Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier: bKHiKYaOEdVXbtvH9H/NLN0f3WXdIN8s+kwQIfGr+E4=
Subject key identifier: 3B:FE:76:40:06:A7:A7:2C:50:E4:23:4A:89:64:BC:EC:71:33:FF:80
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial: 019FA2975EB4845B89D71048A2EA94C1B352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number: 1964
Signing time: Mon 27 Jul 2026 08:00:56 +0000
Manifest this update: Mon 27 Jul 2026 08:00:56 +0000
Manifest next update: Tue 28 Jul 2026 08:00:56 +0000
Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: yAahI4aWHxWL1ApOfSWuVjFPaH8uq9G2ySZPip/xyZY=)
2: qTJkke2DmFNJyiG7jfJcZx_vW34.roa (hash: vKcHwa2tV+EZb/fHgrN6A1horjD1vZRSzMun772SEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:5e:b4:84:5b:89:d7:10:48:a2:ea:94:c1:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Validity
Not Before: Jul 27 08:00:56 2026 GMT
Not After : Jul 28 08:00:56 2026 GMT
Subject: CN=3bfe764006a7a72c50e4234a8964bcec7133ff80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:c0:9b:94:a9:dc:aa:12:56:0b:b9:c7:44:
11:5f:58:30:3e:0d:ad:6d:48:9b:85:7e:f5:df:9d:
ca:a2:e4:af:58:e4:59:6f:06:62:c2:8c:e5:44:8b:
06:f9:b6:b9:45:c7:21:73:3e:75:e3:1b:83:49:6e:
fd:b7:db:54:df:47:63:c4:b1:49:57:b9:79:44:2b:
db:6b:f1:f9:d6:9c:0d:0c:0d:69:54:aa:28:76:50:
46:e7:2e:47:73:2d:c4:13:7a:d0:d2:db:a2:27:02:
d8:a5:2e:c3:59:6d:2d:37:a3:20:9b:bc:0c:1f:96:
13:8c:13:f8:cf:8d:21:e5:08:3c:20:59:85:64:6e:
39:0d:c2:28:2e:53:fc:01:f6:3e:e2:2e:95:ab:58:
70:74:69:77:5d:f7:41:7f:c4:8c:9f:62:be:2b:87:
2d:ce:0e:4e:bb:7c:b8:6a:6d:26:d0:db:2a:30:a5:
c0:7b:28:31:ab:83:0d:88:07:84:b7:e2:39:06:97:
99:c3:5d:01:f9:d1:5b:c3:75:ea:0c:dd:3d:87:9e:
d2:07:22:95:d8:31:5d:a1:37:71:3a:11:fa:f5:86:
f3:46:db:c1:76:a3:04:12:d4:de:c9:c0:b6:11:9c:
eb:76:f3:a3:05:0b:e3:40:75:74:08:2d:2e:45:98:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:76:40:06:A7:A7:2C:50:E4:23:4A:89:64:BC:EC:71:33:FF:80
X509v3 Authority Key Identifier:
keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:87:6a:de:f1:88:8d:e9:60:4a:9c:ab:30:82:1b:4a:03:0b:
ef:41:27:6d:cc:ac:ae:80:23:72:b5:4c:43:94:b5:dd:82:ed:
f1:0d:79:91:8f:2b:e5:c7:db:ae:fd:f5:ab:a6:67:4d:2c:cb:
42:49:ea:6c:45:b2:f6:62:72:95:1e:51:88:13:14:fc:d9:a7:
d1:9c:d3:6e:73:79:53:59:d7:44:0e:7b:61:a0:c9:46:7e:e6:
4e:41:8e:72:7a:63:75:f7:d4:97:21:cb:2d:c6:b1:49:13:08:
12:93:6c:9c:ef:fb:1e:5a:0f:b5:b1:c5:7e:b8:65:43:f4:ab:
4b:46:12:be:b2:8e:0c:65:1b:66:3a:5a:5d:21:85:09:4f:5c:
eb:5f:a9:b3:74:14:a0:39:17:2f:43:c5:e5:c2:fe:c8:57:16:
bf:4e:e1:dd:45:dc:c4:e1:0f:a4:32:9a:21:d0:13:d1:5f:c4:
0b:bc:23:f2:db:d5:65:21:ad:d7:0a:f3:12:11:3e:f8:77:18:
a3:a4:db:9e:a1:cb:d0:e5:58:65:55:f3:22:7f:ea:0e:29:d5:
51:5f:43:fb:63:2a:1a:1a:4d:42:1e:68:0d:68:c8:47:c6:9a:
04:49:29:3c:0c:4d:8b:4b:ca:1f:72:11:2d:d0:81:38:6a:d4:
e0:bc:74:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+il160hFuJ1xBIouqUwbNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTEyNWFmYzVlYzk3OGIyYTMyMTI5MWMyYTU1NzBmZTYx
OTE1OWUwHhcNMjYwNzI3MDgwMDU2WhcNMjYwNzI4MDgwMDU2WjAzMTEwLwYDVQQD
EygzYmZlNzY0MDA2YTdhNzJjNTBlNDIzNGE4OTY0YmNlYzcxMzNmZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BbAm5Sp3KoSVgu5x0QRX1gwPg2t
bUibhX71353KouSvWORZbwZiwozlRIsG+ba5Rcchcz514xuDSW79t9tU30djxLFJ
V7l5RCvba/H51pwNDA1pVKoodlBG5y5Hcy3EE3rQ0tuiJwLYpS7DWW0tN6Mgm7wM
H5YTjBP4z40h5Qg8IFmFZG45DcIoLlP8AfY+4i6Vq1hwdGl3XfdBf8SMn2K+K4ct
zg5Ou3y4am0m0NsqMKXAeygxq4MNiAeEt+I5BpeZw10B+dFbw3XqDN09h57SByKV
2DFdoTdxOhH69YbzRtvBdqMEEtTeycC2EZzrdvOjBQvjQHV0CC0uRZiqNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv+dkAGp6csUOQjSolkvOxxM/+AMB8GA1UdIwQY
MBaAFFpRJa/F7JeLKjISkcKlVw/mGRWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMt
YTZmYjRkZjU0ODFlLzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMtYTZmYjRkZjU0ODFl
LzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYdq3vGI
jelgSpyrMIIbSgML70EnbcysroAjcrVMQ5S13YLt8Q15kY8r5cfbrv31q6ZnTSzL
QknqbEWy9mJylR5RiBMU/Nmn0ZzTbnN5U1nXRA57YaDJRn7mTkGOcnpjdffUlyHL
LcaxSRMIEpNsnO/7HloPtbHFfrhlQ/SrS0YSvrKODGUbZjpaXSGFCU9c61+ps3QU
oDkXL0PF5cL+yFcWv07h3UXcxOEPpDKaIdAT0V/EC7wj8tvVZSGt1wrzEhE++HcY
o6TbnqHL0OVYZVXzIn/qDinVUV9D+2MqGhpNQh5oDWjIR8aaBEkpPAxNi0vKH3IR
LdCBOGrU4Lx0+Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:43:41 2026 by rpki-client