Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: kWo3oJj3HBDHjRo8Or0Z3BYGy7SpF0wCYLq9D+bdhzQ=
Subject key identifier: 0C:D4:6E:35:44:D3:84:F2:CC:10:9D:80:6B:B3:50:AB:9A:EE:C0:86
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 01A134EC2DBEA61D36C2E8F7CE2732E775DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 12CE
Signing time: Tue 13 Oct 2026 11:00:55 +0000
Manifest this update: Tue 13 Oct 2026 11:00:55 +0000
Manifest next update: Wed 14 Oct 2026 11:00:55 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: aKPmoLZYz+xb+SIJYbK8TxfyBxjwZZXE6MMAQbrZFKQ=)
2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:2d:be:a6:1d:36:c2:e8:f7:ce:27:32:e7:75:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Oct 13 11:00:55 2026 GMT
Not After : Oct 14 11:00:55 2026 GMT
Subject: CN=0cd46e3544d384f2cc109d806bb350ab9aeec086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:24:03:55:6a:e5:7a:8c:4a:34:18:e9:2d:
d4:e1:27:c2:80:59:e4:0f:c1:37:39:0f:15:76:4c:
81:b0:e4:68:2d:83:5c:d6:35:81:1b:6c:f4:87:ba:
04:15:d2:c0:85:97:9b:a2:84:68:1a:44:9c:a7:d9:
2a:26:0b:ab:fd:1e:bf:47:37:4e:ed:44:d8:15:80:
f4:50:17:91:6a:45:fa:6c:bc:86:b0:69:9b:ec:f4:
87:7d:31:5e:96:67:de:7a:82:e8:b0:20:25:2a:cb:
0d:6f:0f:02:05:2c:22:a7:c6:51:93:59:03:d6:76:
ab:62:bf:d4:d8:99:5b:cf:5e:c4:04:31:5d:a9:1a:
ed:db:57:8b:0b:df:63:d1:9b:de:84:be:57:a7:78:
7c:06:48:76:dc:59:72:38:79:e4:1f:97:ed:12:1b:
ac:f6:68:f2:6d:e4:6c:ca:96:7a:c3:68:4f:87:a9:
73:03:28:d6:05:40:2c:1d:42:45:49:10:95:70:c3:
6e:6b:ae:5e:cb:0e:02:24:5f:04:fe:21:10:d9:9b:
37:fe:4c:6a:a6:f3:a9:d9:18:fa:54:aa:0a:8d:64:
e9:b7:a0:48:67:1d:4b:13:62:bf:63:2b:26:3a:a6:
b1:3b:62:95:eb:aa:36:0f:c4:f9:fe:3d:e1:3a:6a:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D4:6E:35:44:D3:84:F2:CC:10:9D:80:6B:B3:50:AB:9A:EE:C0:86
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:95:8e:23:e4:da:3e:06:06:83:ca:b3:cb:8b:92:41:5b:72:
70:a9:6f:9c:76:d4:b7:95:91:6b:a5:48:ff:3f:3a:ff:ca:9c:
28:43:1f:63:cf:fe:62:4f:b8:d0:b7:28:ea:42:33:ca:97:f9:
c7:59:56:4b:bc:52:26:89:d3:e0:c5:41:5d:4a:9f:82:7c:31:
80:8c:e6:8a:06:93:f5:a9:c0:1b:ea:c2:48:c6:18:da:f9:ea:
e7:57:a6:c9:1e:29:87:6c:81:6e:1b:23:6d:93:4c:eb:aa:fd:
00:9c:9d:2e:91:6b:66:af:43:cb:b2:7f:e4:97:db:9a:96:d0:
04:90:82:51:ce:8e:3d:ba:58:99:42:42:ff:93:12:36:45:11:
30:18:74:d8:b3:54:60:65:d3:4d:51:81:a2:a6:10:fb:4c:a7:
03:96:de:65:ba:8c:ed:cc:27:0b:98:3c:0d:4f:ae:2a:56:68:
63:86:7f:5a:26:01:80:0b:2e:5a:3a:36:4e:05:e0:4d:e0:c3:
ff:ed:70:ff:a4:bf:76:87:4b:8b:7d:ee:92:bf:47:42:a4:77:
fa:6f:0a:1e:58:2f:4e:43:bb:6c:87:50:a5:df:25:3e:47:0d:
22:39:d6:7e:6b:a6:b7:87:07:52:07:60:d1:c1:7d:3d:9b:bb:
d3:eb:cc:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE07C2+ph02wuj3zicy53XcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw
YTg3YTQwHhcNMjYxMDEzMTEwMDU1WhcNMjYxMDE0MTEwMDU1WjAzMTEwLwYDVQQD
EygwY2Q0NmUzNTQ0ZDM4NGYyY2MxMDlkODA2YmIzNTBhYjlhZWVjMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JkkA1Vq5XqMSjQY6S3U4SfCgFnk
D8E3OQ8VdkyBsORoLYNc1jWBG2z0h7oEFdLAhZebooRoGkScp9kqJgur/R6/RzdO
7UTYFYD0UBeRakX6bLyGsGmb7PSHfTFelmfeeoLosCAlKssNbw8CBSwip8ZRk1kD
1narYr/U2Jlbz17EBDFdqRrt21eLC99j0ZvehL5Xp3h8Bkh23FlyOHnkH5ftEhus
9mjybeRsypZ6w2hPh6lzAyjWBUAsHUJFSRCVcMNua65eyw4CJF8E/iEQ2Zs3/kxq
pvOp2Rj6VKoKjWTpt6BIZx1LE2K/YysmOqaxO2KV66o2D8T5/j3hOmpBtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzUbjVE04TyzBCdgGuzUKua7sCGMB8GA1UdIwQY
MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt
OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi
LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpWOI+Ta
PgYGg8qzy4uSQVtycKlvnHbUt5WRa6VI/z86/8qcKEMfY8/+Yk+40Lco6kIzypf5
x1lWS7xSJonT4MVBXUqfgnwxgIzmigaT9anAG+rCSMYY2vnq51emyR4ph2yBbhsj
bZNM66r9AJydLpFrZq9Dy7J/5JfbmpbQBJCCUc6OPbpYmUJC/5MSNkURMBh02LNU
YGXTTVGBoqYQ+0ynA5beZbqM7cwnC5g8DU+uKlZoY4Z/WiYBgAsuWjo2TgXgTeDD
/+1w/6S/dodLi33ukr9HQqR3+m8KHlgvTkO7bIdQpd8lPkcNIjnWfmumt4cHUgdg
0cF9PZu70+vMfA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:26:46 2026 by rpki-client