Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: 1LgyB5K6QkVjDtrI5tPrliJECXdckOnJgMGKtO8UHp8=
Subject key identifier: 06:E4:88:06:B4:E5:B8:0E:71:EA:F3:90:6D:02:1A:FE:8D:54:C3:90
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 01A08BD5FB7F64624D373E4F0C4B93B0C367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0C58
Signing time: Thu 10 Sep 2026 15:00:51 +0000
Manifest this update: Thu 10 Sep 2026 15:00:51 +0000
Manifest next update: Fri 11 Sep 2026 15:00:51 +0000
Files and hashes: 1: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: /dvqp7zFScrUbJoSC7R48nSVbQre0K8n2z3OkaCmeR0=)
3: wksYSx05kpG2_m1bA5uuiXnqKFc.roa (hash: k+uDuqacR/yRBvtSsf1I4NfjvCtYBj4iQtFjb6MXywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:fb:7f:64:62:4d:37:3e:4f:0c:4b:93:b0:c3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Sep 10 15:00:51 2026 GMT
Not After : Sep 11 15:00:51 2026 GMT
Subject: CN=06e48806b4e5b80e71eaf3906d021afe8d54c390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:33:98:fc:59:14:e1:b0:8a:c5:40:31:a2:
a1:ec:cd:e6:39:f2:ba:6b:5b:41:aa:3c:72:e0:9e:
a8:7c:c9:bf:d6:4e:5f:7c:bc:8c:0b:83:ac:2e:e2:
00:e9:d8:4b:31:e2:d6:95:64:81:18:0e:b2:22:a9:
97:ea:e8:6e:99:3d:da:eb:7f:dc:dd:aa:4b:c0:70:
09:cc:d7:52:3e:a0:f8:c6:5f:af:dd:e5:53:62:e6:
3f:21:76:c9:6c:20:62:79:ff:39:ca:76:00:cb:f6:
47:d1:6d:ee:06:62:d2:f5:00:15:81:27:18:f0:01:
76:86:3b:e6:b8:fa:1d:04:de:10:ed:f7:6d:61:fa:
13:63:a9:17:a4:e5:e5:50:49:25:3e:aa:99:58:ed:
55:53:53:80:a1:a4:8f:24:c8:01:92:f3:b3:c2:c7:
e7:87:78:ab:31:da:ae:b2:5b:33:65:3f:89:11:f5:
d3:54:85:25:aa:6c:0a:29:2c:58:8b:06:b6:67:fd:
13:fe:64:f9:0e:81:7d:f3:38:ee:b8:64:95:a4:20:
db:e9:ce:d8:73:c9:e0:7d:46:b5:c9:6c:e9:bf:87:
5d:8f:43:5f:5a:c8:82:ff:99:cd:ba:b6:ca:db:49:
7f:9a:93:56:f1:3e:18:c0:09:45:2e:9a:f6:ba:bb:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:88:06:B4:E5:B8:0E:71:EA:F3:90:6D:02:1A:FE:8D:54:C3:90
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d3:99:01:1b:51:63:58:95:24:d0:df:8d:ea:9a:8d:39:6b:
33:2b:06:a7:94:fa:b7:4d:e8:c9:db:d7:bb:1b:5b:d5:17:7f:
8d:d7:dd:1a:93:ca:56:9f:13:4c:1d:92:3b:53:ba:f2:a1:5c:
97:67:99:ba:e7:57:84:89:b5:73:45:a5:4a:09:c6:ac:f5:07:
92:42:20:71:fa:f4:d7:55:b5:24:9e:92:70:2b:d7:d7:ff:19:
c1:cb:bd:6c:10:c0:b3:28:48:75:ef:81:34:39:71:71:d2:08:
93:59:71:a2:f4:a7:d7:ab:58:dc:51:95:46:ff:f8:97:18:44:
06:5d:14:2f:00:c4:f6:92:f0:3b:69:da:e2:a4:06:a6:be:84:
8a:48:08:f1:0f:5c:eb:f7:20:06:11:14:ae:10:db:82:45:be:
f3:32:e5:8b:aa:a6:4b:49:3d:c0:ed:bb:e9:bc:f5:07:56:c1:
ae:2e:16:92:c7:5e:c9:21:5c:53:27:3a:ac:f2:48:b9:c5:9d:
59:32:5a:27:4f:17:e4:a0:52:99:2a:99:ae:ef:ed:99:77:36:
53:a0:21:02:be:32:99:b5:26:dc:87:31:d7:81:6b:cc:ec:16:
af:d4:b0:a4:f8:90:12:1e:9e:f8:61:0b:df:3e:e6:d2:e6:a0:
d4:f6:dc:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1ft/ZGJNNz5PDEuTsMNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl
YTYzYjUwHhcNMjYwOTEwMTUwMDUxWhcNMjYwOTExMTUwMDUxWjAzMTEwLwYDVQQD
EygwNmU0ODgwNmI0ZTViODBlNzFlYWYzOTA2ZDAyMWFmZThkNTRjMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1gzmPxZFOGwisVAMaKh7M3mOfK6
a1tBqjxy4J6ofMm/1k5ffLyMC4OsLuIA6dhLMeLWlWSBGA6yIqmX6uhumT3a63/c
3apLwHAJzNdSPqD4xl+v3eVTYuY/IXbJbCBief85ynYAy/ZH0W3uBmLS9QAVgScY
8AF2hjvmuPodBN4Q7fdtYfoTY6kXpOXlUEklPqqZWO1VU1OAoaSPJMgBkvOzwsfn
h3irMdquslszZT+JEfXTVIUlqmwKKSxYiwa2Z/0T/mT5DoF98zjuuGSVpCDb6c7Y
c8ngfUa1yWzpv4ddj0NfWsiC/5nNurbK20l/mpNW8T4YwAlFLpr2uru2BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbkiAa05bgOcerzkG0CGv6NVMOQMB8GA1UdIwQY
MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt
ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj
LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdOZARtR
Y1iVJNDfjeqajTlrMysGp5T6t03oydvXuxtb1Rd/jdfdGpPKVp8TTB2SO1O68qFc
l2eZuudXhIm1c0WlSgnGrPUHkkIgcfr011W1JJ6ScCvX1/8Zwcu9bBDAsyhIde+B
NDlxcdIIk1lxovSn16tY3FGVRv/4lxhEBl0ULwDE9pLwO2na4qQGpr6EikgI8Q9c
6/cgBhEUrhDbgkW+8zLli6qmS0k9wO276bz1B1bBri4WksdeySFcUyc6rPJIucWd
WTJaJ08X5KBSmSqZru/tmXc2U6AhAr4ymbUm3Icx14FrzOwWr9SwpPiQEh6e+GEL
3z7m0uag1Pbc/A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:39 2026 by rpki-client