Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: CNo5nFQ5N4IbcMrno0/GZooA3w2Cej4dHjf0unCBW2Q=
Subject key identifier: BB:4D:1B:89:62:74:3D:E1:06:90:25:CD:4D:5A:DC:B7:42:8F:AA:0D
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 019F84556E4E73382B8FAB364CC10F845B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 083D
Signing time: Tue 21 Jul 2026 11:00:18 +0000
Manifest this update: Tue 21 Jul 2026 11:00:18 +0000
Manifest next update: Wed 22 Jul 2026 11:00:18 +0000
Files and hashes: 1: V7dSFe54YguWMOBd5igSa3CG0jM.roa (hash: rMSDIp9OV5dVl6Akl8E0YEDyEMw4raUR7F/H+734+DI=)
2: pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa (hash: sH0uhgJw4LrCTAOetXBWIMlVqm3VIDbyxnZ0hMsIubE=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: fM5WOmvo6nMSVyIQGwH7SV94BJVjrauoechhq7Py6Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:6e:4e:73:38:2b:8f:ab:36:4c:c1:0f:84:5b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Jul 21 11:00:18 2026 GMT
Not After : Jul 22 11:00:18 2026 GMT
Subject: CN=bb4d1b8962743de1069025cd4d5adcb7428faa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:a0:e4:bd:32:ab:7f:9c:70:dd:57:42:63:
30:5d:05:bb:01:6d:80:21:49:d9:cb:3e:52:e3:c0:
57:33:de:b9:bc:a8:90:f6:fa:d9:c2:27:c4:9e:a2:
b7:a3:9c:8f:af:ca:be:44:97:a4:c6:62:39:6d:67:
f3:e8:fd:29:3e:dd:ff:50:f2:76:0d:25:64:ba:6d:
e1:17:4b:7f:99:20:2d:13:13:a6:15:ee:c5:be:a2:
aa:25:a2:57:c3:0c:9a:fe:44:57:87:da:0a:71:94:
05:7e:30:39:4e:2d:09:8b:d5:78:a1:83:25:71:fb:
de:27:f4:e4:56:1f:b4:c7:5b:ab:89:35:35:a1:35:
61:e7:60:6d:82:4f:fc:23:01:bd:70:c9:07:29:bc:
1b:34:ac:62:0d:e0:7d:b1:7b:c8:0b:02:ea:7d:ff:
19:ad:fc:7a:ea:8c:5f:b4:45:c4:83:88:fa:65:56:
29:df:5d:1b:b5:77:65:d2:0b:98:ab:4e:56:3e:7c:
08:55:cb:ea:f4:49:64:08:3f:64:56:a2:60:d6:51:
8e:e0:0b:79:89:d7:b8:ab:52:54:68:f2:4c:7d:84:
3f:fb:5b:60:f7:1f:9b:c1:da:a0:88:81:7d:fd:a7:
54:5e:fb:7f:89:08:a2:16:0f:0a:e1:ec:f1:bc:96:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4D:1B:89:62:74:3D:E1:06:90:25:CD:4D:5A:DC:B7:42:8F:AA:0D
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6c:90:98:ab:c9:1b:38:90:ae:44:33:ea:fc:e5:43:ec:9b:
2b:28:4f:59:72:86:7f:22:d2:38:65:54:94:4e:00:5d:a8:4a:
20:00:63:5c:ae:14:36:af:d7:19:c9:0d:03:3f:58:c8:c3:92:
fb:2c:17:43:89:cd:6d:a7:d5:05:08:15:32:a4:e7:9d:f4:88:
ef:bf:b6:d3:48:90:ec:6e:6b:35:31:03:1a:ee:0d:3f:e6:e5:
eb:d5:b1:14:4d:21:5d:3a:e6:8f:3c:27:c7:16:b3:ed:f7:ed:
33:3e:22:ae:fa:6a:5a:fd:d1:c5:54:b7:14:d0:e3:42:6f:7a:
d6:f8:50:37:94:bd:0a:ae:2c:08:9c:8d:48:ee:54:80:cc:b1:
34:05:71:88:2a:bd:16:16:0c:b2:8d:9d:29:b9:46:a2:4a:dc:
5f:2f:dd:bc:0a:46:c8:2b:18:a9:b0:bd:68:41:fe:8e:82:74:
16:29:97:57:9a:d8:25:b3:75:aa:4e:79:3e:a6:41:0b:07:b9:
57:41:d8:46:55:5a:ea:f6:dc:36:9d:9c:f0:36:9b:b3:84:3d:
2e:da:76:5c:78:90:8a:d7:bf:a7:15:d6:6e:2e:83:9b:a0:9d:
8b:d5:bd:be:d9:0d:09:12:3e:5b:fa:ba:6f:aa:a1:ca:82:3a:
45:ac:48:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVW5Oczgrj6s2TMEPhFtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWIyYzYwMWZhNmQwNzUwNzk3MzA4MWZhYTEzMjVmZTE5
MGIyNzYwHhcNMjYwNzIxMTEwMDE4WhcNMjYwNzIyMTEwMDE4WjAzMTEwLwYDVQQD
EyhiYjRkMWI4OTYyNzQzZGUxMDY5MDI1Y2Q0ZDVhZGNiNzQyOGZhYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy42g5L0yq3+ccN1XQmMwXQW7AW2A
IUnZyz5S48BXM965vKiQ9vrZwifEnqK3o5yPr8q+RJekxmI5bWfz6P0pPt3/UPJ2
DSVkum3hF0t/mSAtExOmFe7FvqKqJaJXwwya/kRXh9oKcZQFfjA5Ti0Ji9V4oYMl
cfveJ/TkVh+0x1uriTU1oTVh52Btgk/8IwG9cMkHKbwbNKxiDeB9sXvICwLqff8Z
rfx66oxftEXEg4j6ZVYp310btXdl0guYq05WPnwIVcvq9ElkCD9kVqJg1lGO4At5
ide4q1JUaPJMfYQ/+1tg9x+bwdqgiIF9/adUXvt/iQiiFg8K4ezxvJYZmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtNG4lidD3hBpAlzU1a3LdCj6oNMB8GA1UdIwQY
MBaAFMHrLGAfptB1B5cwgfqhMl/hkLJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEt
OTBlZjdiZGExZGMzLzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEtOTBlZjdiZGExZGMz
LzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmyQmKvJ
GziQrkQz6vzlQ+ybKyhPWXKGfyLSOGVUlE4AXahKIABjXK4UNq/XGckNAz9YyMOS
+ywXQ4nNbafVBQgVMqTnnfSI77+200iQ7G5rNTEDGu4NP+bl69WxFE0hXTrmjzwn
xxaz7fftMz4irvpqWv3RxVS3FNDjQm961vhQN5S9Cq4sCJyNSO5UgMyxNAVxiCq9
FhYMso2dKblGokrcXy/dvApGyCsYqbC9aEH+joJ0FimXV5rYJbN1qk55PqZBCwe5
V0HYRlVa6vbcNp2c8Dabs4Q9Ltp2XHiQite/pxXWbi6Dm6Cdi9W9vtkNCRI+W/q6
b6qhyoI6RaxIlQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:10:25 2026 by rpki-client