Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: WcGIZ9t194NWSJLpgoX4wp4E3EfUMQ4mnmEG2O+swis=
Subject key identifier: 5D:7F:4A:01:ED:FC:8C:52:8C:FD:77:69:C3:39:2E:5C:2E:11:0E:04
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019E642898378D3B691FA771CB387E37C918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 033B
Signing time: Tue 26 May 2026 12:00:42 +0000
Manifest this update: Tue 26 May 2026 12:00:42 +0000
Manifest next update: Wed 27 May 2026 12:00:42 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: Qj7fbw9Ojcne9ghYhhulVSmcpLsPhv5f6sxpkNUjI+w=)
2: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:28:98:37:8d:3b:69:1f:a7:71:cb:38:7e:37:c9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: May 26 12:00:42 2026 GMT
Not After : May 27 12:00:42 2026 GMT
Subject: CN=5d7f4a01edfc8c528cfd7769c3392e5c2e110e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:bd:75:d8:5e:67:cb:bc:9a:c5:92:01:b1:
64:79:49:de:f1:70:ba:7b:29:f2:69:33:cb:ef:c7:
cf:5c:ba:c7:fe:19:21:25:73:20:ea:71:6d:8e:3f:
2d:a9:ab:2f:42:df:b7:05:1f:d3:eb:71:e4:4e:3f:
b2:3f:8b:3f:8b:b2:2f:df:d2:95:c5:62:8b:f6:72:
7d:96:2b:1e:e2:37:24:a0:e1:9c:66:06:92:39:91:
71:13:55:a6:9a:75:87:71:7d:da:f3:16:24:0b:90:
44:56:25:9c:5d:80:3c:77:3a:74:04:0a:95:d5:c3:
23:05:36:6e:49:dd:ab:92:f7:e7:4a:2c:23:15:91:
12:01:0d:15:71:90:7e:28:37:e1:f4:e1:81:bd:c4:
46:68:e7:46:98:de:ea:4f:28:16:db:ce:78:ab:3e:
42:1b:95:08:bb:7f:83:d1:3b:da:86:e8:a1:02:4f:
4a:f2:40:50:83:26:ef:f1:f1:26:e6:f1:f8:f5:81:
d7:36:7f:6d:f2:05:62:a3:9f:1f:d6:0f:f8:6a:20:
2a:38:a2:d0:75:50:17:0e:8b:78:8a:3b:63:2f:c4:
a9:59:63:9c:26:f7:6e:00:0d:36:81:fd:2c:40:39:
a2:fb:e7:7e:44:b5:2e:48:29:28:90:d8:0c:94:c0:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:4A:01:ED:FC:8C:52:8C:FD:77:69:C3:39:2E:5C:2E:11:0E:04
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:60:f3:e6:0f:96:f0:79:f5:c7:70:e2:8f:2c:b4:67:a9:0d:
0a:f7:e2:ae:7e:2b:81:b9:3e:cd:98:3b:6b:ed:c1:ae:09:8d:
02:b4:d1:23:ed:a0:35:b0:d7:25:11:86:fb:5a:45:11:c1:bf:
2c:d6:0a:85:6a:d5:ff:fc:9e:3d:82:27:2c:91:75:4a:67:4b:
98:3d:28:86:2f:f3:3b:d9:e7:a1:af:fe:9f:b8:f6:6d:2e:20:
d4:ad:40:da:40:ea:56:b6:28:1b:c1:60:b7:b3:9f:de:89:0c:
9b:ac:a1:ea:c4:a0:f9:25:21:c1:f3:aa:af:f0:c8:05:e3:57:
6f:67:fc:20:85:19:f8:96:ba:d0:27:86:1f:24:78:eb:ff:8f:
54:48:52:4f:59:f6:94:61:ad:c6:a5:58:dc:2e:27:c4:e2:18:
89:2f:38:8a:34:ca:29:25:b9:30:09:ab:64:93:24:1b:4f:bc:
37:b5:ca:5d:3d:06:21:0d:e7:cb:87:ac:6e:a0:80:d1:42:dd:
37:5e:7e:1a:44:40:69:03:37:db:1c:04:79:6c:7b:a0:9e:dd:
a8:b7:45:ff:e0:89:b9:aa:35:62:b8:48:8d:3a:d5:d6:0a:24:
aa:74:20:c6:2c:b7:2c:89:02:01:c5:c4:47:57:0f:1d:ff:6e:
e0:f2:85:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5kKJg3jTtpH6dxyzh+N8kYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZmE3MDI3NjYxYWM4YzRhNzdmZjJhYmQ1OTY4NmFmOTlm
MTU5MjgwHhcNMjYwNTI2MTIwMDQyWhcNMjYwNTI3MTIwMDQyWjAzMTEwLwYDVQQD
Eyg1ZDdmNGEwMWVkZmM4YzUyOGNmZDc3NjljMzM5MmU1YzJlMTEwZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2K9ddheZ8u8msWSAbFkeUne8XC6
eynyaTPL78fPXLrH/hkhJXMg6nFtjj8tqasvQt+3BR/T63HkTj+yP4s/i7Iv39KV
xWKL9nJ9lise4jckoOGcZgaSOZFxE1WmmnWHcX3a8xYkC5BEViWcXYA8dzp0BAqV
1cMjBTZuSd2rkvfnSiwjFZESAQ0VcZB+KDfh9OGBvcRGaOdGmN7qTygW2854qz5C
G5UIu3+D0TvahuihAk9K8kBQgybv8fEm5vH49YHXNn9t8gVio58f1g/4aiAqOKLQ
dVAXDot4ijtjL8SpWWOcJvduAA02gf0sQDmi++d+RLUuSCkokNgMlMCQ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1/SgHt/IxSjP13acM5LlwuEQ4EMB8GA1UdIwQY
MBaAFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQt
MDkwNmRhMWIyM2E2LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQtMDkwNmRhMWIyM2E2
LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2Dz5g+W
8Hn1x3Dijyy0Z6kNCvfirn4rgbk+zZg7a+3BrgmNArTRI+2gNbDXJRGG+1pFEcG/
LNYKhWrV//yePYInLJF1SmdLmD0ohi/zO9nnoa/+n7j2bS4g1K1A2kDqVrYoG8Fg
t7Of3okMm6yh6sSg+SUhwfOqr/DIBeNXb2f8IIUZ+Ja60CeGHyR46/+PVEhST1n2
lGGtxqVY3C4nxOIYiS84ijTKKSW5MAmrZJMkG0+8N7XKXT0GIQ3ny4esbqCA0ULd
N15+GkRAaQM32xwEeWx7oJ7dqLdF/+CJuao1YrhIjTrV1gokqnQgxiy3LIkCAcXE
R1cPHf9u4PKF2g==
-----END CERTIFICATE-----
Generated at Tue May 26 15:50:09 2026 by rpki-client