Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
File: wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft (raw, json)
Hash identifier: LsoZ8P91l+yXM2WqGIdf0edx9AnxmcvRnLFxs8V+Yi8=
Subject key identifier: FB:AF:21:E1:5B:CF:C3:87:6A:1E:8A:46:C6:25:8C:32:41:34:1B:97
Authority key identifier: C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
Certificate issuer: /CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Certificate serial: 01A08A8D0EA45F6ABEDCF862301ED2E19439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:35 +0000
Manifest this update: Thu 10 Sep 2026 09:01:35 +0000
Manifest next update: Fri 11 Sep 2026 09:01:35 +0000
Files and hashes: 1: n-LkYEYl_BKToTd94568MGgE5jc.roa (hash: dbNcQZB+XqGNZ6CWLvpvwNF67hivn9OZiLltxklIlbE=)
2: wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl (hash: 7yTmfydwn+cQRWtBlgGx9byfHZdYj8jycqiyiFZE6Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:0e:a4:5f:6a:be:dc:f8:62:30:1e:d2:e1:94:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d1a436b8d95cd6c2a5d038b7a10b5ee85ecf6
Validity
Not Before: Sep 10 09:01:35 2026 GMT
Not After : Sep 11 09:01:35 2026 GMT
Subject: CN=fbaf21e15bcfc3876a1e8a46c6258c3241341b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:c1:95:86:6e:73:68:8f:82:09:c3:99:6c:
02:16:b0:ff:06:32:39:1a:8c:9d:67:1e:e9:8f:5a:
38:10:9f:35:1c:a0:45:f6:86:da:f6:aa:f9:ac:26:
d4:8b:fe:ce:d1:d5:2d:4b:4f:34:6d:d4:af:78:27:
9c:2b:4a:af:1a:8a:05:d8:b6:7f:b6:49:d2:ed:76:
4a:b0:28:4e:33:a1:1a:38:e8:dd:db:88:93:01:53:
23:46:a1:c5:f7:de:b7:3a:d1:ba:24:df:79:28:4d:
31:11:1d:f5:8e:5e:37:c5:79:4e:b2:b9:da:15:eb:
a2:4f:9f:a6:f0:b4:7b:a6:4c:08:a6:1a:8e:3b:a7:
69:ac:b4:71:f1:e5:20:29:e5:b1:e8:bd:2b:be:12:
4d:84:8f:fc:a3:27:91:89:06:33:30:a6:39:d0:ac:
07:58:c1:bd:9d:ef:28:b6:33:aa:d6:aa:9d:37:32:
6b:f2:67:86:a4:0a:77:17:6d:b6:34:52:e0:b6:33:
ea:55:43:bc:45:61:4a:88:4b:a8:f5:6d:b8:56:91:
eb:99:27:a5:89:1a:a2:cf:d6:88:94:d8:f4:2e:53:
cc:6a:9a:10:61:49:bd:8e:61:3e:e8:da:49:6e:ec:
87:5b:b9:24:33:b9:04:7a:ec:c8:97:76:1d:70:8a:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:21:E1:5B:CF:C3:87:6A:1E:8A:46:C6:25:8C:32:41:34:1B:97
X509v3 Authority Key Identifier:
keyid:C2:4D:1A:43:6B:8D:95:CD:6C:2A:5D:03:8B:7A:10:B5:EE:85:EC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk0aQ2uNlc1sKl0Di3oQte6F7PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/wk0aQ2uNlc1sKl0Di3oQte6F7PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a2:0b:f2:13:5e:47:88:a3:90:be:60:dc:2d:69:89:ff:19:
