Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
File: WlCmmsOzTfXy2LiMe0EEMux3c7s.mft (raw, json)
Hash identifier: u6MAliGxKk7FT5imt7ukD+b6TSiqtuy6MzR4A5ZSbIs=
Subject key identifier: 0E:A1:0F:86:F2:F7:94:2C:1D:74:00:04:71:DC:7D:DB:B3:49:AF:AC
Authority key identifier: 5A:50:A6:9A:C3:B3:4D:F5:F2:D8:B8:8C:7B:41:04:32:EC:77:73:BB
Certificate issuer: /CN=5a50a69ac3b34df5f2d8b88c7b410432ec7773bb
Certificate serial: 01A0EB52DF1B76ABBDCA9BA180E80FA2E72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
Manifest number: DD
Signing time: Tue 29 Sep 2026 04:01:11 +0000
Manifest this update: Tue 29 Sep 2026 04:01:11 +0000
Manifest next update: Wed 30 Sep 2026 04:01:11 +0000
Files and hashes: 1: WlCmmsOzTfXy2LiMe0EEMux3c7s.crl (hash: LQixgOUVC1BohBgwy/MIEjUD5QFb9XMYwLlGklzROSQ=)
2: Yst5Qj-zvcPEq30_qzvGF3COwE0.roa (hash: Sh7bkfErjwAbJ1zwX6e1hPa7oSiv2lwYiU1nZ2j65uM=)
3: aOgrnkONLZhAf5Y_FGg0Jrz8A_c.asa (hash: xc1tL2LgrybTpJU3OwT3V3UJxQkXyAwBQmIN99tp03c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:52:df:1b:76:ab:bd:ca:9b:a1:80:e8:0f:a2:e7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a50a69ac3b34df5f2d8b88c7b410432ec7773bb
Validity
Not Before: Sep 29 04:01:11 2026 GMT
Not After : Sep 30 04:01:11 2026 GMT
Subject: CN=0ea10f86f2f7942c1d74000471dc7ddbb349afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:d9:62:48:9c:9b:cd:0d:54:94:be:47:9f:
4b:8a:85:f2:2f:4e:1b:df:ec:9d:8d:ae:84:da:89:
2a:16:42:f6:40:b8:3b:ff:cc:a2:9c:03:74:01:65:
05:fe:62:14:79:08:b6:3b:e6:f8:e7:d1:28:fc:92:
99:c6:d8:be:c6:d3:3d:d4:11:25:bf:d6:58:dd:0c:
6c:a3:73:7a:35:20:fb:0b:a0:45:a0:f6:d6:5b:ed:
e1:65:79:12:f8:50:bd:93:d0:bd:11:cc:69:f6:01:
26:52:ee:e2:47:aa:72:ff:ba:3c:c3:79:81:48:83:
ab:35:89:0c:a9:d0:bd:76:21:80:72:fd:bb:9b:a4:
fa:b4:a6:68:78:e2:52:8e:c7:e3:01:a4:92:9c:d7:
93:29:81:e8:78:8c:49:91:48:0d:45:0a:e5:ab:19:
86:a1:a5:5a:97:08:5a:97:8f:e7:2c:e6:4c:2f:0b:
22:f4:f6:ea:67:c0:66:fd:a2:ea:d1:cc:d8:05:e7:
e4:1e:fd:4f:fe:9e:47:c3:6d:5b:ca:5b:5c:6a:4e:
22:30:9e:62:f5:f4:18:0b:90:fe:93:d4:e3:ee:4b:
72:d1:92:5a:de:85:fd:5e:ff:3c:1f:19:38:39:7b:
9e:27:9e:e3:2c:b4:68:61:90:54:53:0b:9b:39:59:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:0F:86:F2:F7:94:2C:1D:74:00:04:71:DC:7D:DB:B3:49:AF:AC
X509v3 Authority Key Identifier:
keyid:5A:50:A6:9A:C3:B3:4D:F5:F2:D8:B8:8C:7B:41:04:32:EC:77:73:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fe:5f:22:06:3f:da:6c:ce:14:cb:8e:07:8e:33:01:87:a3:
