Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier: 8/qPPQfu0LWqw8BoiGVTTzkGp2cSNZwTc9YbgnZ7Meg=
Subject key identifier: 2D:6C:43:14:E0:89:E7:70:22:47:D9:08:8C:69:00:E6:5A:37:ED:DE
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer: /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial: 01A15666210F4E0852065E05FA91B1379BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number: 0BAD
Signing time: Mon 19 Oct 2026 23:01:36 +0000
Manifest this update: Mon 19 Oct 2026 23:01:36 +0000
Manifest next update: Tue 20 Oct 2026 23:01:36 +0000
Files and hashes: 1: VrmjHVAC_dTFireq6yrVrnJ1Qr8.roa (hash: 3FZStDcO/86XfV9ktKFi/0KRl54/2sqdqVE7Qc6xIko=)
2: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: LDFgzcX0ROCOM+PSuldb4KRPe9fDHXNDOqa6DR30YXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:66:21:0f:4e:08:52:06:5e:05:fa:91:b1:37:9b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Validity
Not Before: Oct 19 23:01:36 2026 GMT
Not After : Oct 20 23:01:36 2026 GMT
Subject: CN=2d6c4314e089e7702247d9088c6900e65a37edde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:04:68:09:4c:98:84:b3:5d:8f:90:59:f0:
d0:2a:f3:90:52:32:c9:f6:54:d9:79:ed:1d:0d:fa:
3f:9e:27:9a:04:ed:00:cc:0c:28:fa:71:e9:4b:61:
bd:60:c7:96:71:c2:97:13:9e:41:bf:5c:9a:3b:bb:
f5:fb:63:ac:3c:5e:8b:1b:c7:c5:00:ec:67:ca:99:
c8:b0:1c:1c:a3:34:6a:10:68:a0:72:89:9a:62:ef:
4e:3e:a5:93:0e:76:e6:34:98:b7:da:6e:24:88:b6:
e1:c3:e5:c7:24:25:fe:a9:bf:7f:e4:df:67:22:2c:
63:65:d2:ea:fc:2b:34:09:48:e6:75:5b:73:e7:bc:
03:56:b2:dc:54:c4:ab:fe:e6:da:ca:a7:5b:29:f2:
a2:96:f6:83:5e:da:5a:af:e1:35:f7:a8:68:7a:7c:
ad:c2:b3:93:3a:0a:be:f4:69:de:82:b3:20:81:85:
5b:b2:a6:1e:08:3a:8b:7d:5e:7a:6b:10:9b:33:87:
c0:43:06:b2:f9:25:b2:66:e0:31:55:dd:70:42:3f:
a8:9e:20:e3:d2:ba:00:07:51:e6:d7:30:5f:5b:20:
ef:49:7f:e6:07:55:e3:c7:d6:a4:b7:96:f9:25:e8:
03:0b:62:22:be:dd:63:15:59:d9:68:2b:1c:73:30:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6C:43:14:E0:89:E7:70:22:47:D9:08:8C:69:00:E6:5A:37:ED:DE
X509v3 Authority Key Identifier:
keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:96:bb:39:95:a6:67:59:66:be:24:38:a0:49:83:98:d9:a1:
83:ca:64:c0:43:da:15:4d:ac:8c:1b:1a:7d:d1:94:95:5c:f6:
79:db:9d:9a:d4:98:b1:10:da:c5:4d:6c:d3:69:e6:b2:76:dc:
8f:48:91:df:e4:4b:3a:39:fe:61:c5:fa:6b:40:ac:4f:5a:6d:
3b:89:61:64:01:04:c9:9b:4b:3b:2c:83:41:6e:1e:59:ca:d3:
4b:34:ec:9a:ac:7a:69:bc:17:b6:6e:3f:0f:dd:3a:fa:9d:f9:
bc:cb:c4:20:20:03:db:3e:48:09:bd:3d:0e:13:0c:00:80:5f:
48:1c:94:75:2c:73:e2:b4:19:3e:69:d6:9c:67:2f:8f:62:b8:
ea:7d:75:da:4f:6e:73:96:66:67:10:89:8d:93:56:48:9f:c2:
eb:6c:b1:23:fb:99:89:15:21:18:02:dc:fd:79:2c:58:4e:5b:
d9:76:89:0f:cb:0c:04:1e:1e:00:ce:1f:5f:ac:ec:80:f2:60:
1e:97:f5:9f:da:7c:9b:5b:79:40:9e:4e:0a:8b:97:51:8c:8e:
e9:71:bc:20:20:49:4c:de:fa:cc:87:d1:66:f2:a7:f5:25:25:
de:ca:d5:35:d5:9a:4e:0a:ad:54:5e:90:86:f3:93:fe:83:7b:
09:22:7b:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFWZiEPTghSBl4F+pGxN5vSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGEzZDgwZjY3ODZmMTc5MTA5OGQ0NWVjZDU1NGYwNjYw
Y2NlNGYwHhcNMjYxMDE5MjMwMTM2WhcNMjYxMDIwMjMwMTM2WjAzMTEwLwYDVQQD
EygyZDZjNDMxNGUwODllNzcwMjI0N2Q5MDg4YzY5MDBlNjVhMzdlZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP4EaAlMmISzXY+QWfDQKvOQUjLJ
9lTZee0dDfo/nieaBO0AzAwo+nHpS2G9YMeWccKXE55Bv1yaO7v1+2OsPF6LG8fF
AOxnypnIsBwcozRqEGigcomaYu9OPqWTDnbmNJi32m4kiLbhw+XHJCX+qb9/5N9n
IixjZdLq/Cs0CUjmdVtz57wDVrLcVMSr/ubayqdbKfKilvaDXtpar+E196hoenyt
wrOTOgq+9GnegrMggYVbsqYeCDqLfV56axCbM4fAQway+SWyZuAxVd1wQj+oniDj
0roAB1Hm1zBfWyDvSX/mB1Xjx9akt5b5JegDC2Iivt1jFVnZaCscczBWPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1sQxTgiedwIkfZCIxpAOZaN+3eMB8GA1UdIwQY
MBaAFMBKPYD2eG8XkQmNRezVVPBmDM5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMzZlYjEtOGFmNS00OTEwLThkZjQt
ZWQyZTEzNmRjMDI2LzEvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMzZlYjEtOGFmNS00OTEwLThkZjQtZWQyZTEzNmRjMDI2
LzEvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJa7OZWm
Z1lmviQ4oEmDmNmhg8pkwEPaFU2sjBsafdGUlVz2edudmtSYsRDaxU1s02nmsnbc
j0iR3+RLOjn+YcX6a0CsT1ptO4lhZAEEyZtLOyyDQW4eWcrTSzTsmqx6abwXtm4/
D906+p35vMvEICAD2z5ICb09DhMMAIBfSByUdSxz4rQZPmnWnGcvj2K46n112k9u
c5ZmZxCJjZNWSJ/C62yxI/uZiRUhGALc/XksWE5b2XaJD8sMBB4eAM4fX6zsgPJg
Hpf1n9p8m1t5QJ5OCouXUYyO6XG8ICBJTN76zIfRZvKn9SUl3srVNdWaTgqtVF6Q
hvOT/oN7CSJ7ww==
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:03:11 2026 by rpki-client