Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: 1BBhuRJeMcOumLffPxOJSkc0ojUYcLZEEJObG3GtY1A=
Subject key identifier: 9B:F6:AE:8B:C1:91:5A:54:0C:27:2B:68:67:4A:5F:09:6C:46:78:0A
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019FABD1BC28E9058A6197B76907518190F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0BE4
Signing time: Wed 29 Jul 2026 03:01:16 +0000
Manifest this update: Wed 29 Jul 2026 03:01:16 +0000
Manifest next update: Thu 30 Jul 2026 03:01:16 +0000
Files and hashes: 1: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: kY+u4v+7cNxlBpehvmu+hj7hOGxlqpGgnToXXQfrLX0=)
3: wksYSx05kpG2_m1bA5uuiXnqKFc.roa (hash: k+uDuqacR/yRBvtSsf1I4NfjvCtYBj4iQtFjb6MXywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:bc:28:e9:05:8a:61:97:b7:69:07:51:81:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Jul 29 03:01:16 2026 GMT
Not After : Jul 30 03:01:16 2026 GMT
Subject: CN=9bf6ae8bc1915a540c272b68674a5f096c46780a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:0f:8f:a8:98:c1:5e:2c:5c:2f:3c:01:fc:
09:84:96:90:3b:8e:20:cb:17:91:ba:29:81:1c:54:
89:55:d2:33:f2:1d:a1:ca:43:60:46:f8:e3:12:95:
c1:43:d2:da:c3:fd:c8:42:da:19:53:43:fd:29:70:
a3:8f:b4:ff:44:8b:c7:73:b5:69:fb:43:cf:d3:c6:
70:07:0a:bb:5b:e3:51:92:95:64:83:aa:b8:7e:4b:
38:ac:35:9b:ec:6d:29:a8:f8:1d:1d:5f:70:ff:8e:
2d:96:31:85:36:2e:de:32:5c:f0:98:e7:d0:b6:d2:
14:54:da:52:99:a2:77:c6:88:79:4f:68:68:14:0d:
30:60:df:74:0e:8b:2f:e9:bb:0e:85:85:50:28:8d:
20:71:55:26:07:b7:ec:71:f8:3c:b9:57:0e:2e:6f:
0d:43:45:24:57:87:8b:c3:59:fa:2e:2c:58:37:03:
1c:0a:c5:8f:93:7c:15:3b:b5:1e:51:1c:fd:d2:80:
9c:c9:40:81:77:bb:aa:d0:e5:d8:8d:3d:f2:f4:5e:
7f:9b:5f:0d:a5:de:42:1b:74:12:64:b5:5e:96:83:
9a:80:0e:76:95:03:73:0c:62:b7:aa:6a:5a:6e:2c:
9d:e5:54:58:d6:20:2b:a4:3c:f7:07:9a:e7:6a:04:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F6:AE:8B:C1:91:5A:54:0C:27:2B:68:67:4A:5F:09:6C:46:78:0A
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5c:ec:b4:10:5d:0f:ac:92:27:35:34:d2:f4:99:0d:9c:08:
a1:cf:a7:d2:b3:7d:ff:fa:1e:eb:29:d3:ee:56:3d:c9:27:6d:
a1:ff:02:9e:29:93:4e:8d:9e:33:14:b2:11:f0:b4:4c:c9:12:
0e:97:0c:45:58:ff:bb:97:be:7e:57:af:51:b7:a9:22:1d:92:
07:f7:7d:f6:f1:33:42:65:51:5c:d8:6b:a8:63:13:ed:72:5a:
15:46:b6:1d:99:71:79:00:70:8f:7d:3b:72:76:e3:de:1d:80:
d0:87:c6:10:fc:7c:a7:0f:dc:2a:de:8b:81:0c:3f:2f:10:ac:
62:3c:26:70:45:6a:e7:da:89:d7:77:83:ce:0b:43:f7:d2:5c:
59:4e:47:31:ea:77:14:d6:44:6b:9f:c9:6d:dc:55:6b:49:e5:
55:3c:d6:73:a7:c4:f5:c4:80:c1:b5:c6:57:82:c2:4f:47:e1:
2e:de:14:ec:c1:18:b5:35:b4:cc:45:7e:4c:b6:d8:53:ba:2d:
94:b0:ed:17:90:d8:3f:5c:94:24:4e:6f:69:fd:39:17:ba:b1:
46:e6:6d:6e:cf:e7:43:05:0b:91:91:0d:c7:cc:4e:2b:f6:39:
41:80:d1:21:d5:48:80:92:36:08:71:e7:ef:12:1d:49:e5:e4:
2d:38:be:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0bwo6QWKYZe3aQdRgZD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl
YTYzYjUwHhcNMjYwNzI5MDMwMTE2WhcNMjYwNzMwMDMwMTE2WjAzMTEwLwYDVQQD
Eyg5YmY2YWU4YmMxOTE1YTU0MGMyNzJiNjg2NzRhNWYwOTZjNDY3ODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseEPj6iYwV4sXC88AfwJhJaQO44g
yxeRuimBHFSJVdIz8h2hykNgRvjjEpXBQ9Law/3IQtoZU0P9KXCjj7T/RIvHc7Vp
+0PP08ZwBwq7W+NRkpVkg6q4fks4rDWb7G0pqPgdHV9w/44tljGFNi7eMlzwmOfQ
ttIUVNpSmaJ3xoh5T2hoFA0wYN90Dosv6bsOhYVQKI0gcVUmB7fscfg8uVcOLm8N
Q0UkV4eLw1n6LixYNwMcCsWPk3wVO7UeURz90oCcyUCBd7uq0OXYjT3y9F5/m18N
pd5CG3QSZLVeloOagA52lQNzDGK3qmpabiyd5VRY1iArpDz3B5rnagQe/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv2rovBkVpUDCcraGdKXwlsRngKMB8GA1UdIwQY
MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt
ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj
LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1zstBBd
D6ySJzU00vSZDZwIoc+n0rN9//oe6ynT7lY9ySdtof8CnimTTo2eMxSyEfC0TMkS
DpcMRVj/u5e+flevUbepIh2SB/d99vEzQmVRXNhrqGMT7XJaFUa2HZlxeQBwj307
cnbj3h2A0IfGEPx8pw/cKt6LgQw/LxCsYjwmcEVq59qJ13eDzgtD99JcWU5HMep3
FNZEa5/JbdxVa0nlVTzWc6fE9cSAwbXGV4LCT0fhLt4U7MEYtTW0zEV+TLbYU7ot
lLDtF5DYP1yUJE5vaf05F7qxRuZtbs/nQwULkZENx8xOK/Y5QYDRIdVIgJI2CHHn
7xIdSeXkLTi+Lg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:34 2026 by rpki-client