03:da:43:38:a9:07:79:28:04:91:18:30:5b:95:fa:cf:2d:f4:
3f:29:7d:70:c7:95:2a:31:6d:c1:51:c0:b9:50:5c:00:b6:b6:
c9:d6:96:88:81:d2:15:3d:bb:4e:b0:09:b6:ae:45:f7:09:89:
b6:4b:90:34:79:56:8b:55:23:de:68:09:4a:42:f0:be:fc:4a:
a1:39:93:d8:e3:d9:83:8f:7e:28:b0:57:fa:93:6d:f0:29:be:
40:b5:71:9d:e8:94:53:fe:9b:c3:5d:a2:a1:9a:b9:eb:6e:d5:
b7:00:32:b3:c1:56:dd:a5:98:88:01:ec:e7:1f:64:a8:77:3f:
39:8b:4e:d9:31:ea:fa:bc:17:f5:00:cf:00:a0:ff:03:65:96:
aa:87:72:51:99:1c:ee:e4:1a:50:ba:38:9e:37:0a:84:b2:37:
01:ff:93:14:2e:3d:f1:0f:32:fe:e1:bd:c3:8e:b2:f5:02:5e:
be:4c:6a:05:7b:88:92:ac:61:d2:87:25:c9:b7:87:5f:50:ef:
7b:77:cf:b9:cb:e3:b3:4e:57:c4:8f:85:cd:b8:ee:ed:b0:05:
e8:70:a0:c2:32:68:63:3d:15:c7:6f:4c:b4:a1:f2:b0:82:11:
02:2c:4b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrUt8bdqu9ypuhgOgPoucuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTBhNjlhYzNiMzRkZjVmMmQ4Yjg4YzdiNDEwNDMyZWM3
NzczYmIwHhcNMjYwOTI5MDQwMTExWhcNMjYwOTMwMDQwMTExWjAzMTEwLwYDVQQD
EygwZWExMGY4NmYyZjc5NDJjMWQ3NDAwMDQ3MWRjN2RkYmIzNDlhZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmbZYkicm80NVJS+R59LioXyL04b
3+ydja6E2okqFkL2QLg7/8yinAN0AWUF/mIUeQi2O+b459Eo/JKZxti+xtM91BEl
v9ZY3Qxso3N6NSD7C6BFoPbWW+3hZXkS+FC9k9C9Ecxp9gEmUu7iR6py/7o8w3mB
SIOrNYkMqdC9diGAcv27m6T6tKZoeOJSjsfjAaSSnNeTKYHoeIxJkUgNRQrlqxmG
oaValwhal4/nLOZMLwsi9PbqZ8Bm/aLq0czYBefkHv1P/p5Hw21byltcak4iMJ5i
9fQYC5D+k9Tj7kty0ZJa3oX9Xv88Hxk4OXueJ57jLLRoYZBUUwubOVkDBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6hD4by95QsHXQABHHcfduzSa+sMB8GA1UdIwQY
MBaAFFpQpprDs0318ti4jHtBBDLsd3O7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xDbW1zT3pUZlh5MkxpTWUwRUVNdXgzYzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lZmFlZmItZDRmNy00OGY0LWEzNGQt
NjdmN2EyZmM0MDZjLzEvV2xDbW1zT3pUZlh5MkxpTWUwRUVNdXgzYzdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lZmFlZmItZDRmNy00OGY0LWEzNGQtNjdmN2EyZmM0MDZj
LzEvV2xDbW1zT3pUZlh5MkxpTWUwRUVNdXgzYzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiP5fIgY/
2mzOFMuOB44zAYejA9pDOKkHeSgEkRgwW5X6zy30Pyl9cMeVKjFtwVHAuVBcALa2
ydaWiIHSFT27TrAJtq5F9wmJtkuQNHlWi1Uj3mgJSkLwvvxKoTmT2OPZg49+KLBX
+pNt8Cm+QLVxneiUU/6bw12ioZq5627VtwAys8FW3aWYiAHs5x9kqHc/OYtO2THq
+rwX9QDPAKD/A2WWqodyUZkc7uQaULo4njcKhLI3Af+TFC498Q8y/uG9w46y9QJe
vkxqBXuIkqxh0oclybeHX1Dve3fPucvjs05XxI+Fzbju7bAF6HCgwjJoYz0Vx29M
tKHysIIRAixLAA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:46:17 2026 by rpki-client