Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
File: WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft (raw, json)
Hash identifier: kLkeomUvIUkdYkJ3oxq/J4mBLBl2v+XdpmWuAv69afU=
Subject key identifier: D2:7F:EF:00:CE:CA:E9:D1:E8:B0:F4:D6:D9:9E:00:80:85:C2:96:C8
Authority key identifier: 5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
Certificate issuer: /CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Certificate serial: 01A0035E56973DFDD5D212413E563C4BEE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:49 +0000
Manifest this update: Sat 15 Aug 2026 03:01:49 +0000
Manifest next update: Sun 16 Aug 2026 03:01:49 +0000
Files and hashes: 1: PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa (hash: jz0AWqz5TrCrCZOL8S5rk8ZUwf9/3LQqBKen3hyQ+JU=)
2: WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl (hash: Q5LvJEFb2qo+uGTpTFRIjQKXKH0qboxou3XyVOrvhM0=)
3: vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa (hash: kvS6Muny5DxKn7c0ClorB/3JIoMx7iQSiPe4vnhIL2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:56:97:3d:fd:d5:d2:12:41:3e:56:3c:4b:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Validity
Not Before: Aug 15 03:01:49 2026 GMT
Not After : Aug 16 03:01:49 2026 GMT
Subject: CN=d27fef00cecae9d1e8b0f4d6d99e008085c296c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:3e:0c:db:af:0d:d6:4f:51:d8:25:f1:01:
dd:97:48:98:98:6e:aa:39:52:a3:18:10:ab:d4:45:
9c:a0:46:28:d5:8f:c8:02:74:7e:07:18:8c:2c:9e:
6c:14:91:43:55:e0:0a:8f:09:41:9f:97:46:af:d0:
70:60:92:8d:e3:8b:b1:87:dd:33:bd:a7:3a:0a:93:
f7:1a:62:2d:39:85:da:9b:2b:ed:db:21:ee:3d:ef:
72:8c:26:66:1f:22:6a:a5:73:e4:64:cf:6a:97:c3:
43:52:79:d3:fc:c1:a3:a4:a2:2f:d0:0a:4a:34:80:
4e:17:4b:1b:9f:d4:63:28:36:cd:64:1b:f3:80:af:
2c:d4:a6:f7:3b:53:cf:65:0e:c5:41:90:73:3a:37:
09:27:5c:ae:64:51:d1:02:39:92:f9:dc:ed:73:a4:
88:00:27:f8:ba:af:c7:42:69:d0:9b:dc:12:92:86:
b6:b0:98:97:9e:18:b9:31:20:af:43:42:cd:8c:32:
18:74:bc:dc:22:c2:a2:f3:a3:37:4d:50:49:b8:7e:
31:3c:27:f3:8a:22:e6:e0:67:36:d3:13:3c:a0:4a:
b3:ea:d2:3d:4f:e2:ee:f0:3b:9e:20:c6:08:a8:1c:
0c:97:12:b1:d5:91:ee:28:a3:51:ec:22:e8:1b:82:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7F:EF:00:CE:CA:E9:D1:E8:B0:F4:D6:D9:9E:00:80:85:C2:96:C8
X509v3 Authority Key Identifier:
keyid:5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:cd:89:94:a3:c4:9d:95:69:46:f5:02:50:0c:80:66:eb:
ee:55:e9:16:a9:e1:0b:18:ba:ca:7b:95:cf:71:a1:92:e6:1e:
f4:75:27:50:83:dd:79:7b:bf:7f:e4:76:b4:b1:5d:51:ab:09:
aa:7b:f0:ee:7a:41:46:5d:ff:86:f5:70:76:9e:3a:cf:ac:3d:
89:10:0a:70:08:7a:de:ba:a4:51:76:c4:85:66:df:a2:86:40:
d0:99:fe:3e:d4:02:19:c6:47:f0:ba:cb:78:96:67:48:b7:1d:
c1:24:5f:b3:9b:51:61:79:a0:10:44:d3:b0:73:8d:21:ba:dd:
3d:82:09:a1:8c:6d:b8:64:74:23:4e:98:47:ff:6e:0f:d5:4b:
dd:57:3a:71:a9:b8:c3:37:1e:7b:14:0b:df:81:06:22:9e:5c:
e2:1e:5f:fb:c4:c4:37:48:ca:ea:06:4d:e9:c6:c2:40:18:f9:
88:e6:dc:3e:8c:c0:19:fd:78:b4:15:57:d4:7a:06:95:78:31:
75:d7:ce:a7:f9:08:df:1c:d8:67:ea:c1:fa:7f:c0:bd:1f:77:
a0:86:26:83:3e:64:1a:59:2d:31:13:79:ad:07:e5:08:45:f2:
c9:cf:8a:d9:45:b5:18:52:19:99:88:61:dd:0a:85:ad:13:ba:
2a:58:dd:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXlaXPf3V0hJBPlY8S+55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhN2FjYThkYmE1YTQ5ZjllOWQ5Y2ViMzE5MzFjZTIzNDNh
MDA1YmMwHhcNMjYwODE1MDMwMTQ5WhcNMjYwODE2MDMwMTQ5WjAzMTEwLwYDVQQD
EyhkMjdmZWYwMGNlY2FlOWQxZThiMGY0ZDZkOTllMDA4MDg1YzI5NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrQ+DNuvDdZPUdgl8QHdl0iYmG6q
OVKjGBCr1EWcoEYo1Y/IAnR+BxiMLJ5sFJFDVeAKjwlBn5dGr9BwYJKN44uxh90z
vac6CpP3GmItOYXamyvt2yHuPe9yjCZmHyJqpXPkZM9ql8NDUnnT/MGjpKIv0ApK
NIBOF0sbn9RjKDbNZBvzgK8s1Kb3O1PPZQ7FQZBzOjcJJ1yuZFHRAjmS+dztc6SI
ACf4uq/HQmnQm9wSkoa2sJiXnhi5MSCvQ0LNjDIYdLzcIsKi86M3TVBJuH4xPCfz
iiLm4Gc20xM8oEqz6tI9T+Lu8DueIMYIqBwMlxKx1ZHuKKNR7CLoG4KgSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ/7wDOyunR6LD01tmeAICFwpbIMB8GA1UdIwQY
MBaAFFp6yo26Wkn56dnOsxkxziNDoAW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25yS2picGFTZm5wMmM2ekdUSE9JME9nQmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt
MDIzYjZjMDc5M2YxLzEvV25yS2picGFTZm5wMmM2ekdUSE9JME9nQmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx
LzEvV25yS2picGFTZm5wMmM2ekdUSE9JME9nQmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYXNiZSj
xJ2VaUb1AlAMgGbr7lXpFqnhCxi6ynuVz3GhkuYe9HUnUIPdeXu/f+R2tLFdUasJ
qnvw7npBRl3/hvVwdp46z6w9iRAKcAh63rqkUXbEhWbfooZA0Jn+PtQCGcZH8LrL
eJZnSLcdwSRfs5tRYXmgEETTsHONIbrdPYIJoYxtuGR0I06YR/9uD9VL3Vc6cam4
wzceexQL34EGIp5c4h5f+8TEN0jK6gZN6cbCQBj5iObcPozAGf14tBVX1HoGlXgx
ddfOp/kI3xzYZ+rB+n/AvR93oIYmgz5kGlktMRN5rQflCEXyyc+K2UW1GFIZmYhh
3QqFrRO6Kljdow==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:51:47 2026 by rpki-client