Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: ImNcJ9F9WEhhv8ntV7JxyTUNSlM+ECze1RLGhcjoL+s=
Subject key identifier: 2E:18:8C:B4:18:18:14:73:25:6D:96:A0:49:35:9C:6C:7D:1A:46:09
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019EBFFF51BA3371B692DD4BD62DF11D9737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0DDB
Signing time: Sat 13 Jun 2026 08:00:41 +0000
Manifest this update: Sat 13 Jun 2026 08:00:41 +0000
Manifest next update: Sun 14 Jun 2026 08:00:41 +0000
Files and hashes: 1: KrihM0-M-9dbOhmKaKlJsVRPjLE.asa (hash: 1tpnATyjLiEC8Y1JllxOdUuP2TfvewFCh8KSgFzAI/Q=)
2: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: HcaJnv6TedqXaaT1ut5RfFC3JmMsK0nloVfY9JawUnQ=)
3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:51:ba:33:71:b6:92:dd:4b:d6:2d:f1:1d:97:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Jun 13 08:00:41 2026 GMT
Not After : Jun 14 08:00:41 2026 GMT
Subject: CN=2e188cb418181473256d96a049359c6c7d1a4609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:22:18:10:73:2e:a6:f6:61:a6:78:3b:b3:
61:4e:2f:49:4e:59:0e:b9:7f:69:b4:07:dd:7e:3f:
f2:c3:03:28:db:ca:2f:b5:b9:16:09:14:02:7a:d1:
9f:1a:be:31:7b:00:80:66:2d:a4:e5:f1:13:bc:8b:
7a:de:f8:1e:0e:93:23:43:18:b6:00:e6:4f:61:55:
3e:c4:3d:b5:0f:05:74:05:01:38:28:e7:f5:0d:5c:
1b:34:03:d8:f4:cb:2c:98:5a:c5:36:20:c9:6a:6c:
3c:4d:ec:9d:d5:4a:ee:d0:a0:f7:f6:26:49:e6:84:
8b:1c:21:da:ba:08:53:65:a1:3f:92:a8:2f:d2:9c:
c9:98:3d:1a:6b:6c:1b:8e:dc:d4:29:7a:75:a8:28:
e3:03:be:67:42:cd:84:ff:60:03:4b:7b:fe:99:8d:
a9:27:5f:a0:23:e5:e3:4e:d9:ed:ae:43:d4:0a:e4:
94:db:9b:44:04:6f:ce:48:e8:1c:46:8f:92:9d:88:
ba:a2:49:2c:fc:6c:fb:ae:1c:66:7a:df:5c:83:4f:
de:9b:45:71:72:91:e4:5e:5e:24:72:87:d3:df:c9:
af:77:3e:c4:91:03:fa:f8:3e:96:9f:ef:c3:12:62:
7b:4f:dc:42:07:36:11:be:29:a4:bb:cd:70:ed:c0:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:18:8C:B4:18:18:14:73:25:6D:96:A0:49:35:9C:6C:7D:1A:46:09
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:37:4e:fb:3b:5e:5c:41:ac:34:3d:dd:78:2f:d7:e5:fd:14:
d2:f6:4c:ff:e6:06:88:a9:54:d6:51:f7:6c:d2:1f:b3:03:8d:
cd:6c:23:b9:87:07:a3:2b:ab:ad:46:60:91:cb:12:42:9c:65:
46:a3:72:7c:87:54:c1:43:0f:ea:51:24:57:33:9c:29:71:d8:
74:b6:11:1a:a3:cc:ab:6a:e3:26:fa:0f:b3:e6:ca:4a:0c:58:
90:32:cc:e2:c3:1c:17:18:c6:97:ca:b0:e8:3a:c6:7d:79:c4:
ec:45:f5:78:24:15:19:4d:b9:ad:42:32:c3:e6:81:99:10:70:
6c:ab:10:8f:32:67:bd:2e:23:24:3f:f9:dd:0e:f4:7d:dc:b6:
7a:eb:a9:ac:2d:7c:e8:75:43:c4:dd:e4:e2:91:ed:ae:68:b6:
fa:c7:ef:b8:83:dc:c7:a8:66:36:eb:bb:92:26:06:58:0d:ae:
81:40:e3:9d:25:82:bd:a7:47:02:be:cb:80:3d:74:5b:3a:05:
b8:e1:48:07:ac:1e:8a:6c:1f:06:4b:19:07:f2:b5:45:59:b4:
2b:fa:6d:53:61:19:83:a3:fa:f6:28:9b:10:5e:3b:f4:24:d8:
12:2d:d9:2e:f8:18:f3:fb:78:cd:4e:1c:df:b1:46:12:94:bd:
01:4c:d0:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//1G6M3G2kt1L1i3xHZc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OWE3NDBmNGJjMzBhMmMwNGNkY2IzMzQ0YWYwZDZhMmQw
NWE0ODEwHhcNMjYwNjEzMDgwMDQxWhcNMjYwNjE0MDgwMDQxWjAzMTEwLwYDVQQD
EygyZTE4OGNiNDE4MTgxNDczMjU2ZDk2YTA0OTM1OWM2YzdkMWE0NjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn8iGBBzLqb2YaZ4O7NhTi9JTlkO
uX9ptAfdfj/ywwMo28ovtbkWCRQCetGfGr4xewCAZi2k5fETvIt63vgeDpMjQxi2
AOZPYVU+xD21DwV0BQE4KOf1DVwbNAPY9MssmFrFNiDJamw8Teyd1Uru0KD39iZJ
5oSLHCHaughTZaE/kqgv0pzJmD0aa2wbjtzUKXp1qCjjA75nQs2E/2ADS3v+mY2p
J1+gI+XjTtntrkPUCuSU25tEBG/OSOgcRo+SnYi6okks/Gz7rhxmet9cg0/em0Vx
cpHkXl4kcofT38mvdz7EkQP6+D6Wn+/DEmJ7T9xCBzYRvimku81w7cCAKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4YjLQYGBRzJW2WoEk1nGx9GkYJMB8GA1UdIwQY
MBaAFFmadA9LwwosBM3LM0SvDWotBaSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYt
OTEwMmMzYzA1MTM4LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYtOTEwMmMzYzA1MTM4
LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTdO+zte
XEGsND3deC/X5f0U0vZM/+YGiKlU1lH3bNIfswONzWwjuYcHoyurrUZgkcsSQpxl
RqNyfIdUwUMP6lEkVzOcKXHYdLYRGqPMq2rjJvoPs+bKSgxYkDLM4sMcFxjGl8qw
6DrGfXnE7EX1eCQVGU25rUIyw+aBmRBwbKsQjzJnvS4jJD/53Q70fdy2euuprC18
6HVDxN3k4pHtrmi2+sfvuIPcx6hmNuu7kiYGWA2ugUDjnSWCvadHAr7LgD10WzoF
uOFIB6weimwfBksZB/K1RVm0K/ptU2EZg6P69iibEF479CTYEi3ZLvgY8/t4zU4c
37FGEpS9AUzQ9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:42:26 2026 by rpki-client