Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: calN/pL3yjeL0ynN5S4eKqa1LxyhJLt1ipwiktkmD4I=
Subject key identifier: 3F:AD:D2:7B:C5:70:24:A6:33:2A:5C:01:63:36:E8:CB:C2:E7:49:C5
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 019EB7D82E2E9C5EEF21D4AF32CDFB58B33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0BCF
Signing time: Thu 11 Jun 2026 18:00:58 +0000
Manifest this update: Thu 11 Jun 2026 18:00:58 +0000
Manifest next update: Fri 12 Jun 2026 18:00:58 +0000
Files and hashes: 1: 3DSxcK9BYX9k5tvNNrwWZ7kYjz4.roa (hash: LlbtQ15mDycazVoOyoBxW8uz2UEgpVUqP+tEU+6Dy34=)
2: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: KvV8ca9LZsPIFmgifxOhalNdVFME9SVePR7ZvmHanfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:2e:2e:9c:5e:ef:21:d4:af:32:cd:fb:58:b3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Jun 11 18:00:58 2026 GMT
Not After : Jun 12 18:00:58 2026 GMT
Subject: CN=3fadd27bc57024a6332a5c016336e8cbc2e749c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:30:9a:68:b4:3a:89:69:3d:d6:4e:2c:2b:
ad:7e:f5:70:e0:4f:22:6c:59:98:19:2c:1d:03:06:
fb:7b:97:fc:d2:1f:34:5a:16:2f:30:80:78:fc:74:
2e:69:e1:52:3c:8f:11:0e:39:30:f7:61:08:52:87:
5e:c8:59:05:fe:ba:60:36:cc:74:58:4b:c0:c3:12:
a6:e4:3d:26:08:4f:8d:01:1b:1d:34:f4:33:9a:fb:
2b:c2:21:50:0e:fa:24:a4:e4:0e:e6:0e:28:ed:01:
24:bb:2f:e3:90:66:2f:a8:56:4a:a3:27:d5:54:76:
b1:e9:55:4b:0d:59:07:1a:33:b6:fc:9a:fe:d6:31:
50:6d:31:99:22:46:e0:cc:68:7e:58:b3:3c:76:3b:
23:a9:e0:61:a2:1c:ae:a6:da:c2:31:10:3a:86:68:
ed:95:f8:5b:cf:52:3b:e6:0c:12:c8:d5:98:d1:75:
77:a9:89:31:48:91:2d:a0:11:71:2c:f5:ed:93:0e:
d4:ef:fb:cf:86:8f:22:1e:5f:8a:28:7d:fa:8c:bb:
5f:23:f2:81:04:04:20:c0:f6:27:43:9b:25:98:1d:
c4:34:1d:84:ec:fd:90:f3:da:19:e9:ca:d5:d0:fc:
bb:e6:2d:33:a0:2b:6a:ad:eb:f2:b9:64:91:a7:3c:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AD:D2:7B:C5:70:24:A6:33:2A:5C:01:63:36:E8:CB:C2:E7:49:C5
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2a:86:c3:d6:45:5a:0b:38:e2:e4:6b:40:d9:6d:57:fd:fa:
b6:40:b6:d6:c4:6e:88:0f:a9:01:8d:8b:05:ab:55:69:6d:9d:
c2:b3:84:83:8f:b5:b8:7f:fd:01:4a:ca:d7:a8:8a:b2:41:81:
87:79:6f:49:c3:99:49:04:1f:a8:14:61:b0:b1:f2:5d:a7:ad:
a5:b9:c7:1b:d6:81:4b:b2:b6:f6:3d:30:51:35:cf:30:a7:7d:
72:e2:16:4b:3b:ba:fa:18:12:12:db:47:33:77:a1:f7:e8:eb:
9e:69:8a:94:34:3b:6a:8d:0a:cb:3c:38:b0:42:93:86:eb:42:
52:51:4f:77:98:f0:67:aa:fc:10:cf:34:fc:83:de:24:65:51:
e8:99:f5:06:c1:cc:c2:be:38:5b:15:91:be:11:8e:4f:bc:68:
7b:c4:06:4b:45:39:84:fe:99:6b:d7:70:23:be:f0:1b:6f:eb:
df:1b:2f:f4:9c:57:f1:0a:bb:98:0a:68:5d:3a:9e:2f:21:2d:
86:a9:e4:f0:81:99:e7:76:bc:75:d7:b3:64:3c:01:d7:47:4a:
9e:68:d6:2e:17:0f:68:55:2d:53:49:ee:2d:8f:72:5e:8c:62:
73:85:30:e1:3b:47:2b:11:44:e7:86:fd:08:4c:48:39:20:68:
64:17:c0:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ632C4unF7vIdSvMs37WLM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzkwODhmNWI0NDM4YTQzNDhjODA1ZWViY2JmNGE4MGUw
N2ZmNTQwHhcNMjYwNjExMTgwMDU4WhcNMjYwNjEyMTgwMDU4WjAzMTEwLwYDVQQD
EygzZmFkZDI3YmM1NzAyNGE2MzMyYTVjMDE2MzM2ZThjYmMyZTc0OWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIwwmmi0OolpPdZOLCutfvVw4E8i
bFmYGSwdAwb7e5f80h80WhYvMIB4/HQuaeFSPI8RDjkw92EIUodeyFkF/rpgNsx0
WEvAwxKm5D0mCE+NARsdNPQzmvsrwiFQDvokpOQO5g4o7QEkuy/jkGYvqFZKoyfV
VHax6VVLDVkHGjO2/Jr+1jFQbTGZIkbgzGh+WLM8djsjqeBhohyuptrCMRA6hmjt
lfhbz1I75gwSyNWY0XV3qYkxSJEtoBFxLPXtkw7U7/vPho8iHl+KKH36jLtfI/KB
BAQgwPYnQ5slmB3ENB2E7P2Q89oZ6crV0Py75i0zoCtqrevyuWSRpzyNOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+t0nvFcCSmMypcAWM26MvC50nFMB8GA1UdIwQY
MBaAFMHJCI9bRDikNIyAXuvL9KgOB/9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kNjYyYTYtMGFmNS00NTlmLWE3N2It
NmFkNTMzZGYwZDI0LzEvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9kNjYyYTYtMGFmNS00NTlmLWE3N2ItNmFkNTMzZGYwZDI0
LzEvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCqGw9ZF
Wgs44uRrQNltV/36tkC21sRuiA+pAY2LBatVaW2dwrOEg4+1uH/9AUrK16iKskGB
h3lvScOZSQQfqBRhsLHyXaetpbnHG9aBS7K29j0wUTXPMKd9cuIWSzu6+hgSEttH
M3eh9+jrnmmKlDQ7ao0Kyzw4sEKThutCUlFPd5jwZ6r8EM80/IPeJGVR6Jn1BsHM
wr44WxWRvhGOT7xoe8QGS0U5hP6Za9dwI77wG2/r3xsv9JxX8Qq7mApoXTqeLyEt
hqnk8IGZ53a8ddezZDwB10dKnmjWLhcPaFUtU0nuLY9yXoxic4Uw4TtHKxFE54b9
CExIOSBoZBfA7g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:35 2026 by rpki-client