Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: FRrCXdLTiUIwSW5iqAzJqibIb/R5bOzSVVbMYB753tw=
Subject key identifier: 12:ED:A4:71:78:E7:7A:98:62:83:02:E0:34:98:FF:12:07:D9:5F:35
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 01A1366D8D548DDB3476518261DA286023EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 18:01:51 +0000
Manifest this update: Tue 13 Oct 2026 18:01:51 +0000
Manifest next update: Wed 14 Oct 2026 18:01:51 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: 6Noeg5udjuYCzw/i/CYfA1roc5y3+wecvkBrzmYgjvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6d:8d:54:8d:db:34:76:51:82:61:da:28:60:23:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Oct 13 18:01:51 2026 GMT
Not After : Oct 14 18:01:51 2026 GMT
Subject: CN=12eda47178e77a98628302e03498ff1207d95f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:ff:3d:f7:f4:4d:ed:6c:9e:53:e8:26:f4:
80:a0:10:6e:fe:9a:f3:a2:97:b0:03:46:5e:04:a5:
bf:27:75:76:ca:61:ff:75:f4:b1:a5:0a:73:3f:8f:
07:7e:5e:67:bb:bf:2d:c9:3e:5a:dd:65:e5:67:b8:
fc:ce:4d:63:aa:03:cb:a6:3e:8e:02:90:71:5d:27:
e3:16:e5:a3:26:8c:49:05:f6:b5:57:8b:a0:3e:ea:
a8:47:37:27:99:34:f2:24:a3:bd:af:13:f3:dc:7b:
b5:bd:dc:29:d5:25:46:7a:71:2b:c3:67:09:18:d6:
08:d9:f7:24:0e:5a:28:27:b4:9c:e0:bc:dc:48:df:
d0:fb:03:db:8d:a3:9c:74:35:27:2b:1e:d1:3b:14:
75:bb:d3:a3:9f:7c:04:4c:b3:a8:48:70:0f:9d:70:
58:df:d9:76:4e:4e:85:a6:13:d3:d7:b9:c8:73:4f:
2c:8f:58:80:c5:85:dc:ba:1e:47:f4:0c:03:e0:d8:
ae:0e:00:1b:35:9e:99:e0:1e:bf:d4:9e:2b:8c:be:
97:b7:e9:07:44:34:81:0d:b2:1e:69:89:87:d5:a1:
2f:8e:b1:49:8c:28:35:47:a2:6e:b1:19:2e:20:e0:
00:99:d1:9a:43:ae:7e:02:30:95:85:8e:c7:6d:46:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:ED:A4:71:78:E7:7A:98:62:83:02:E0:34:98:FF:12:07:D9:5F:35
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3a:41:9e:7d:74:29:68:1c:77:79:e4:be:ac:64:8c:84:ff:
3c:8a:5d:4c:5b:06:d0:ca:63:d8:0e:22:10:a2:8b:69:9c:9d:
8f:b5:1b:ae:66:63:35:4e:13:a2:4d:a2:d6:50:dc:84:ee:0e:
b3:95:63:c2:7e:cf:aa:34:68:de:cb:6b:8f:50:bd:16:6e:78:
f0:2c:69:42:72:4b:e8:c2:20:0b:03:50:e2:1e:fb:a4:52:b2:
0a:4d:8d:16:4b:42:8b:c1:4f:7a:da:79:4e:c7:c4:18:64:36:
0e:31:cc:47:f4:cc:ac:c5:b9:b5:29:61:ea:0f:16:fe:26:88:
90:e1:27:da:2f:02:61:bc:62:21:05:d0:f5:7d:f3:d3:6e:89:
b5:f2:0c:ef:84:ee:25:76:e2:13:cf:0e:a7:e6:dc:7a:41:f4:
f1:4b:2c:37:21:61:f9:e0:d3:d7:80:d9:c2:13:3f:cc:1b:f4:
2e:e5:77:e3:7b:af:6c:e5:fe:ee:f2:a3:f6:30:07:b4:fe:5c:
b3:b5:41:74:f4:61:8d:2a:f7:b9:25:ac:ac:ff:8b:96:72:a8:
b7:14:28:7c:76:21:ee:e6:6a:cc:67:f0:8f:6e:01:e4:be:80:
45:3c:9f:2e:1d:8e:25:11:2a:dc:c3:c1:9c:5b:bd:ab:06:0a:
88:d0:c1:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2bY1Ujds0dlGCYdooYCPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl
NTA3OTkwHhcNMjYxMDEzMTgwMTUxWhcNMjYxMDE0MTgwMTUxWjAzMTEwLwYDVQQD
EygxMmVkYTQ3MTc4ZTc3YTk4NjI4MzAyZTAzNDk4ZmYxMjA3ZDk1ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pP/Pff0Te1snlPoJvSAoBBu/prz
opewA0ZeBKW/J3V2ymH/dfSxpQpzP48Hfl5nu78tyT5a3WXlZ7j8zk1jqgPLpj6O
ApBxXSfjFuWjJoxJBfa1V4ugPuqoRzcnmTTyJKO9rxPz3Hu1vdwp1SVGenErw2cJ
GNYI2fckDlooJ7Sc4LzcSN/Q+wPbjaOcdDUnKx7ROxR1u9Ojn3wETLOoSHAPnXBY
39l2Tk6FphPT17nIc08sj1iAxYXcuh5H9AwD4NiuDgAbNZ6Z4B6/1J4rjL6Xt+kH
RDSBDbIeaYmH1aEvjrFJjCg1R6JusRkuIOAAmdGaQ65+AjCVhY7HbUafIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLtpHF453qYYoMC4DSY/xIH2V81MB8GA1UdIwQY
MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt
MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm
LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTpBnn10
KWgcd3nkvqxkjIT/PIpdTFsG0Mpj2A4iEKKLaZydj7UbrmZjNU4Tok2i1lDchO4O
s5Vjwn7PqjRo3strj1C9Fm548CxpQnJL6MIgCwNQ4h77pFKyCk2NFktCi8FPetp5
TsfEGGQ2DjHMR/TMrMW5tSlh6g8W/iaIkOEn2i8CYbxiIQXQ9X3z026JtfIM74Tu
JXbiE88Op+bcekH08UssNyFh+eDT14DZwhM/zBv0LuV343uvbOX+7vKj9jAHtP5c
s7VBdPRhjSr3uSWsrP+LlnKotxQofHYh7uZqzGfwj24B5L6ARTyfLh2OJREq3MPB
nFu9qwYKiNDBBA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:58:35 2026 by rpki-client