Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: mFZ5o5ae/errJcX4fV7oVY5Ue00I65eyIh0RLyzxSdY=
Subject key identifier: 53:14:EF:C3:DB:2D:D0:99:DC:52:6B:4E:5E:68:D7:AA:B9:2B:86:86
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 019EB6FC17CC8FFA7A4F2AF255E3F474D979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 14:00:34 +0000
Manifest this update: Thu 11 Jun 2026 14:00:34 +0000
Manifest next update: Fri 12 Jun 2026 14:00:34 +0000
Files and hashes: 1: ch32gMkwgIvhncaw2j6_w1rWqBM.roa (hash: 2zNuBXW5TRNjyq7/jYrllStnRO2aSpxPfwq4qZw6++Y=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: XcjdSTOlfnVfIYznOaTwBViTCIa/FiLxbPjuhPylmCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:17:cc:8f:fa:7a:4f:2a:f2:55:e3:f4:74:d9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Jun 11 14:00:34 2026 GMT
Not After : Jun 12 14:00:34 2026 GMT
Subject: CN=5314efc3db2dd099dc526b4e5e68d7aab92b8686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:39:e9:d4:08:46:93:0d:9f:d1:83:17:50:
02:0f:4c:d7:95:9f:b7:8d:f6:78:41:89:94:fe:b2:
ee:7e:cf:8a:66:02:4e:01:66:65:0e:8e:b9:9d:e6:
73:50:1d:85:5d:87:bd:8b:74:71:9d:2f:a6:1a:2a:
ad:1d:29:0f:4e:96:89:59:db:53:ef:ae:55:43:34:
48:6e:a6:65:1e:1c:6f:90:9a:5a:98:da:b6:b0:7b:
fe:1b:55:e3:cc:b5:d8:74:4b:85:2f:a7:86:be:0b:
b2:00:66:c4:4c:a2:eb:2d:89:7f:fb:23:fc:a3:a3:
40:ef:09:f3:b8:99:bb:59:68:d9:a9:b3:7a:72:28:
83:41:78:d5:00:9b:bb:de:33:4b:c8:74:9c:5d:a0:
03:a4:81:e0:f3:50:5f:6e:ff:43:2c:e1:fb:2a:ae:
41:2a:70:bf:04:80:0d:97:9b:f5:f0:d5:c4:c7:2c:
ee:98:bc:34:2d:fb:f6:5e:3c:11:80:d7:a1:f6:39:
f6:d8:9f:a4:f8:95:52:7d:05:05:9e:3c:4b:5b:05:
f8:5b:e8:72:90:2a:15:6b:5a:56:e6:81:78:4c:c2:
33:22:51:09:b7:63:bc:1d:db:08:86:64:a6:7b:db:
79:91:78:4f:ac:72:ae:fe:38:69:ea:38:99:84:4e:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:14:EF:C3:DB:2D:D0:99:DC:52:6B:4E:5E:68:D7:AA:B9:2B:86:86
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8c:f7:24:26:1c:39:6f:c3:76:43:4e:2c:22:e4:41:36:4e:
18:80:aa:ab:42:db:8b:34:06:92:c1:5b:30:8f:e2:05:11:30:
33:7c:14:da:5b:77:ec:c6:8c:cc:b2:4c:5d:d0:a5:1c:fb:9d:
55:e2:5a:6c:c8:c8:e7:7b:0c:1b:fd:a0:81:0d:46:d9:ec:f2:
fa:39:d5:98:17:16:81:86:2a:c3:de:e6:22:93:65:bc:cc:55:
40:10:bd:d7:41:bb:fd:64:b0:ca:65:fb:30:60:c0:be:3d:3e:
35:21:09:4b:f5:d7:f4:7f:e7:4f:b5:67:1e:1a:44:55:8e:6a:
91:a6:16:79:9f:dd:bc:3c:d5:f5:06:49:4d:ef:ad:b9:fd:72:
6e:1c:ef:58:08:fc:27:72:27:fe:f1:17:49:cd:f7:ca:d7:e3:
de:55:19:71:8c:3a:b8:28:11:dc:07:16:45:fb:e2:21:41:b5:
3d:a2:58:db:01:aa:74:ec:80:82:1b:bd:c2:69:8f:08:4c:c6:
15:7c:aa:92:7d:31:1b:ef:96:73:f4:b5:29:e2:81:23:9a:19:
b4:d0:97:67:55:ca:7d:24:c7:6b:33:bb:71:07:6a:91:26:c0:
6b:7c:0e:18:91:c9:7c:0e:f8:92:49:27:3e:6d:e1:4e:a4:a4:
c7:27:7a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62/BfMj/p6TyryVeP0dNl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOWI1YTJjNDllMWM2NDhhNzBjNzA4YWUxYmRlNDBiNjQ0
Yzc4MDIwHhcNMjYwNjExMTQwMDM0WhcNMjYwNjEyMTQwMDM0WjAzMTEwLwYDVQQD
Eyg1MzE0ZWZjM2RiMmRkMDk5ZGM1MjZiNGU1ZTY4ZDdhYWI5MmI4Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkk56dQIRpMNn9GDF1ACD0zXlZ+3
jfZ4QYmU/rLufs+KZgJOAWZlDo65neZzUB2FXYe9i3RxnS+mGiqtHSkPTpaJWdtT
765VQzRIbqZlHhxvkJpamNq2sHv+G1XjzLXYdEuFL6eGvguyAGbETKLrLYl/+yP8
o6NA7wnzuJm7WWjZqbN6ciiDQXjVAJu73jNLyHScXaADpIHg81Bfbv9DLOH7Kq5B
KnC/BIANl5v18NXExyzumLw0Lfv2XjwRgNeh9jn22J+k+JVSfQUFnjxLWwX4W+hy
kCoVa1pW5oF4TMIzIlEJt2O8HdsIhmSme9t5kXhPrHKu/jhp6jiZhE4x2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMU78PbLdCZ3FJrTl5o16q5K4aGMB8GA1UdIwQY
MBaAFMGbWixJ4cZIpwxwiuG95AtkTHgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQt
M2Q0NjFkYWRlNGE5LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQtM2Q0NjFkYWRlNGE5
LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYz3JCYc
OW/DdkNOLCLkQTZOGICqq0LbizQGksFbMI/iBREwM3wU2lt37MaMzLJMXdClHPud
VeJabMjI53sMG/2ggQ1G2ezy+jnVmBcWgYYqw97mIpNlvMxVQBC910G7/WSwymX7
MGDAvj0+NSEJS/XX9H/nT7VnHhpEVY5qkaYWeZ/dvDzV9QZJTe+tuf1ybhzvWAj8
J3In/vEXSc33ytfj3lUZcYw6uCgR3AcWRfviIUG1PaJY2wGqdOyAghu9wmmPCEzG
FXyqkn0xG++Wc/S1KeKBI5oZtNCXZ1XKfSTHazO7cQdqkSbAa3wOGJHJfA74kkkn
Pm3hTqSkxyd6Yg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:56:33 2026 by rpki-client