a300bcbbc11db2a6684953437442217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:cc:6b:ef:06:60:20:3a:51:42:53:c1:c2:
a5:fa:2d:7a:06:b5:74:ff:63:af:74:17:e6:4c:9d:
08:59:f2:2c:fa:86:71:92:62:3e:39:3f:e0:1a:d9:
41:dd:db:0b:a9:1e:f3:b2:a0:8b:0e:4e:29:00:92:
66:ed:45:91:07:df:88:0d:f2:68:cc:3f:17:2c:73:
e1:ef:5e:47:73:7f:3f:20:15:08:d0:18:ab:fc:19:
f1:fe:7f:76:c9:0b:82:de:ab:0d:b6:a3:b9:7d:23:
7d:a4:08:a7:dc:f1:8c:7a:ca:d3:a5:29:fa:00:95:
68:ae:32:c0:67:99:ee:7e:88:b2:92:83:06:4a:1f:
34:92:a2:19:89:10:60:9c:50:c5:57:9d:39:31:ee:
09:25:3d:b1:83:06:27:10:ec:a8:01:f5:82:91:2c:
fa:f3:d2:8b:b4:0f:bb:bd:cf:8d:c1:6b:79:4c:95:
5e:78:a1:1d:fb:de:be:ba:94:47:e9:ea:a6:17:b8:
48:2a:34:9b:a0:cd:04:4a:c1:1a:60:72:37:06:16:
e7:65:46:d8:a9:06:18:6d:f5:a9:03:01:c9:2a:12:
3b:9f:97:cc:fc:f8:bd:c4:dd:2b:19:38:bc:3f:f9:
50:9f:46:c9:3f:a3:0c:08:94:d8:d3:83:72:5c:bd:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CD:72:8B:8A:30:0B:CB:BC:11:DB:2A:66:84:95:34:37:44:22:17
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:19:9f:cb:74:45:31:9f:1c:79:f2:bc:00:ec:81:20:92:ac:
10:de:8b:98:b7:2b:0e:3e:92:32:ab:95:c3:33:69:9d:e4:ee:
e5:81:95:eb:fa:e6:11:a8:ae:ee:46:45:24:98:26:6e:f2:7e:
a0:d4:7e:c5:9d:9b:d7:c3:7e:b9:e9:ec:f4:d7:07:80:fd:33:
29:83:9b:66:8d:ea:e3:ab:5a:2a:19:9d:6e:fc:c5:17:bf:f7:
91:6f:cb:f3:32:6d:b0:bf:92:1b:77:8e:fe:10:7d:aa:0b:27:
0d:e6:68:f6:66:f2:1b:de:fe:b0:0c:a9:be:3a:c3:3a:19:24:
30:67:76:48:08:e2:e0:11:4b:23:cf:5f:be:c4:83:2e:21:6d:
37:23:ed:81:d6:8f:74:87:12:a8:da:05:8e:1f:1a:32:96:4c:
7b:d2:81:e5:c7:2f:30:90:20:de:cf:45:e2:6a:89:78:ec:aa:
42:30:7d:ba:fb:e5:09:69:a3:db:03:22:41:62:de:34:72:5c:
01:8d:1e:59:80:67:f9:f9:a3:58:03:7e:56:85:fa:fe:74:33:
8a:a9:f0:0a:44:3b:e2:38:77:5a:51:c3:28:18:01:96:13:63:
d4:4f:83:20:0d:42:03:54:bd:db:63:b0:e8:8f:40:a2:18:db:
b6:41:cf:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiH+/YKrOdnWXM3gM1/0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz
NWZiZjEwHhcNMjYwNzI4MjEwMTQwWhcNMjYwNzI5MjEwMTQwWjAzMTEwLwYDVQQD
EygzY2NkNzI4YjhhMzAwYmNiYmMxMWRiMmE2Njg0OTUzNDM3NDQyMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dvMa+8GYCA6UUJTwcKl+i16BrV0
/2OvdBfmTJ0IWfIs+oZxkmI+OT/gGtlB3dsLqR7zsqCLDk4pAJJm7UWRB9+IDfJo
zD8XLHPh715Hc38/IBUI0Bir/Bnx/n92yQuC3qsNtqO5fSN9pAin3PGMesrTpSn6
AJVorjLAZ5nufoiykoMGSh80kqIZiRBgnFDFV505Me4JJT2xgwYnEOyoAfWCkSz6
89KLtA+7vc+NwWt5TJVeeKEd+96+upRH6eqmF7hIKjSboM0ESsEaYHI3BhbnZUbY
qQYYbfWpAwHJKhI7n5fM/Pi9xN0rGTi8P/lQn0bJP6MMCJTY04NyXL3KKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzNcouKMAvLvBHbKmaElTQ3RCIXMB8GA1UdIwQY
MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt
NmJhZjMwMDc5MDVjLzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj
LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhmfy3RF
MZ8cefK8AOyBIJKsEN6LmLcrDj6SMquVwzNpneTu5YGV6/rmEaiu7kZFJJgmbvJ+
oNR+xZ2b18N+uens9NcHgP0zKYObZo3q46taKhmdbvzFF7/3kW/L8zJtsL+SG3eO
/hB9qgsnDeZo9mbyG97+sAypvjrDOhkkMGd2SAji4BFLI89fvsSDLiFtNyPtgdaP
dIcSqNoFjh8aMpZMe9KB5ccvMJAg3s9F4mqJeOyqQjB9uvvlCWmj2wMiQWLeNHJc
AY0eWYBn+fmjWAN+VoX6/nQziqnwCkQ74jh3WlHDKBgBlhNj1E+DIA1CA1S922Ow
6I9AohjbtkHPJA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:51 2026 by rpki-client