Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
File: Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft (raw, json)
Hash identifier: g4tAn2An2txTXcrOFMjgwa9r7mxudbMY0YdpopDybpk=
Subject key identifier: 5B:B1:C7:56:90:B3:F7:56:BA:74:1A:DC:59:06:85:58:A5:9A:95:6E
Authority key identifier: 5A:3A:66:7F:6A:52:F5:40:DD:C7:0C:B9:18:20:FD:44:02:22:45:3F
Certificate issuer: /CN=5a3a667f6a52f540ddc70cb91820fd440222453f
Certificate serial: 01A165340FB558E2DEEC3B04EB31837EF573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
Manifest number: 1D
Signing time: Thu 22 Oct 2026 20:01:13 +0000
Manifest this update: Thu 22 Oct 2026 20:01:13 +0000
Manifest next update: Fri 23 Oct 2026 20:01:13 +0000
Files and hashes: 1: E2AVz0be9DczQYIdeT7XbjaGIzc.asa (hash: Z3nGQuj1cWuIOa9IA/KVJ62saQljJdjBNSSf/ubofz0=)
2: Wjpmf2pS9UDdxwy5GCD9RAIiRT8.crl (hash: xEg5qjpo0zH0WnLc1tTOmRTEru79Rhl75gnYkKcgcTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:34:0f:b5:58:e2:de:ec:3b:04:eb:31:83:7e:f5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3a667f6a52f540ddc70cb91820fd440222453f
Validity
Not Before: Oct 22 20:01:13 2026 GMT
Not After : Oct 23 20:01:13 2026 GMT
Subject: CN=5bb1c75690b3f756ba741adc59068558a59a956e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:8a:ca:04:f4:e0:df:0e:4a:b7:8e:a8:ec:
a7:b4:36:f4:87:c9:f1:e4:be:93:0b:dd:8c:66:02:
9b:30:20:7e:d6:9a:7a:80:36:5d:41:9b:15:67:a8:
87:cf:83:32:81:24:28:3d:f2:11:cf:b5:15:ef:d7:
0f:56:68:0f:c2:25:f4:54:86:92:f8:eb:96:66:0e:
ef:90:48:ad:60:c4:e8:2e:4a:a6:a3:d2:84:a8:51:
1b:ab:00:1a:5a:94:21:8c:5f:82:60:12:e5:78:56:
fc:d4:73:ae:52:13:cc:c7:52:26:4b:b5:75:95:aa:
5e:3d:f8:52:03:96:7d:c3:f8:0a:da:1c:cf:cb:49:
c7:05:b6:cb:80:a7:c5:7b:0c:d5:40:f6:9c:c5:4a:
6f:a4:2d:87:c8:24:e6:08:97:b9:3b:2f:d6:35:a7:
3a:21:73:08:ce:b1:22:7d:ca:8a:a3:94:a8:e9:7e:
1b:f3:47:bf:2f:b5:01:90:27:e4:88:50:d6:90:06:
26:0b:2b:d9:24:2c:bf:7f:03:64:e2:18:29:09:74:
d7:c8:02:06:ff:58:06:a1:e6:8b:02:2d:a9:33:34:
33:bd:11:8c:1d:75:3d:37:14:65:a3:0b:44:7e:95:
95:5f:b0:06:3f:57:fc:be:f5:2f:b5:01:96:17:af:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:C7:56:90:B3:F7:56:BA:74:1A:DC:59:06:85:58:A5:9A:95:6E
X509v3 Authority Key Identifier:
keyid:5A:3A:66:7F:6A:52:F5:40:DD:C7:0C:B9:18:20:FD:44:02:22:45:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6a:21:1d:e8:6f:17:c2:33:24:20:9a:d9:5c:8e:f0:c4:5f:
