Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: xd3RafAdI5Happ+qUR6XonXHY03CV2gA/3bDsA3VCOQ=
Subject key identifier: 01:56:B7:1B:2B:E2:03:5A:BF:90:2E:91:4C:6E:A3:15:69:D2:3E:0E
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019F867B6061D01BB246585B58404A6FD676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 19BF
Signing time: Tue 21 Jul 2026 21:01:00 +0000
Manifest this update: Tue 21 Jul 2026 21:01:00 +0000
Manifest next update: Wed 22 Jul 2026 21:01:00 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: q1Q5Lk9g+x5mDldmLlPzMOBj5RPD+srLHC8P6OJwwnM=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7b:60:61:d0:1b:b2:46:58:5b:58:40:4a:6f:d6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Jul 21 21:01:00 2026 GMT
Not After : Jul 22 21:01:00 2026 GMT
Subject: CN=0156b71b2be2035abf902e914c6ea31569d23e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:d5:01:b5:e3:4a:c2:01:a2:36:62:f6:cb:
e6:8d:11:94:81:a7:54:23:e5:f0:3a:6b:4b:ca:54:
c4:64:14:e9:90:f6:00:b5:91:f0:4b:1c:8a:ee:1b:
89:ff:5c:c9:f6:f9:a7:a2:96:99:6b:78:b0:4e:6b:
3d:5d:b8:53:2c:47:1b:51:1b:a9:57:30:c2:27:d3:
a7:ab:d1:dc:02:cc:55:28:e1:9d:3d:11:52:b1:7c:
83:2d:18:f9:e1:9c:0b:b3:0b:5c:d2:3d:5d:fc:30:
64:06:ba:bb:4f:f0:85:ea:d9:24:6b:08:1f:50:ad:
94:2e:0c:01:89:ef:76:08:a4:fb:af:07:31:e3:3e:
5a:5d:01:b8:a4:21:21:25:d2:b2:1f:38:38:a7:e1:
f0:d5:3d:57:5f:b5:9a:d2:5f:5c:c0:17:d9:f8:46:
76:2d:a6:6a:83:3c:dc:12:36:04:1b:40:e6:a7:15:
e4:1b:67:35:f5:dc:ed:2f:d5:ad:26:ce:6c:8c:4c:
5d:7b:68:79:60:fb:4b:41:c7:88:84:a6:43:8d:5e:
c7:7c:22:57:92:1b:42:7f:ee:5a:7f:98:53:63:36:
fb:bc:83:45:d9:ce:9b:7b:58:18:d7:59:5d:0c:b2:
3d:1f:12:06:d8:25:94:30:5b:5c:af:1b:ff:a0:e3:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:56:B7:1B:2B:E2:03:5A:BF:90:2E:91:4C:6E:A3:15:69:D2:3E:0E
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fb:c1:16:1e:23:bd:d5:e5:d3:6b:22:11:b8:ee:a0:33:7f:
9a:6f:23:7b:63:3d:69:0f:ad:f6:54:c1:ab:f6:7d:40:27:a7:
a1:df:63:11:5b:58:a4:0d:a0:03:cb:94:ea:fe:e7:c3:67:64:
be:c0:fb:e3:39:fe:59:53:0e:e9:79:06:28:31:1c:b3:c7:da:
8e:d6:47:99:67:39:bf:dc:47:50:34:14:e2:17:2b:93:08:3a:
12:43:4f:8a:89:57:ac:42:40:d3:4d:04:9e:1b:40:16:5d:8f:
09:00:00:62:e2:93:95:85:5e:32:c6:95:66:e9:12:d8:be:5d:
92:bc:d1:22:0c:13:3d:20:d3:d2:77:6f:00:ac:ca:68:94:ab:
10:54:19:7f:22:35:9c:bc:bf:80:ac:9f:ca:a3:ea:8b:0d:19:
d1:aa:9f:a7:0d:c4:c6:3b:ce:bf:fb:64:14:d4:f1:4b:35:1b:
75:fb:d2:74:53:0d:dc:3c:15:ee:cb:b9:10:0b:9d:a4:b6:d8:
c5:a8:f9:8a:cd:e9:8c:d2:48:e4:56:4c:f6:91:29:a1:35:8a:
4b:53:c5:dd:86:5c:ec:31:bb:8e:79:47:33:77:00:de:df:db:
1c:77:c6:ad:ca:ea:d4:f5:b7:59:f5:20:0c:18:35:58:65:21:
54:4d:e7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:25:46 2026 by rpki-client