Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
File: W2fkuRJYp4VpukUKXno0e0MR1FE.mft (raw, json)
Hash identifier: bOxpYO8ZvSoG7wzfdY7u7mDk/bcZg9eEpOUZIuc+rHo=
Subject key identifier: 87:F4:14:AA:8E:08:4C:B4:3D:2A:93:41:FE:EF:F5:3D:7B:4B:48:10
Authority key identifier: 5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
Certificate issuer: /CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Certificate serial: 019FF5A27323BDE06E2BADBFDB810F9CF21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
Manifest number: B9
Signing time: Wed 12 Aug 2026 11:01:31 +0000
Manifest this update: Wed 12 Aug 2026 11:01:31 +0000
Manifest next update: Thu 13 Aug 2026 11:01:31 +0000
Files and hashes: 1: W2fkuRJYp4VpukUKXno0e0MR1FE.crl (hash: xAJjG0LIj2opJracAsaDnQt/Vz0/l/3I8n3CFtfg7fQ=)
2: yBxwaW11AdzCtD2abIPzlUZyrb0.asa (hash: sgvoWb8Eg0fLOeE4h8rR/2GP62YHBrZ5DZ553gmHgZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:a2:73:23:bd:e0:6e:2b:ad:bf:db:81:0f:9c:f2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b67e4b91258a78569ba450a5e7a347b4311d451
Validity
Not Before: Aug 12 11:01:31 2026 GMT
Not After : Aug 13 11:01:31 2026 GMT
Subject: CN=87f414aa8e084cb43d2a9341feeff53d7b4b4810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:1c:24:ba:5e:39:53:fa:88:7e:49:7a:ca:
b0:c5:36:71:0f:f1:44:98:dd:4c:c5:e4:e3:54:1d:
1a:4b:7d:e2:f6:82:13:e9:b2:49:5c:ae:48:95:e2:
00:11:9d:e6:98:b1:c9:fc:d0:81:60:38:bf:97:93:
4f:3d:e2:31:7a:3f:aa:6d:70:bb:bf:99:72:4e:e8:
d0:94:1d:f0:d1:e2:97:4e:3f:74:ca:5f:23:86:8f:
26:9f:ed:b0:ed:d3:22:a1:5f:7a:b9:f3:0e:7e:a0:
ac:bf:fc:13:65:01:24:78:d5:d1:36:15:3e:fe:c7:
f2:67:1f:ab:07:ec:a1:7f:a1:10:4f:4f:53:41:7f:
38:11:f4:13:b0:df:8a:59:da:14:96:05:98:8f:73:
1f:bc:a0:cb:68:34:2d:e5:a6:d3:08:3d:a6:02:be:
be:d9:30:c0:5c:27:d7:8f:52:41:8d:3f:1b:93:df:
2b:70:65:0e:57:3f:73:1d:52:f0:6e:aa:00:e4:f7:
41:95:2f:0d:4b:73:65:8b:21:76:7f:dc:31:12:90:
29:13:8b:65:85:90:7c:fb:72:62:6f:4c:17:36:06:
3a:fd:ab:4a:1f:f5:cb:47:3d:32:99:d9:12:a2:53:
51:89:9d:eb:8b:67:fb:c4:a3:d1:9f:e1:e6:08:4c:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F4:14:AA:8E:08:4C:B4:3D:2A:93:41:FE:EF:F5:3D:7B:4B:48:10
X509v3 Authority Key Identifier:
keyid:5B:67:E4:B9:12:58:A7:85:69:BA:45:0A:5E:7A:34:7B:43:11:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2fkuRJYp4VpukUKXno0e0MR1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/88fdc9-fe16-4f2b-972b-897a89902d23/1/W2fkuRJYp4VpukUKXno0e0MR1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3f:3d:31:98:95:80:12:0c:e8:a9:9f:c0:d0:3a:7c:a0:e9:
