Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier: /GU0NARD90gqxpwfKPpvLzZ8OePS6TwSC8YqMpDfl2U=
Subject key identifier: CF:87:29:F0:49:E2:44:0F:EA:E7:F5:7F:B6:95:D4:25:01:66:09:2A
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 019DA8673F0631BC3DAAB27A3855C7672ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number: 0999
Signing time: Mon 20 Apr 2026 01:00:31 +0000
Manifest this update: Mon 20 Apr 2026 01:00:31 +0000
Manifest next update: Tue 21 Apr 2026 01:00:31 +0000
Files and hashes: 1: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (hash: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8=)
2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: sUEqYNXmRx/kZN7aHP7LtPZtmOqtM4pgtbnNBM0L4nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:67:3f:06:31:bc:3d:aa:b2:7a:38:55:c7:67:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Apr 20 01:00:31 2026 GMT
Not After : Apr 21 01:00:31 2026 GMT
Subject: CN=cf8729f049e2440feae7f57fb695d4250166092a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:26:dd:c6:75:41:6b:e2:82:0d:aa:b8:6a:
5f:bc:54:04:5c:e3:98:59:7e:ee:b2:ea:0b:41:82:
ff:ee:f4:7d:b0:64:13:df:6d:99:b0:35:b0:7c:a8:
01:bc:fd:26:4b:2f:ee:26:4f:27:72:87:3c:3e:4c:
8f:02:4c:7e:81:79:26:77:a6:4d:84:66:39:76:c5:
3e:93:9d:65:d0:3f:29:07:de:73:2e:88:4b:fe:d1:
ad:7f:ea:06:ef:05:44:7b:56:fd:f4:1f:9b:7b:7a:
93:8d:b6:3a:89:fe:08:64:55:6d:cc:8e:79:3a:a5:
90:10:03:39:ec:75:b6:07:91:b9:20:f4:96:39:82:
2e:2a:0c:68:09:03:21:b6:10:58:6e:96:01:21:ab:
8a:16:50:87:ef:b4:39:f3:41:53:d2:c9:35:15:44:
15:be:db:d5:b6:9f:2f:ac:0e:a5:75:d2:1f:73:c2:
3c:05:aa:06:fe:5e:a5:a3:2e:0f:2d:95:c8:09:1f:
37:1b:ca:9b:9f:66:eb:53:87:09:3f:3f:80:4a:7b:
98:e6:13:14:40:de:43:3d:24:39:8b:cf:fa:9c:7f:
02:ab:1d:dc:a3:ea:df:90:8a:9e:6c:d1:57:ab:86:
df:2d:e5:66:ab:52:7f:13:ad:25:18:a2:b0:be:6b:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:29:F0:49:E2:44:0F:EA:E7:F5:7F:B6:95:D4:25:01:66:09:2A
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cc:56:86:bb:a4:0c:8c:dd:3d:79:25:1f:ad:3c:11:97:75:
0d:5e:f6:19:f5:52:11:2b:a9:d1:eb:f6:1c:b4:59:70:1d:72:
fc:95:5b:c1:0f:9a:20:77:fe:5d:0c:ec:98:e6:3a:12:08:07:
49:4a:f9:6a:f6:82:9d:33:86:ec:7f:3e:71:9d:f6:5f:d2:c4:
fd:95:a9:c5:c1:a6:30:67:e6:b1:39:8d:88:7a:08:69:61:23:
a3:db:84:08:75:c0:98:fd:a1:77:b0:3f:0c:50:98:58:fe:84:
2d:93:be:5b:22:79:17:88:82:26:10:ee:f2:7c:0c:3f:8d:09:
1e:7b:ae:61:4e:f1:db:3c:93:cd:3d:3e:f6:9d:b8:76:c9:3d:
5d:b1:8d:36:d8:e2:a4:b3:38:b8:81:5d:29:1a:fe:55:03:b9:
93:e9:bf:f7:02:72:11:47:97:fe:ce:1f:d9:08:d7:0f:30:42:
5b:43:ce:3d:c4:b0:b8:f0:d1:02:0a:a2:ee:9a:d8:37:09:7b:
2e:df:d5:1a:d3:17:2f:b4:82:6b:c0:fe:f2:b2:e2:cf:4d:ff:
b9:ef:b6:19:3d:21:ee:14:58:82:9f:44:e8:2f:93:8d:97:a0:
b7:a9:76:84:58:1e:52:08:b0:fd:8d:85:76:c7:66:1a:8c:f8:
37:7c:db:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2oZz8GMbw9qrJ6OFXHZy7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl
ZWQ2OGIwHhcNMjYwNDIwMDEwMDMxWhcNMjYwNDIxMDEwMDMxWjAzMTEwLwYDVQQD
EyhjZjg3MjlmMDQ5ZTI0NDBmZWFlN2Y1N2ZiNjk1ZDQyNTAxNjYwOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+Am3cZ1QWvigg2quGpfvFQEXOOY
WX7usuoLQYL/7vR9sGQT322ZsDWwfKgBvP0mSy/uJk8ncoc8PkyPAkx+gXkmd6ZN
hGY5dsU+k51l0D8pB95zLohL/tGtf+oG7wVEe1b99B+be3qTjbY6if4IZFVtzI55
OqWQEAM57HW2B5G5IPSWOYIuKgxoCQMhthBYbpYBIauKFlCH77Q580FT0sk1FUQV
vtvVtp8vrA6lddIfc8I8BaoG/l6loy4PLZXICR83G8qbn2brU4cJPz+ASnuY5hMU
QN5DPSQ5i8/6nH8Cqx3co+rfkIqebNFXq4bfLeVmq1J/E60lGKKwvmsWEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+HKfBJ4kQP6uf1f7aV1CUBZgkqMB8GA1UdIwQY
MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt
MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni
LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsxWhruk
DIzdPXklH608EZd1DV72GfVSESup0ev2HLRZcB1y/JVbwQ+aIHf+XQzsmOY6EggH
SUr5avaCnTOG7H8+cZ32X9LE/ZWpxcGmMGfmsTmNiHoIaWEjo9uECHXAmP2hd7A/
DFCYWP6ELZO+WyJ5F4iCJhDu8nwMP40JHnuuYU7x2zyTzT0+9p24dsk9XbGNNtji
pLM4uIFdKRr+VQO5k+m/9wJyEUeX/s4f2QjXDzBCW0POPcSwuPDRAgqi7prYNwl7
Lt/VGtMXL7SCa8D+8rLiz03/ue+2GT0h7hRYgp9E6C+TjZegt6l2hFgeUgiw/Y2F
dsdmGoz4N3zb0A==
-----END CERTIFICATE-----
Generated at Mon Apr 20 04:53:15 2026 by rpki-client