Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: RdZV4PST0qMvOBnMekS0btvZC8EYvlxrjT7PSAsxg8o=
Subject key identifier: 32:4C:A2:07:B1:B5:D2:53:00:EF:D1:F8:46:23:8E:18:A2:37:4A:F4
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 01A174DD9CE2EB3F710D5816A6B4E30BB308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 1ABF
Signing time: Sun 25 Oct 2026 21:00:42 +0000
Manifest this update: Sun 25 Oct 2026 21:00:42 +0000
Manifest next update: Mon 26 Oct 2026 21:00:42 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: taRxVpegIglMvUSRDfAs7DFWf3WFlxzA4urLVW1E1ZU=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:9c:e2:eb:3f:71:0d:58:16:a6:b4:e3:0b:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Oct 25 21:00:42 2026 GMT
Not After : Oct 26 21:00:42 2026 GMT
Subject: CN=324ca207b1b5d25300efd1f846238e18a2374af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:fe:9e:67:4d:8b:c7:91:0a:1e:54:fa:f3:
e6:9b:51:8d:69:44:e9:b2:33:0a:0b:20:96:8d:82:
dc:ad:67:89:8e:88:42:39:e0:10:c2:2e:3a:19:09:
8a:4f:8c:79:69:94:ac:4d:a1:a1:67:83:ca:3c:a0:
97:4e:b1:04:54:d9:f3:b5:fa:7b:46:0c:2c:ba:b6:
68:3c:ed:66:b7:c1:ed:0d:df:fd:df:82:ba:0d:64:
32:d4:fd:f7:fc:c2:d0:f5:03:b0:95:9d:44:ce:c7:
aa:0e:9f:e2:31:cd:a7:c9:46:fd:62:1a:32:aa:bc:
69:e4:db:3e:5f:b9:b2:bf:8b:b1:70:16:9a:46:df:
af:76:1f:65:a4:11:91:1f:17:62:9c:61:59:73:89:
ca:a1:f1:02:d3:4c:37:cf:2e:ed:22:00:f3:ce:0a:
9e:b0:e2:28:59:b3:6e:c3:21:3b:00:b9:0d:e8:a1:
4a:6f:e0:27:68:d4:70:01:57:f0:23:49:2b:16:6a:
ab:cc:45:26:b4:a8:40:d5:1b:84:ec:0a:c2:24:8f:
65:bd:41:57:b6:c8:f4:d8:92:9e:6f:7e:c2:44:f5:
a4:61:61:73:48:d2:a6:89:54:a3:82:1c:cd:9d:07:
0f:db:52:aa:92:8e:ac:34:62:6f:b2:0f:09:1b:30:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:A2:07:B1:B5:D2:53:00:EF:D1:F8:46:23:8E:18:A2:37:4A:F4
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cc:1c:0b:c5:04:d1:f7:83:dd:e5:38:bd:6b:8a:b2:0b:6d:
04:80:f5:c4:c3:2c:12:04:f9:96:da:7d:92:e7:38:c3:e6:22:
e4:c7:04:29:70:2d:8f:89:7a:02:c8:d2:ac:63:9d:fd:eb:dd:
c7:d1:ff:3e:cb:f7:fa:35:b2:f9:22:cc:f6:d0:bc:ed:7a:b9:
4a:5a:bf:5b:46:66:5a:dc:a2:aa:83:ad:ce:b7:bb:21:ea:13:
da:e9:9c:2c:7d:80:64:9c:c5:6d:ad:5d:ca:eb:11:2a:db:f0:
60:8f:be:cf:97:ea:89:1a:d6:77:a5:bb:14:36:54:58:37:1c:
af:b2:68:d4:d0:1e:9b:fa:48:04:88:44:25:d9:40:cc:61:53:
89:4a:3b:da:59:62:a1:e2:5c:5c:72:b0:da:41:e1:1f:60:f7:
36:f0:f4:7b:3e:dc:73:d4:7e:e1:11:54:d4:bd:61:c7:c5:50:
be:f7:71:1a:45:9b:20:b8:8f:74:f7:fc:04:30:32:3f:30:fc:
30:5e:1d:a1:07:3b:b4:8b:cf:0e:4e:53:94:84:38:e8:ca:d3:
4a:9a:2c:06:d5:af:3d:26:9a:c0:94:dd:86:83:c0:5c:e2:8e:
c5:ae:40:84:4d:7e:17:66:08:bf:3f:60:ac:93:07:18:91:c8:
ce:28:a7:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF03Zzi6z9xDVgWprTjC7MIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzNjYzk5ODk5MzczYzg1OTc0ZjAxYzljZDdhYTA1N2Fi
OTdmYWIwHhcNMjYxMDI1MjEwMDQyWhcNMjYxMDI2MjEwMDQyWjAzMTEwLwYDVQQD
EygzMjRjYTIwN2IxYjVkMjUzMDBlZmQxZjg0NjIzOGUxOGEyMzc0YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2j+nmdNi8eRCh5U+vPmm1GNaUTp
sjMKCyCWjYLcrWeJjohCOeAQwi46GQmKT4x5aZSsTaGhZ4PKPKCXTrEEVNnztfp7
RgwsurZoPO1mt8HtDd/934K6DWQy1P33/MLQ9QOwlZ1EzseqDp/iMc2nyUb9Yhoy
qrxp5Ns+X7myv4uxcBaaRt+vdh9lpBGRHxdinGFZc4nKofEC00w3zy7tIgDzzgqe
sOIoWbNuwyE7ALkN6KFKb+AnaNRwAVfwI0krFmqrzEUmtKhA1RuE7ArCJI9lvUFX
tsj02JKeb37CRPWkYWFzSNKmiVSjghzNnQcP21Kqko6sNGJvsg8JGzCSpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJMogextdJTAO/R+EYjjhiiN0r0MB8GA1UdIwQY
MBaAFFnDzJmJk3PIWXTwHJzXqgV6uX+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMt
MWE1ZWI1MDg4NWFlLzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMtMWE1ZWI1MDg4NWFl
LzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcwcC8UE
0feD3eU4vWuKsgttBID1xMMsEgT5ltp9kuc4w+Yi5McEKXAtj4l6AsjSrGOd/evd
x9H/Psv3+jWy+SLM9tC87Xq5Slq/W0ZmWtyiqoOtzre7IeoT2umcLH2AZJzFba1d
yusRKtvwYI++z5fqiRrWd6W7FDZUWDccr7Jo1NAem/pIBIhEJdlAzGFTiUo72lli
oeJcXHKw2kHhH2D3NvD0ez7cc9R+4RFU1L1hx8VQvvdxGkWbILiPdPf8BDAyPzD8
MF4doQc7tIvPDk5TlIQ46MrTSposBtWvPSaawJTdhoPAXOKOxa5AhE1+F2YIvz9g
rJMHGJHIziin4A==
-----END CERTIFICATE-----
Generated at Mon Oct 26 04:05:54 2026 by rpki-client