fc:04:22:61:d5:6b:0a:e2:cd:ed:5f:3a:b8:75:eb:4f:6d:f8:
f3:11:50:3a:64:61:9d:c4:90:d2:a6:b1:a6:46:a0:36:56:78:
c4:21:e0:3c:ef:f9:64:67:fd:bf:8e:b8:bf:f7:2e:4c:aa:cd:
e6:83:58:4d:84:d1:c0:70:7f:0d:b3:7c:ff:9b:b3:11:79:e9:
fa:78:5d:fb:14:1e:0e:7f:5a:c8:fb:3a:3c:4e:9e:75:11:16:
97:ac:59:6c:67:51:48:e0:1f:b4:51:55:eb:56:fb:bc:71:12:
65:81:e6:c7:96:83:12:f2:50:77:86:cf:7d:a2:f9:24:b7:d6:
40:fa:23:e2:c4:17:36:48:a1:ba:ca:54:46:ef:11:49:a5:b2:
c8:c2:36:c9:4b:d6:cd:6d:cf:4e:3f:8f:2f:43:ba:d9:09:25:
9b:78:55:bc:ca:ec:df:0c:4d:36:5b:d7:da:e3:40:41:c8:8a:
83:dd:d1:60:aa:87:d3:db:51:29:50:0b:2c:59:43:f3:8b:87:
b0:48:74:cb:a4:50:97:0b:f1:94:ea:79:d8:ce:82:d2:f8:55:
65:d3:12:c4:2e:a9:3c:b3:43:b7:6e:b0:37:81:ff:05:05:6e:
f1:71:04:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/1onMjveBuK62/24EPnPIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjdlNGI5MTI1OGE3ODU2OWJhNDUwYTVlN2EzNDdiNDMx
MWQ0NTEwHhcNMjYwODEyMTEwMTMxWhcNMjYwODEzMTEwMTMxWjAzMTEwLwYDVQQD
Eyg4N2Y0MTRhYThlMDg0Y2I0M2QyYTkzNDFmZWVmZjUzZDdiNGI0ODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArngcJLpeOVP6iH5JesqwxTZxD/FE
mN1MxeTjVB0aS33i9oIT6bJJXK5IleIAEZ3mmLHJ/NCBYDi/l5NPPeIxej+qbXC7
v5lyTujQlB3w0eKXTj90yl8jho8mn+2w7dMioV96ufMOfqCsv/wTZQEkeNXRNhU+
/sfyZx+rB+yhf6EQT09TQX84EfQTsN+KWdoUlgWYj3MfvKDLaDQt5abTCD2mAr6+
2TDAXCfXj1JBjT8bk98rcGUOVz9zHVLwbqoA5PdBlS8NS3NliyF2f9wxEpApE4tl
hZB8+3Jib0wXNgY6/atKH/XLRz0ymdkSolNRiZ3ri2f7xKPRn+HmCEzqGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf0FKqOCEy0PSqTQf7v9T17S0gQMB8GA1UdIwQY
MBaAFFtn5LkSWKeFabpFCl56NHtDEdRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJma3VSSllwNFZwdWtVS1hubzBlME1SMUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84OGZkYzktZmUxNi00ZjJiLTk3MmIt
ODk3YTg5OTAyZDIzLzEvVzJma3VSSllwNFZwdWtVS1hubzBlME1SMUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84OGZkYzktZmUxNi00ZjJiLTk3MmItODk3YTg5OTAyZDIz
LzEvVzJma3VSSllwNFZwdWtVS1hubzBlME1SMUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD89MZiV
gBIM6KmfwNA6fKDp/AQiYdVrCuLN7V86uHXrT2348xFQOmRhncSQ0qaxpkagNlZ4
xCHgPO/5ZGf9v464v/cuTKrN5oNYTYTRwHB/DbN8/5uzEXnp+nhd+xQeDn9ayPs6
PE6edREWl6xZbGdRSOAftFFV61b7vHESZYHmx5aDEvJQd4bPfaL5JLfWQPoj4sQX
NkihuspURu8RSaWyyMI2yUvWzW3PTj+PL0O62Qklm3hVvMrs3wxNNlvX2uNAQciK
g93RYKqH09tRKVALLFlD84uHsEh0y6RQlwvxlOp52M6C0vhVZdMSxC6pPLNDt26w
N4H/BQVu8XEEEA==
-----END CERTIFICATE-----
Generated at Wed Aug 12 20:42:48 2026 by rpki-client