Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: lO/2CdhfA2cgkYGMYOzoDGJ2CIsGUUwZ95Qp8bfz6nM=
Subject key identifier: 10:1A:F4:EE:B5:86:D1:B0:4E:1C:99:53:FF:59:9D:C6:4F:9F:0F:00
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 01A06E39AC43092A86EE372C489CFB52640E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 1A37
Signing time: Fri 04 Sep 2026 21:01:08 +0000
Manifest this update: Fri 04 Sep 2026 21:01:08 +0000
Manifest next update: Sat 05 Sep 2026 21:01:08 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: 1+A+wpUyk5FfV1dBD5mHX7Y1HEFb3vmLzjD36UuS3as=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:ac:43:09:2a:86:ee:37:2c:48:9c:fb:52:64:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Sep 4 21:01:08 2026 GMT
Not After : Sep 5 21:01:08 2026 GMT
Subject: CN=101af4eeb586d1b04e1c9953ff599dc64f9f0f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:9b:9f:cf:e5:d6:69:dd:a4:dd:be:aa:51:
c5:65:e4:06:4e:4c:46:94:e2:c5:6f:12:45:d3:56:
49:cf:b6:94:a8:28:09:de:d5:70:6b:d9:9d:25:51:
57:f2:83:cd:d7:9c:7e:df:89:f2:95:ed:03:17:08:
64:1f:c2:6d:b7:ec:d9:8e:0c:f6:11:69:f7:14:e7:
44:9e:0d:34:b1:66:f6:38:63:3d:16:64:e6:8b:38:
c4:ef:a7:c4:cf:d5:a4:a2:83:90:e9:d3:86:79:63:
24:bb:b3:87:06:82:c5:53:01:30:3f:98:37:6e:51:
49:30:78:65:04:72:55:53:97:4a:36:e8:3a:f6:35:
3e:dd:99:6e:90:93:be:33:30:ea:42:fd:58:0b:2e:
94:09:2c:46:30:ad:30:c8:62:85:de:87:50:2b:32:
79:8b:e0:dc:fc:db:4e:b5:27:19:40:04:f0:e8:2f:
3c:bc:7a:0d:cb:4c:65:d9:42:eb:b6:e4:36:54:fc:
d5:bb:29:0d:43:fd:8d:26:04:8c:ae:a1:ad:b8:e0:
be:e0:05:82:65:a5:9c:25:5c:5b:58:b6:39:ce:7a:
60:39:f7:94:69:d9:1d:8b:30:a2:1d:34:5c:47:4e:
e8:71:c5:74:39:15:96:77:bd:9a:d4:1d:da:d8:6b:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:F4:EE:B5:86:D1:B0:4E:1C:99:53:FF:59:9D:C6:4F:9F:0F:00
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8e:df:b9:45:b2:37:82:e0:72:f1:fd:46:b9:08:cc:0d:2c:
a8:02:46:a0:5f:a2:1e:e8:66:aa:45:72:16:c2:af:74:1a:bd:
b4:22:cd:91:90:7d:eb:52:ef:96:47:47:70:de:16:84:50:bd:
ee:ee:5b:13:94:7b:5b:57:9e:3c:33:b8:cb:75:28:76:83:30:
3b:c4:56:92:83:d1:a4:1e:59:49:60:bc:ba:4d:74:2f:54:48:
4d:51:00:cd:b6:b5:76:62:cf:2b:8b:f1:ec:bb:2d:e6:1a:bc:
10:bf:4b:36:00:7a:82:d8:73:7b:cc:96:21:40:ed:f5:e4:64:
bf:e6:f3:36:64:98:93:7c:f0:aa:74:44:3d:68:e5:f5:a9:64:
9e:8a:0c:1c:3c:5a:72:c1:12:80:1c:cc:f7:a6:04:55:ab:ed:
f8:37:d6:08:eb:1c:62:61:c9:7e:f5:b2:d8:ca:77:83:05:9d:
46:45:c6:58:ac:09:ad:e5:cd:27:af:45:50:c6:5b:62:51:77:
8d:97:59:48:35:df:6d:f9:b7:b9:d9:72:53:f4:30:b5:db:3b:
8b:c0:83:2e:ad:17:84:fb:78:d4:47:4f:b0:d2:ef:6c:71:9f:
a5:2a:ed:cf:47:ff:08:7e:07:84:d6:de:08:14:a5:00:7c:4b:
b3:1d:bd:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuOaxDCSqG7jcsSJz7UmQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzNjYzk5ODk5MzczYzg1OTc0ZjAxYzljZDdhYTA1N2Fi
OTdmYWIwHhcNMjYwOTA0MjEwMTA4WhcNMjYwOTA1MjEwMTA4WjAzMTEwLwYDVQQD
EygxMDFhZjRlZWI1ODZkMWIwNGUxYzk5NTNmZjU5OWRjNjRmOWYwZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBabn8/l1mndpN2+qlHFZeQGTkxG
lOLFbxJF01ZJz7aUqCgJ3tVwa9mdJVFX8oPN15x+34nyle0DFwhkH8Jtt+zZjgz2
EWn3FOdEng00sWb2OGM9FmTmizjE76fEz9WkooOQ6dOGeWMku7OHBoLFUwEwP5g3
blFJMHhlBHJVU5dKNug69jU+3ZlukJO+MzDqQv1YCy6UCSxGMK0wyGKF3odQKzJ5
i+Dc/NtOtScZQATw6C88vHoNy0xl2ULrtuQ2VPzVuykNQ/2NJgSMrqGtuOC+4AWC
ZaWcJVxbWLY5znpgOfeUadkdizCiHTRcR07occV0ORWWd72a1B3a2GuWAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAa9O61htGwThyZU/9ZncZPnw8AMB8GA1UdIwQY
MBaAFFnDzJmJk3PIWXTwHJzXqgV6uX+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMt
MWE1ZWI1MDg4NWFlLzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMtMWE1ZWI1MDg4NWFl
LzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeY7fuUWy
N4LgcvH9RrkIzA0sqAJGoF+iHuhmqkVyFsKvdBq9tCLNkZB961LvlkdHcN4WhFC9
7u5bE5R7W1eePDO4y3UodoMwO8RWkoPRpB5ZSWC8uk10L1RITVEAzba1dmLPK4vx
7Lst5hq8EL9LNgB6gthze8yWIUDt9eRkv+bzNmSYk3zwqnREPWjl9alknooMHDxa
csESgBzM96YEVavt+DfWCOscYmHJfvWy2Mp3gwWdRkXGWKwJreXNJ69FUMZbYlF3
jZdZSDXfbfm3udlyU/Qwtds7i8CDLq0XhPt41EdPsNLvbHGfpSrtz0f/CH4HhNbe
CBSlAHxLsx29sw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:38 2026 by rpki-client