18:db:2a:d3:3e:3c:1c:9d:cf:4d:7e:e5:da:c3:5e:9c:8c:89:
41:83:57:f4:f8:c7:16:da:9e:48:f0:37:3c:6a:83:46:b4:83:
28:b6:53:99:62:e3:be:ba:8d:d0:8d:00:d1:df:36:0e:0e:ec:
60:63:e8:2e:7c:e6:84:93:07:f7:5a:f3:87:8d:31:33:1c:ec:
42:59:af:fd:d3:b3:ae:4f:14:ea:2c:5b:60:94:b6:35:9d:1c:
a0:51:72:99:a2:7d:41:f0:ae:2d:70:f9:2b:27:0e:af:ed:e3:
6d:87:d8:7c:2b:f2:ae:a7:6b:cd:b0:c9:9d:bf:29:7c:c6:4d:
d2:ff:a3:51:ea:ee:53:6b:03:a6:94:4c:20:7e:66:3f:bd:3d:
cb:21:9c:63:37:8f:f2:fe:ce:d4:94:81:a5:d6:49:68:bb:44:
0d:ab:d0:ac:05:74:e4:ae:61:e6:6c:22:85:90:14:f2:66:f5:
c2:df:09:c1:d6:9e:bb:8b:af:f6:f0:22:ee:f6:8d:d8:5c:48:
b8:c0:f9:ce:d9:24:8b:50:84:5f:3b:2c:18:f6:47:3e:7c:fd:
38:98:b6:e4:d8:f8:b6:16:25:cd:be:18:47:b3:66:a8:2c:17:
e3:af:44:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFlNA+1WOLe7DsE6zGDfvVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhM2E2NjdmNmE1MmY1NDBkZGM3MGNiOTE4MjBmZDQ0MDIy
MjQ1M2YwHhcNMjYxMDIyMjAwMTEzWhcNMjYxMDIzMjAwMTEzWjAzMTEwLwYDVQQD
Eyg1YmIxYzc1NjkwYjNmNzU2YmE3NDFhZGM1OTA2ODU1OGE1OWE5NTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoImKygT04N8OSreOqOyntDb0h8nx
5L6TC92MZgKbMCB+1pp6gDZdQZsVZ6iHz4MygSQoPfIRz7UV79cPVmgPwiX0VIaS
+OuWZg7vkEitYMToLkqmo9KEqFEbqwAaWpQhjF+CYBLleFb81HOuUhPMx1ImS7V1
lapePfhSA5Z9w/gK2hzPy0nHBbbLgKfFewzVQPacxUpvpC2HyCTmCJe5Oy/WNac6
IXMIzrEifcqKo5So6X4b80e/L7UBkCfkiFDWkAYmCyvZJCy/fwNk4hgpCXTXyAIG
/1gGoeaLAi2pMzQzvRGMHXU9NxRlowtEfpWVX7AGP1f8vvUvtQGWF6+oRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuxx1aQs/dWunQa3FkGhVilmpVuMB8GA1UdIwQY
MBaAFFo6Zn9qUvVA3ccMuRgg/UQCIkU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pwbWYycFM5VURkeHd5NUdDRDlSQUlpUlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMzg5ZGUtZDI5ZS00MzFjLThhYTIt
ZDk0NWE2YmQ4NDJkLzEvV2pwbWYycFM5VURkeHd5NUdDRDlSQUlpUlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMzg5ZGUtZDI5ZS00MzFjLThhYTItZDk0NWE2YmQ4NDJk
LzEvV2pwbWYycFM5VURkeHd5NUdDRDlSQUlpUlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWohHehv
F8IzJCCa2VyO8MRfGNsq0z48HJ3PTX7l2sNenIyJQYNX9PjHFtqeSPA3PGqDRrSD
KLZTmWLjvrqN0I0A0d82Dg7sYGPoLnzmhJMH91rzh40xMxzsQlmv/dOzrk8U6ixb
YJS2NZ0coFFymaJ9QfCuLXD5KycOr+3jbYfYfCvyrqdrzbDJnb8pfMZN0v+jUeru
U2sDppRMIH5mP709yyGcYzeP8v7O1JSBpdZJaLtEDavQrAV05K5h5mwihZAU8mb1
wt8Jwdaeu4uv9vAi7vaN2FxIuMD5ztkki1CEXzssGPZHPnz9OJi25Nj4thYlzb4Y
R7NmqCwX469ECA==
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:47 2026 by rpki-client