Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: LXSyzBkCmrWBuURs4f4y0Ar1jUmKyNwTmnT+tTrk3pw=
Subject key identifier: 93:56:06:8E:03:08:FB:E1:2E:5A:E9:3C:12:46:E7:29:FD:F5:18:ED
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019F8643CCB35FF505FD6F06C17D8685702C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 133F
Signing time: Tue 21 Jul 2026 20:00:17 +0000
Manifest this update: Tue 21 Jul 2026 20:00:17 +0000
Manifest next update: Wed 22 Jul 2026 20:00:17 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: zmcHDYEIwRFCAohsClzmXE/wVMtqqHYf10avo/t1/wM=)
2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:43:cc:b3:5f:f5:05:fd:6f:06:c1:7d:86:85:70:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Jul 21 20:00:17 2026 GMT
Not After : Jul 22 20:00:17 2026 GMT
Subject: CN=9356068e0308fbe12e5ae93c1246e729fdf518ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:b7:cf:93:dd:c9:48:df:fa:f9:0c:e3:b4:
cf:48:68:b6:11:a7:90:35:46:cb:c4:97:b0:12:b3:
7d:84:ba:c4:d3:b7:6f:58:dd:af:9c:32:fa:06:35:
b7:68:10:4f:8a:3e:cf:d6:ea:c0:b5:2a:26:81:88:
41:84:f1:87:9b:6f:74:95:c4:96:aa:35:93:ca:b0:
f2:36:2e:5d:20:26:fc:53:d6:19:4b:6d:89:20:ca:
b3:d3:93:f3:ac:b1:7c:24:37:79:e0:22:6e:be:6f:
81:d2:83:03:d8:d4:c9:17:b2:fc:ed:10:b9:3a:c6:
26:bc:56:9e:32:2e:6b:8f:b2:29:34:a4:a8:a6:a4:
fc:31:20:cf:fa:65:d4:f1:73:c1:e3:de:26:60:3c:
49:6e:1f:86:34:98:13:b8:a8:89:91:7d:33:75:c8:
90:84:e1:40:5e:d0:55:3f:bc:50:ee:26:df:78:eb:
66:46:a5:03:99:c8:f1:f5:a0:b6:f9:91:62:a6:a1:
e6:71:da:0d:bb:bc:da:51:9b:56:26:b1:a8:da:d6:
4e:6f:15:e7:f4:e4:18:ab:8c:16:d8:a2:f5:60:ee:
95:71:8d:d6:fa:82:3e:0e:73:1c:be:af:cf:e9:2e:
da:ec:eb:62:b6:d9:3e:a5:9c:20:cd:b4:14:b6:8b:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:56:06:8E:03:08:FB:E1:2E:5A:E9:3C:12:46:E7:29:FD:F5:18:ED
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:88:e6:04:85:52:ff:0f:ab:9c:03:11:1d:cf:cf:45:30:
62:21:de:cf:92:ab:99:b9:42:0a:ca:04:2b:35:9f:07:49:c0:
82:de:bd:3a:01:2b:3c:e6:e2:61:7c:a2:08:1e:ca:f8:29:3b:
34:2b:40:8a:65:20:c4:f1:26:7c:26:f7:f1:bc:c1:8d:de:d1:
0f:87:66:94:0b:be:d8:6c:fa:9c:18:dc:3f:d9:ba:f7:3a:87:
3d:1d:23:c7:f4:0d:83:99:50:61:69:5b:e6:60:a8:b1:fd:44:
28:f1:2d:f1:f8:85:5f:ca:50:aa:2a:4d:7e:bd:c8:66:51:7e:
ea:58:87:d6:01:73:f0:a0:46:11:fa:95:aa:05:29:b9:fe:f4:
98:af:e3:c3:78:11:9e:3c:01:45:b8:25:c8:e9:6d:8f:e4:0f:
98:42:6f:28:91:68:62:7e:a9:52:7e:f9:87:f2:23:3f:44:c0:
61:fc:ca:05:84:89:1b:49:17:54:01:d3:f1:2e:05:33:3c:5b:
3d:f6:4f:ea:d5:ef:2c:f0:f8:f5:07:8e:2d:dd:fa:37:74:7d:
7a:a7:ce:51:56:89:4e:57:f8:be:f3:c4:3c:34:a1:0f:5f:74:
0f:b1:d7:4a:11:d6:34:8e:71:01:8e:22:2f:f9:e2:f3:7f:4e:
db:87:c4:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GQ8yzX/UF/W8GwX2GhXAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3
MmViZWYwHhcNMjYwNzIxMjAwMDE3WhcNMjYwNzIyMjAwMDE3WjAzMTEwLwYDVQQD
Eyg5MzU2MDY4ZTAzMDhmYmUxMmU1YWU5M2MxMjQ2ZTcyOWZkZjUxOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb+3z5PdyUjf+vkM47TPSGi2EaeQ
NUbLxJewErN9hLrE07dvWN2vnDL6BjW3aBBPij7P1urAtSomgYhBhPGHm290lcSW
qjWTyrDyNi5dICb8U9YZS22JIMqz05PzrLF8JDd54CJuvm+B0oMD2NTJF7L87RC5
OsYmvFaeMi5rj7IpNKSopqT8MSDP+mXU8XPB494mYDxJbh+GNJgTuKiJkX0zdciQ
hOFAXtBVP7xQ7ibfeOtmRqUDmcjx9aC2+ZFipqHmcdoNu7zaUZtWJrGo2tZObxXn
9OQYq4wW2KL1YO6VcY3W+oI+DnMcvq/P6S7a7Otittk+pZwgzbQUtovSkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNWBo4DCPvhLlrpPBJG5yn99RjtMB8GA1UdIwQY
MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt
OWM3MDhkYWMxZDkyLzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky
LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbqI5gSF
Uv8Pq5wDER3Pz0UwYiHez5KrmblCCsoEKzWfB0nAgt69OgErPObiYXyiCB7K+Ck7
NCtAimUgxPEmfCb38bzBjd7RD4dmlAu+2Gz6nBjcP9m69zqHPR0jx/QNg5lQYWlb
5mCosf1EKPEt8fiFX8pQqipNfr3IZlF+6liH1gFz8KBGEfqVqgUpuf70mK/jw3gR
njwBRbglyOltj+QPmEJvKJFoYn6pUn75h/IjP0TAYfzKBYSJG0kXVAHT8S4FMzxb
PfZP6tXvLPD49QeOLd36N3R9eqfOUVaJTlf4vvPEPDShD190D7HXShHWNI5xAY4i
L/ni839O24fEiw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:56:39 2026 by rpki-client