Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: vVYRw/fG22g41UIDWKplVHxK+OnIS9IY0aCcHyh1L3M=
Subject key identifier: BD:EE:80:FC:CA:A7:5F:51:77:48:69:F1:66:48:20:07:F2:77:A3:6E
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 01A130A210AF98D15172A542C80383FEFE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 15:01:29 +0000
Manifest this update: Mon 12 Oct 2026 15:01:29 +0000
Manifest next update: Tue 13 Oct 2026 15:01:29 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: FQ6SbZ70P5A3VLIEZsJZOaAsJ1Vm6s8Zyn+u4Qaj8ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:10:af:98:d1:51:72:a5:42:c8:03:83:fe:fe:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Oct 12 15:01:29 2026 GMT
Not After : Oct 13 15:01:29 2026 GMT
Subject: CN=bdee80fccaa75f51774869f166482007f277a36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:1c:39:06:ba:ed:03:d2:74:14:d8:a1:b8:
b7:44:b6:29:cc:2e:01:cb:c2:90:dd:c7:53:3d:62:
0c:6a:52:26:0c:f4:a9:ad:cc:7f:74:71:0d:d0:c1:
5b:49:52:86:46:f5:4b:23:7a:1d:0c:1d:32:f4:a8:
20:ff:a6:c9:4a:6f:68:12:0c:78:e6:1d:25:47:a2:
4f:f2:ea:9f:e8:c2:74:2e:f9:94:fe:a7:e1:00:e3:
2a:6b:25:cf:57:82:fb:6e:66:7d:b5:c7:0e:55:57:
2f:a9:c0:4c:ff:79:47:5d:aa:11:4c:48:1d:3f:ab:
a0:4e:97:52:66:b0:00:41:4d:aa:38:66:42:10:8f:
8b:ea:b8:4c:6f:0f:d7:73:4c:8c:fa:56:1b:a9:65:
b6:0c:98:77:75:2d:51:78:83:1b:8a:5e:79:82:3b:
80:b6:4f:7a:26:9e:7d:b7:f6:65:2b:2d:31:40:17:
04:31:80:dc:f5:6e:03:42:0c:1c:b8:4c:2f:68:85:
ee:e1:a4:ae:7a:2f:a4:5a:bb:be:f0:90:f1:9b:11:
27:51:52:7e:ce:6f:e0:48:9b:3f:62:59:94:e9:1e:
b9:08:94:d5:00:13:f9:b7:8d:22:69:4d:0d:cb:e8:
f0:b9:5b:8c:ce:57:a2:e2:4a:cc:dd:37:65:47:5d:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EE:80:FC:CA:A7:5F:51:77:48:69:F1:66:48:20:07:F2:77:A3:6E
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:53:67:c0:b2:01:97:e8:09:56:48:f3:2a:63:1f:a4:26:8b:
8c:e3:c1:13:1f:09:4f:6e:61:d3:79:bd:9c:22:e3:58:87:c7:
40:cc:14:b3:95:54:6d:f8:5d:71:9d:7c:f4:93:bf:43:63:7c:
c9:57:50:4e:8c:51:50:48:92:29:12:d0:4a:04:e3:7a:3f:e8:
22:d5:45:db:79:15:af:8d:d4:99:a3:97:db:26:6f:76:a9:b8:
88:ce:3f:b5:f3:76:e6:4c:4e:55:db:fb:95:a8:38:52:56:e9:
f1:d8:e5:f5:fd:03:88:1f:db:cf:06:15:26:e9:dd:fc:ff:c4:
cd:07:e7:cf:8d:8e:21:1f:d1:44:da:51:b0:48:a9:fe:94:68:
2e:0f:a9:03:66:7a:37:5c:ab:b0:f0:ff:33:3c:23:d4:5a:2d:
cf:87:41:70:e0:14:72:2c:e0:11:68:77:fc:c0:7e:f2:50:9b:
99:ef:e8:d2:58:e4:69:7f:44:8b:f5:1f:06:22:19:d2:95:77:
7f:f6:3d:99:38:2d:75:70:37:fb:52:03:0b:9b:7e:40:65:2a:
94:b3:79:1a:58:9f:20:d1:0c:32:78:bf:2c:93:2e:31:79:01:
1c:e1:ba:1b:fe:24:c9:48:7e:73:6f:5d:3c:1d:f3:4c:61:4a:
43:1f:64:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwohCvmNFRcqVCyAOD/v47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl
NTA3OTkwHhcNMjYxMDEyMTUwMTI5WhcNMjYxMDEzMTUwMTI5WjAzMTEwLwYDVQQD
EyhiZGVlODBmY2NhYTc1ZjUxNzc0ODY5ZjE2NjQ4MjAwN2YyNzdhMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVMcOQa67QPSdBTYobi3RLYpzC4B
y8KQ3cdTPWIMalImDPSprcx/dHEN0MFbSVKGRvVLI3odDB0y9Kgg/6bJSm9oEgx4
5h0lR6JP8uqf6MJ0LvmU/qfhAOMqayXPV4L7bmZ9tccOVVcvqcBM/3lHXaoRTEgd
P6ugTpdSZrAAQU2qOGZCEI+L6rhMbw/Xc0yM+lYbqWW2DJh3dS1ReIMbil55gjuA
tk96Jp59t/ZlKy0xQBcEMYDc9W4DQgwcuEwvaIXu4aSuei+kWru+8JDxmxEnUVJ+
zm/gSJs/YlmU6R65CJTVABP5t40iaU0Ny+jwuVuMzlei4krM3TdlR10aDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3ugPzKp19Rd0hp8WZIIAfyd6NuMB8GA1UdIwQY
MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt
MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm
LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflNnwLIB
l+gJVkjzKmMfpCaLjOPBEx8JT25h03m9nCLjWIfHQMwUs5VUbfhdcZ189JO/Q2N8
yVdQToxRUEiSKRLQSgTjej/oItVF23kVr43UmaOX2yZvdqm4iM4/tfN25kxOVdv7
lag4Ulbp8djl9f0DiB/bzwYVJund/P/EzQfnz42OIR/RRNpRsEip/pRoLg+pA2Z6
N1yrsPD/Mzwj1Fotz4dBcOAUcizgEWh3/MB+8lCbme/o0ljkaX9Ei/UfBiIZ0pV3
f/Y9mTgtdXA3+1IDC5t+QGUqlLN5GlifINEMMni/LJMuMXkBHOG6G/4kyUh+c29d
PB3zTGFKQx9kpw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:03:22 2026 by rpki-client