Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: f4LpVC3SgFZ/vr9fporPQvrzP2Qsfh7Pilw53TikWTc=
Subject key identifier: 45:D1:AA:66:61:54:99:E9:B6:D9:62:B9:17:E9:C7:05:32:B5:E1:80
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 019F13E66218FCCBE0584CC9D62584AAC6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 0935
Signing time: Mon 29 Jun 2026 15:01:33 +0000
Manifest this update: Mon 29 Jun 2026 15:01:33 +0000
Manifest next update: Tue 30 Jun 2026 15:01:33 +0000
Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: Q4RhYTiZLNXLJt7yTs3prx2MDpgxSRhHCOVZkohCULU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e6:62:18:fc:cb:e0:58:4c:c9:d6:25:84:aa:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Jun 29 15:01:33 2026 GMT
Not After : Jun 30 15:01:33 2026 GMT
Subject: CN=45d1aa66615499e9b6d962b917e9c70532b5e180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:10:3c:7f:10:73:77:e1:bd:5d:96:64:40:
1f:1b:6a:e8:7a:48:de:24:0d:58:d2:1e:9d:95:90:
69:93:9b:5e:d0:a7:2f:20:09:0e:14:7d:72:cb:3f:
bc:be:f6:90:fa:e7:e0:00:35:4f:3f:66:83:a0:e6:
44:c6:b2:4d:d5:d0:42:af:55:db:b7:a8:74:05:f9:
a6:66:fc:a7:b9:cf:d9:94:7f:9b:64:47:bf:0a:6b:
66:34:7a:12:fc:5b:21:a4:5c:32:8b:1e:fb:12:1f:
24:82:c4:88:df:f6:5e:1a:4a:03:62:20:e5:db:4b:
69:4f:05:55:95:ce:73:53:34:62:35:2b:7a:55:61:
fd:38:67:c2:f3:07:b4:b6:04:dc:9e:3d:c3:a7:ad:
91:2b:47:5a:d7:d2:a6:d9:95:ca:dd:e8:bf:20:30:
2a:c9:da:a5:d1:e0:9b:bc:40:b0:c8:9a:42:67:1d:
b8:a8:5c:6c:23:a5:ac:5c:07:92:c7:94:a5:de:be:
eb:4b:c7:26:a4:74:89:79:8e:2a:27:05:01:17:17:
1b:cb:67:b9:62:bd:f3:b5:d6:ff:df:23:b2:d2:e8:
12:e3:88:c8:22:ce:6d:6a:49:64:ac:9f:db:4e:b7:
0a:40:00:17:17:de:83:98:40:97:10:e9:13:73:df:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D1:AA:66:61:54:99:E9:B6:D9:62:B9:17:E9:C7:05:32:B5:E1:80
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ee:57:3c:6a:30:ed:18:ec:15:7f:96:54:10:54:b0:62:93:
3b:5e:d1:39:69:53:d7:41:23:a3:60:a5:d6:8c:d3:e2:aa:37:
52:a1:ca:bd:1a:5d:b3:5f:a8:cf:42:2c:6c:49:e8:ae:fd:e8:
0a:ec:d5:53:24:fe:8f:6f:70:e5:be:6a:c4:c1:65:32:e6:88:
36:b0:c8:85:62:d0:19:d8:15:d2:0d:88:c0:33:d0:e8:8a:a7:
92:89:e9:da:71:5a:5a:03:66:c4:83:a7:00:af:c0:c4:fa:db:
02:f3:d9:6e:2f:98:21:ea:cc:c1:f2:2a:f7:5e:a4:4d:3b:90:
42:9e:2a:36:14:1c:fd:3c:77:86:f8:6e:94:a0:36:0a:d0:89:
ad:05:7f:bf:2a:fe:de:d2:e2:3a:4c:f3:ce:41:3f:c4:ec:cc:
25:62:35:be:df:0e:58:eb:71:e3:8d:63:03:1e:7c:8c:f5:54:
4e:7c:3a:8d:a9:fb:2e:5a:4c:ab:78:82:d6:98:85:87:df:4f:
0c:1c:5f:0f:e4:aa:1e:36:2e:9d:81:51:89:3e:a3:4d:2b:e8:
4d:bb:44:09:43:d9:4f:7e:e0:ce:25:6b:e9:a4:8d:fb:9c:fb:
a4:cb:bf:7d:6a:df:4c:ed:87:0b:26:93:7b:ef:8c:31:81:a0:
62:ea:97:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8T5mIY/MvgWEzJ1iWEqsbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk
ZTVjMGEwHhcNMjYwNjI5MTUwMTMzWhcNMjYwNjMwMTUwMTMzWjAzMTEwLwYDVQQD
Eyg0NWQxYWE2NjYxNTQ5OWU5YjZkOTYyYjkxN2U5YzcwNTMyYjVlMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CIQPH8Qc3fhvV2WZEAfG2roekje
JA1Y0h6dlZBpk5te0KcvIAkOFH1yyz+8vvaQ+ufgADVPP2aDoOZExrJN1dBCr1Xb
t6h0BfmmZvynuc/ZlH+bZEe/CmtmNHoS/FshpFwyix77Eh8kgsSI3/ZeGkoDYiDl
20tpTwVVlc5zUzRiNSt6VWH9OGfC8we0tgTcnj3Dp62RK0da19Km2ZXK3ei/IDAq
ydql0eCbvECwyJpCZx24qFxsI6WsXAeSx5Sl3r7rS8cmpHSJeY4qJwUBFxcby2e5
Yr3ztdb/3yOy0ugS44jIIs5taklkrJ/bTrcKQAAXF96DmECXEOkTc9+ojwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXRqmZhVJnpttliuRfpxwUyteGAMB8GA1UdIwQY
MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt
MmQ4MDE5MDE3ODQ5LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5
LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu5XPGow
7RjsFX+WVBBUsGKTO17ROWlT10Ejo2Cl1ozT4qo3UqHKvRpds1+oz0IsbEnorv3o
CuzVUyT+j29w5b5qxMFlMuaINrDIhWLQGdgV0g2IwDPQ6Iqnkonp2nFaWgNmxIOn
AK/AxPrbAvPZbi+YIerMwfIq916kTTuQQp4qNhQc/Tx3hvhulKA2CtCJrQV/vyr+
3tLiOkzzzkE/xOzMJWI1vt8OWOtx441jAx58jPVUTnw6jan7LlpMq3iC1piFh99P
DBxfD+SqHjYunYFRiT6jTSvoTbtECUPZT37gziVr6aSN+5z7pMu/fWrfTO2HCyaT
e++MMYGgYuqXdQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 19:36:56 2026 by rpki-client