16:56:07:3b:13:fc:bc:ee:58:67:1a:c6:7f:00:ac:b1:de:ed:
9d:d2:3b:62:3f:a3:ae:5a:a6:c6:51:66:82:22:c4:be:53:b1:
71:07:27:55:7c:56:59:c5:92:68:0e:c3:56:44:a5:d2:86:21:
2b:8b:be:f0:66:0f:0e:0e:3b:28:33:33:c9:70:5b:d8:37:5c:
21:cf:cf:cf:a8:9f:26:14:68:3d:ec:08:8b:40:00:74:38:49:
a4:dd:21:a9:cc:87:6a:63:29:28:72:e5:2e:40:bb:d6:96:2d:
0b:e7:4e:bc:de:b7:aa:40:2e:94:10:50:b5:93:41:6c:48:5d:
a0:74:eb:a5:9e:c8:fa:70:46:a6:90:a4:5f:3b:04:44:42:1f:
95:7b:fc:93:92:ae:55:6e:83:ef:a9:f4:6d:3b:0d:1e:3b:49:
e5:fb:e8:f6:fa:f6:9e:4c:9f:5e:ba:07:aa:42:2d:03:a5:62:
4e:53:65:b3:4c:95:70:80:a4:54:69:8e:de:02:4a:63:e5:59:
01:05:a6:8d:64:37:9f:6a:ae:94:f4:98:d3:d4:38:18:90:3f:
e9:47:bb:b9:9f:41:26:43:75:9b:ec:33:32:ce:4e:32:d3:83:
89:04:26:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjQ6kX2q+3PhiMB7S4ZQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNGQxYTQzNmI4ZDk1Y2Q2YzJhNWQwMzhiN2ExMGI1ZWU4
NWVjZjYwHhcNMjYwOTEwMDkwMTM1WhcNMjYwOTExMDkwMTM1WjAzMTEwLwYDVQQD
EyhmYmFmMjFlMTViY2ZjMzg3NmExZThhNDZjNjI1OGMzMjQxMzQxYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRHBlYZuc2iPggnDmWwCFrD/BjI5
GoydZx7pj1o4EJ81HKBF9oba9qr5rCbUi/7O0dUtS080bdSveCecK0qvGooF2LZ/
tknS7XZKsChOM6EaOOjd24iTAVMjRqHF9963OtG6JN95KE0xER31jl43xXlOsrna
FeuiT5+m8LR7pkwIphqOO6dprLRx8eUgKeWx6L0rvhJNhI/8oyeRiQYzMKY50KwH
WMG9ne8otjOq1qqdNzJr8meGpAp3F222NFLgtjPqVUO8RWFKiEuo9W24VpHrmSel
iRqiz9aIlNj0LlPMapoQYUm9jmE+6NpJbuyHW7kkM7kEeuzIl3YdcIo1RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuvIeFbz8OHah6KRsYljDJBNBuXMB8GA1UdIwQY
MBaAFMJNGkNrjZXNbCpdA4t6ELXuhez2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2swYVEydU5sYzFzS2wwRGkzb1F0ZTZGN1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85YmM1YmMtOGY5OS00MmVkLWE4Y2Ut
NWI4NmJhNTg1OTIyLzEvd2swYVEydU5sYzFzS2wwRGkzb1F0ZTZGN1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85YmM1YmMtOGY5OS00MmVkLWE4Y2UtNWI4NmJhNTg1OTIy
LzEvd2swYVEydU5sYzFzS2wwRGkzb1F0ZTZGN1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaIL8hNe
R4ijkL5g3C1pif8ZFlYHOxP8vO5YZxrGfwCssd7tndI7Yj+jrlqmxlFmgiLEvlOx
cQcnVXxWWcWSaA7DVkSl0oYhK4u+8GYPDg47KDMzyXBb2DdcIc/Pz6ifJhRoPewI
i0AAdDhJpN0hqcyHamMpKHLlLkC71pYtC+dOvN63qkAulBBQtZNBbEhdoHTrpZ7I
+nBGppCkXzsEREIflXv8k5KuVW6D76n0bTsNHjtJ5fvo9vr2nkyfXroHqkItA6Vi
TlNls0yVcICkVGmO3gJKY+VZAQWmjWQ3n2qulPSY09Q4GJA/6Ue7uZ9BJkN1m+wz
Ms5OMtODiQQmWA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:06:11 2026 by rpki-client