Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier: cvm893rzKGfqd+soDGF/+JS3jS4OewoQ3y6KD8d5sVM=
Subject key identifier: 42:87:D0:2F:3C:64:D2:C6:19:7F:BA:BF:24:99:F0:60:14:9C:5E:AC
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 01A178BA756CFD8C1E95E1E99EC9422E24AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 15:00:48 +0000
Manifest this update: Mon 26 Oct 2026 15:00:48 +0000
Manifest next update: Tue 27 Oct 2026 15:00:48 +0000
Files and hashes: 1: EH6JTkEj8PgxyVpnIlOKTmDpglo.roa (hash: WQgY4eaZUDC2F0vcIOyxYmpUq/jhsteUBr1nfEV2moQ=)
2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: /Tywdj9vECeL2y6AILnZCefdzLxmTUMAxrGdAC1SWCc=)
3: gJeLtFmgE3d1v3yCAL7TcwoLzPM.roa (hash: 6LX6LpEoCHsUbFXvp4i9hm/CKgBcR2pWyTCDwzESf5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:75:6c:fd:8c:1e:95:e1:e9:9e:c9:42:2e:24:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Oct 26 15:00:48 2026 GMT
Not After : Oct 27 15:00:48 2026 GMT
Subject: CN=4287d02f3c64d2c6197fbabf2499f060149c5eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:e3:79:8b:aa:cb:a3:7c:a7:50:f4:5a:8e:
0e:e5:e7:76:02:09:f0:ba:57:eb:13:4b:82:0a:af:
99:50:9b:04:b6:69:03:00:2e:b2:af:e3:66:77:da:
ff:15:1d:82:1b:b6:6a:18:f0:24:aa:ec:b0:e2:1f:
c5:99:65:04:29:42:d2:39:68:23:6a:b4:ae:cb:11:
e1:b6:27:33:06:3f:1b:93:43:00:4e:2f:6d:2e:97:
26:c8:8f:4b:20:24:3e:6d:ef:cb:8d:7c:73:e1:ba:
67:6f:21:9b:a0:ce:91:ad:0c:04:15:ee:dd:cb:52:
7c:88:89:fe:c3:a9:22:8f:3b:ba:f5:fa:5a:94:be:
2b:21:55:14:d4:5b:b1:d2:19:26:e1:0c:07:92:31:
9d:8a:86:07:08:f7:db:2b:8e:be:60:4b:94:29:03:
2d:f5:27:9a:69:2c:d6:92:dc:46:8c:00:d6:f5:92:
9d:10:ad:ab:f4:34:4d:7d:0c:7a:92:d4:bc:ec:e4:
b4:b9:67:29:b5:07:d0:18:28:39:b1:a8:52:d3:9f:
4b:f8:c9:3d:e3:d6:ad:c0:3d:7a:e2:1a:61:6e:1c:
20:8e:84:f1:f9:0f:d2:1a:1d:f8:e7:76:5f:52:6e:
db:72:1d:0a:a7:d2:b7:bc:dc:03:56:c2:b6:2e:1c:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:D0:2F:3C:64:D2:C6:19:7F:BA:BF:24:99:F0:60:14:9C:5E:AC
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ca:05:e7:e0:40:ce:3b:da:35:de:0b:8e:1e:a9:1f:40:9d:
ae:f0:5e:3a:a1:dd:2a:0b:9d:ce:22:83:08:e9:48:1f:c1:23:
4f:b8:7f:ab:7c:77:86:1e:ca:a8:f9:0a:10:59:6e:54:d3:8e:
7f:ae:49:67:97:b4:80:21:21:d5:84:dd:e3:31:4c:9e:65:6b:
e9:aa:39:13:6f:66:7a:44:fe:b4:48:fa:bb:79:d7:8c:6e:c3:
e4:8d:2b:a1:69:79:e4:dc:e5:0c:20:d5:3b:52:69:44:47:12:
5a:16:2d:83:d8:72:3b:05:84:e0:4e:2f:b8:fb:ee:0d:01:c8:
35:8c:cf:f6:d4:99:8e:10:e3:69:1b:40:f1:f4:fb:02:c8:c1:
1e:2f:d4:cd:53:ab:11:fe:08:a5:be:e1:55:b1:69:15:ea:62:
bd:87:a6:c3:ee:e0:64:93:80:7a:52:73:ce:e9:ff:9d:d1:67:
b6:e0:97:d0:6d:ab:7d:82:fd:be:89:af:e1:89:86:c1:5c:31:
34:a7:49:58:85:f7:50:7e:9b:d1:06:c5:68:8a:2a:35:29:1d:
26:d9:40:02:84:d7:10:47:55:fc:32:3e:d3:76:d2:8b:c6:04:
b0:d6:62:d2:90:c6:75:49:61:85:a4:fe:ba:55:a2:e6:16:0f:
3f:42:2c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4unVs/YweleHpnslCLiSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NjBlNmNkMWIxYjAwNjNiMTg5MGY3ODA3NDVjMjQ1NjA2
ZGNmNzMwHhcNMjYxMDI2MTUwMDQ4WhcNMjYxMDI3MTUwMDQ4WjAzMTEwLwYDVQQD
Eyg0Mjg3ZDAyZjNjNjRkMmM2MTk3ZmJhYmYyNDk5ZjA2MDE0OWM1ZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6jjeYuqy6N8p1D0Wo4O5ed2Agnw
ulfrE0uCCq+ZUJsEtmkDAC6yr+Nmd9r/FR2CG7ZqGPAkquyw4h/FmWUEKULSOWgj
arSuyxHhticzBj8bk0MATi9tLpcmyI9LICQ+be/LjXxz4bpnbyGboM6RrQwEFe7d
y1J8iIn+w6kijzu69fpalL4rIVUU1Fux0hkm4QwHkjGdioYHCPfbK46+YEuUKQMt
9SeaaSzWktxGjADW9ZKdEK2r9DRNfQx6ktS87OS0uWcptQfQGCg5sahS059L+Mk9
49atwD164hphbhwgjoTx+Q/SGh3453ZfUm7bch0Kp9K3vNwDVsK2LhxPUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKH0C88ZNLGGX+6vySZ8GAUnF6sMB8GA1UdIwQY
MBaAFFlg5s0bGwBjsYkPeAdFwkVgbc9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQt
MGE4MzBkMDFhZmQxLzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQtMGE4MzBkMDFhZmQx
LzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsoF5+BA
zjvaNd4Ljh6pH0CdrvBeOqHdKgudziKDCOlIH8EjT7h/q3x3hh7KqPkKEFluVNOO
f65JZ5e0gCEh1YTd4zFMnmVr6ao5E29mekT+tEj6u3nXjG7D5I0roWl55NzlDCDV
O1JpREcSWhYtg9hyOwWE4E4vuPvuDQHINYzP9tSZjhDjaRtA8fT7AsjBHi/UzVOr
Ef4Ipb7hVbFpFepivYemw+7gZJOAelJzzun/ndFntuCX0G2rfYL9vomv4YmGwVwx
NKdJWIX3UH6b0QbFaIoqNSkdJtlAAoTXEEdV/DI+03bSi8YEsNZi0pDGdUlhhaT+
ulWi5hYPP0Isrw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:29 2026 by rpki-client