
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier: AzAvDw6GHZq0qodHsLxsom0wj6+B7Nl2XOFUyjBIUnA=
Subject key identifier: 38:B0:08:FA:51:FE:2C:06:6C:99:E1:9A:FD:C3:F8:B3:15:A5:FE:82
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer: /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial: 01A1803D951D2F86BC38B3793499E5D35717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number: 12BF
Signing time: Wed 28 Oct 2026 02:01:21 +0000
Manifest this update: Wed 28 Oct 2026 02:01:21 +0000
Manifest next update: Thu 29 Oct 2026 02:01:21 +0000
Files and hashes: 1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: aqTTq1vMWMlKMxh30Y2TGLwXPf6g0ZnuPcaa/Shv6b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:95:1d:2f:86:bc:38:b3:79:34:99:e5:d3:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Validity
Not Before: Oct 28 02:01:21 2026 GMT
Not After : Oct 29 02:01:21 2026 GMT
Subject: CN=38b008fa51fe2c066c99e19afdc3f8b315a5fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:1e:18:71:65:13:8b:af:b6:d3:33:90:f7:
ca:f9:16:20:78:73:69:18:15:e5:b3:e3:d1:88:ac:
b1:18:95:2a:15:89:19:74:1b:ea:27:09:5e:2c:98:
86:ce:6c:9a:51:de:b1:10:be:04:da:cb:c4:59:db:
3f:1b:fd:83:47:5b:0f:f7:28:34:75:67:5a:d0:ff:
95:cf:c3:1b:58:ff:43:ed:5e:95:3b:bc:f1:a6:56:
d7:76:3d:09:b0:b0:8d:49:d9:70:c5:92:30:7e:52:
a1:fd:e8:86:f1:d2:45:76:be:63:73:d5:c8:c2:19:
15:17:1f:2b:37:e1:7d:46:7d:13:0c:a2:7f:cb:27:
02:3f:9d:a9:a0:78:ad:50:89:0b:66:98:65:38:46:
4e:64:9e:3c:40:a5:2c:82:90:59:31:96:27:a4:ff:
d0:b9:29:77:a2:7e:9e:51:29:49:ac:c6:ea:ca:da:
fa:51:92:a9:fa:84:b1:38:fe:19:d8:ba:8d:97:8b:
1d:84:bd:54:86:3c:97:a7:f3:8e:d5:bd:17:6b:63:
c9:8c:7f:37:71:8c:d1:7e:7a:07:bd:8e:0f:97:b4:
1f:e6:b0:2d:7f:de:bd:fe:49:5e:d4:5c:bf:6a:9a:
13:ef:1b:e0:bd:85:91:e1:67:68:6b:33:bc:dc:b1:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B0:08:FA:51:FE:2C:06:6C:99:E1:9A:FD:C3:F8:B3:15:A5:FE:82
X509v3 Authority Key Identifier:
keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ed:7d:93:5d:b9:a2:ab:5f:b5:d5:e4:ca:7f:23:0a:8a:2c:
45:3a:cc:45:11:73:a1:34:01:95:58:ab:72:05:c0:4b:2a:28:
26:ba:43:b7:65:ac:d2:8d:41:20:21:ac:43:15:82:72:a5:ec:
91:d7:30:90:ad:eb:26:90:79:c8:c2:32:06:7c:7e:72:db:3c:
ac:30:a4:04:2b:75:24:e6:ea:1f:ef:51:25:b4:53:ac:0d:47:
53:38:60:a4:16:3f:de:68:1a:e8:69:62:77:75:58:be:b8:59:
96:c6:2b:bf:37:9e:56:28:2d:08:54:4e:83:d8:f8:fb:4b:18:
83:34:1a:f4:48:a4:ad:ef:e8:33:80:c3:d1:d8:54:f5:78:7c:
3a:c7:1c:64:75:b0:e1:04:8f:44:b9:38:ac:17:0e:3f:b3:62:
31:7f:3d:e7:39:e9:96:5e:25:ed:a6:65:76:17:fc:79:ca:4a:
9c:e7:cf:dd:60:4b:8c:54:e3:92:80:bd:78:8a:80:d2:03:f8:
4f:fa:6d:68:50:c7:8a:7d:48:76:69:c5:d8:9b:1c:be:40:be:
fb:ac:f0:cd:42:5c:b3:9b:5e:3c:fa:cb:73:10:b7:38:bb:b4:
70:f6:bd:9c:5c:de:3d:3e:26:20:07:fd:1f:f1:ce:af:07:1c:
6d:3d:e5:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAPZUdL4a8OLN5NJnl01cXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj
NGFkODQwHhcNMjYxMDI4MDIwMTIxWhcNMjYxMDI5MDIwMTIxWjAzMTEwLwYDVQQD
EygzOGIwMDhmYTUxZmUyYzA2NmM5OWUxOWFmZGMzZjhiMzE1YTVmZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPYeGHFlE4uvttMzkPfK+RYgeHNp
GBXls+PRiKyxGJUqFYkZdBvqJwleLJiGzmyaUd6xEL4E2svEWds/G/2DR1sP9yg0
dWda0P+Vz8MbWP9D7V6VO7zxplbXdj0JsLCNSdlwxZIwflKh/eiG8dJFdr5jc9XI
whkVFx8rN+F9Rn0TDKJ/yycCP52poHitUIkLZphlOEZOZJ48QKUsgpBZMZYnpP/Q
uSl3on6eUSlJrMbqytr6UZKp+oSxOP4Z2LqNl4sdhL1UhjyXp/OO1b0Xa2PJjH83
cYzRfnoHvY4Pl7Qf5rAtf969/kle1Fy/apoT7xvgvYWR4WdoazO83LHQhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiwCPpR/iwGbJnhmv3D+LMVpf6CMB8GA1UdIwQY
MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt
ZjY0N2M1MGMyMWE1LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1
LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQu19k125
oqtftdXkyn8jCoosRTrMRRFzoTQBlVircgXASyooJrpDt2Ws0o1BICGsQxWCcqXs
kdcwkK3rJpB5yMIyBnx+cts8rDCkBCt1JObqH+9RJbRTrA1HUzhgpBY/3mga6Gli
d3VYvrhZlsYrvzeeVigtCFROg9j4+0sYgzQa9Eikre/oM4DD0dhU9Xh8OsccZHWw
4QSPRLk4rBcOP7NiMX895znpll4l7aZldhf8ecpKnOfP3WBLjFTjkoC9eIqA0gP4
T/ptaFDHin1IdmnF2JscvkC++6zwzUJcs5tePPrLcxC3OLu0cPa9nFzePT4mIAf9
H/HOrwccbT3lhw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:46:48 2026 by rpki-client