Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: QgZShQedRqlKoResmj2aj+d5mikb2PilMAfQplmc//I=
Subject key identifier: A4:45:16:6C:B8:F7:E0:88:7A:0B:40:26:9A:17:DA:D6:CD:DF:3F:C0
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019EED461D63282A40B29A1FB4B1304DDA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0ECB
Signing time: Mon 22 Jun 2026 03:00:55 +0000
Manifest this update: Mon 22 Jun 2026 03:00:55 +0000
Manifest next update: Tue 23 Jun 2026 03:00:55 +0000
Files and hashes: 1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: iBJVS8Azrs2lL8F20srfEmQgSHdunr4zyUKXfMu1UDI=)
3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:46:1d:63:28:2a:40:b2:9a:1f:b4:b1:30:4d:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Jun 22 03:00:55 2026 GMT
Not After : Jun 23 03:00:55 2026 GMT
Subject: CN=a445166cb8f7e0887a0b40269a17dad6cddf3fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:d5:2d:7c:4a:25:c3:29:3a:58:6c:3a:2c:
f3:12:fb:3d:3e:5d:c0:d8:28:23:45:2e:db:31:0e:
01:a3:d5:be:c7:1d:58:29:d5:f3:ee:9b:ae:a1:30:
04:86:a3:77:81:20:c1:06:6c:47:f4:1f:ed:e7:0c:
3f:d1:40:2e:11:4d:7a:30:a5:3f:c4:52:f4:d1:72:
24:03:9b:55:14:28:9e:ed:be:24:7d:68:50:88:3b:
f1:f9:1a:43:fd:a1:6f:3b:ab:4d:60:15:56:0e:21:
08:ee:4a:9a:d3:85:d5:bb:97:46:52:5e:b8:ad:1c:
02:19:7b:49:94:76:36:7e:06:71:a3:7b:bc:df:cb:
30:ad:c7:fa:d9:2a:b4:40:ae:4b:26:75:3d:81:9b:
12:a9:1a:4c:70:14:ce:a1:0c:ef:d5:07:cd:0e:c1:
5d:a3:3d:bd:93:89:1a:94:6e:1b:92:7a:fa:c3:07:
cd:8a:f6:88:65:64:61:0c:a1:28:8d:c0:74:78:90:
55:98:57:93:83:11:00:bc:11:1d:f4:ba:bd:2b:18:
fa:8d:26:88:f8:3f:d9:47:00:80:43:f1:45:c3:0c:
53:59:05:85:07:95:20:42:66:a6:68:46:78:c3:66:
1f:6c:09:f7:6e:da:80:14:f3:57:d4:84:d9:53:ab:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:45:16:6C:B8:F7:E0:88:7A:0B:40:26:9A:17:DA:D6:CD:DF:3F:C0
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:de:8c:38:0f:f6:12:7b:cf:50:4c:a1:01:05:89:cf:3c:
a8:5e:40:bf:0e:ac:bb:72:9b:d1:db:65:33:51:ec:49:c2:35:
04:a0:70:31:9e:11:5e:d0:98:ec:23:14:ba:d7:da:fd:cc:a0:
ee:fa:79:78:45:ae:a7:52:fd:a3:2b:bc:56:3c:1a:0d:0e:d4:
49:c4:b8:dd:90:01:11:81:83:f2:fe:78:16:85:ff:28:20:5b:
fc:17:bd:e3:b1:ac:a1:3a:b6:61:7d:d3:d1:53:0e:3e:58:de:
ee:a3:c4:ab:0d:31:4b:d6:bf:d8:35:b8:0d:e5:19:70:dc:d5:
bb:c7:74:7c:5c:19:69:bb:5b:88:0e:b3:d2:25:02:6b:7c:f4:
96:0e:94:a9:cd:48:66:ab:ee:40:71:9d:f1:7e:ce:d1:b6:70:
ef:07:83:5c:04:a9:bb:78:9d:d5:c2:14:ad:54:b5:8b:ee:0f:
c6:e4:58:5f:0d:48:60:32:18:62:73:d5:24:63:5b:9e:95:a6:
7b:98:95:cd:54:6c:5c:51:9e:b5:1e:f4:8f:19:f8:a1:88:d0:
00:3c:e3:0c:37:d3:2a:80:2d:72:29:58:a6:53:60:57:c0:64:
44:d1:c2:17:1f:01:4b:54:40:bc:b7:1a:f2:39:14:1b:be:38:
89:d9:d9:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7tRh1jKCpAspoftLEwTdouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz
NWZiZjEwHhcNMjYwNjIyMDMwMDU1WhcNMjYwNjIzMDMwMDU1WjAzMTEwLwYDVQQD
EyhhNDQ1MTY2Y2I4ZjdlMDg4N2EwYjQwMjY5YTE3ZGFkNmNkZGYzZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlTVLXxKJcMpOlhsOizzEvs9Pl3A
2CgjRS7bMQ4Bo9W+xx1YKdXz7puuoTAEhqN3gSDBBmxH9B/t5ww/0UAuEU16MKU/
xFL00XIkA5tVFCie7b4kfWhQiDvx+RpD/aFvO6tNYBVWDiEI7kqa04XVu5dGUl64
rRwCGXtJlHY2fgZxo3u838swrcf62Sq0QK5LJnU9gZsSqRpMcBTOoQzv1QfNDsFd
oz29k4kalG4bknr6wwfNivaIZWRhDKEojcB0eJBVmFeTgxEAvBEd9Lq9Kxj6jSaI
+D/ZRwCAQ/FFwwxTWQWFB5UgQmamaEZ4w2YfbAn3btqAFPNX1ITZU6uHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRFFmy49+CIegtAJpoX2tbN3z/AMB8GA1UdIwQY
MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt
NmJhZjMwMDc5MDVjLzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj
LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2PejDgP
9hJ7z1BMoQEFic88qF5Avw6su3Kb0dtlM1HsScI1BKBwMZ4RXtCY7CMUutfa/cyg
7vp5eEWup1L9oyu8VjwaDQ7UScS43ZABEYGD8v54FoX/KCBb/Be947GsoTq2YX3T
0VMOPlje7qPEqw0xS9a/2DW4DeUZcNzVu8d0fFwZabtbiA6z0iUCa3z0lg6Uqc1I
ZqvuQHGd8X7O0bZw7weDXASpu3id1cIUrVS1i+4PxuRYXw1IYDIYYnPVJGNbnpWm
e5iVzVRsXFGetR70jxn4oYjQADzjDDfTKoAtcilYplNgV8BkRNHCFx8BS1RAvLca
8jkUG744idnZ3g==
-----END CERTIFICATE-----
Generated at Mon Jun 22 11:07:29 2026 by rpki-client