Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier: BJr9D/czYeD3obGVS2WLQ8o1JTnltQueDapd5m5lY+4=
Subject key identifier: 39:25:8E:43:08:A6:18:FD:3A:21:5E:5B:03:BF:56:9F:99:F1:3F:A4
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 019F93FFD30AF619888F7E470CC48D0712DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 12:00:44 +0000
Manifest this update: Fri 24 Jul 2026 12:00:44 +0000
Manifest next update: Sat 25 Jul 2026 12:00:44 +0000
Files and hashes: 1: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: uwN/gWX01KTwjAxfx3Yecoi71ginNQPd2n16c1/1nj4=)
2: XWKWcGwWuxK442AqUwQOJoI0Riw.roa (hash: lPCDTJoNAlTYjYOQxRc8IFp9k2/Nouu3lyu3633P8Ys=)
3: vaTMXsKj9s2mYu4jK85sAAqXJgk.roa (hash: 9Sx8ua7dYYmRjEMlZOB1LM5xRgfZw4Tr41DAQH+beRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:d3:0a:f6:19:88:8f:7e:47:0c:c4:8d:07:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Jul 24 12:00:44 2026 GMT
Not After : Jul 25 12:00:44 2026 GMT
Subject: CN=39258e4308a618fd3a215e5b03bf569f99f13fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1d:88:6a:eb:e5:64:88:e6:3b:fe:b0:aa:03:
6a:58:5a:3f:58:e8:4a:56:6b:cc:ef:8d:b9:8f:ae:
96:df:52:c0:b6:aa:a2:cf:4d:7e:dc:d8:3a:86:98:
a1:6b:47:21:ee:b9:c8:b8:a1:a5:47:c6:70:28:b7:
20:5d:6c:f0:8d:c2:8c:48:bc:4d:e6:27:60:c7:dd:
c4:84:4f:5c:3c:02:00:c0:04:86:11:40:69:bf:77:
e2:fe:6e:a7:a7:45:40:6e:23:5e:89:46:e5:09:a2:
7c:94:ac:48:2d:7c:dd:40:e0:61:fc:b0:60:a0:35:
f9:ac:e8:fd:15:95:6e:d9:1f:dc:48:74:e6:5b:af:
f0:9c:83:dd:98:a6:4f:2e:27:ac:0f:96:ac:1d:93:
1f:aa:8d:63:45:3a:13:5f:6c:f0:c5:c1:57:22:17:
41:7c:a5:f8:9b:34:6b:34:72:ba:54:de:22:d2:54:
3e:a0:8f:4e:b3:bb:88:28:06:f6:c4:56:88:d3:e1:
5b:ba:c8:99:0f:e2:93:b2:6b:4f:e8:0a:55:44:76:
29:52:76:49:cf:52:2f:5b:37:af:a1:0c:7e:43:fa:
0d:e8:d5:03:bf:32:49:08:eb:2f:51:fc:87:cc:55:
37:0d:0c:cc:06:ce:c8:15:fb:61:64:3e:41:4f:cd:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:8E:43:08:A6:18:FD:3A:21:5E:5B:03:BF:56:9F:99:F1:3F:A4
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1f:95:4e:28:e6:71:18:7f:13:fb:5d:ae:c2:27:47:74:5e:
eb:49:99:08:90:18:02:3a:97:65:3c:59:1d:db:29:e6:ca:4b:
7f:bc:a1:1d:2b:45:5b:14:16:d4:29:d5:66:7b:e5:49:78:85:
d7:21:50:b5:eb:92:85:e6:18:9d:80:2a:12:bb:ed:38:11:87:
51:2f:4e:6c:0d:79:29:2e:5d:2f:40:ff:ec:3b:76:c5:89:72:
78:c2:85:3f:1f:bc:0e:39:65:07:3d:ce:a1:0c:99:87:8f:c2:
38:50:e2:ba:44:3b:10:40:60:c6:af:e6:66:29:76:aa:37:9a:
b8:7d:36:3d:d6:2c:8d:d3:6c:52:fa:50:a1:80:62:c5:1c:eb:
06:9d:17:1d:59:6d:19:3a:f7:5b:2f:df:4c:bc:89:29:00:f0:
d5:aa:83:c9:f7:2a:9e:b8:dc:a0:6e:6b:0d:b6:f8:96:60:3c:
ba:bf:37:cb:13:22:53:ea:dc:06:d3:3d:a4:46:6a:1d:b2:ed:
52:6b:90:02:13:8f:1c:38:f4:d7:31:ed:aa:a7:ff:d4:c6:46:
80:71:65:ac:0f:f2:c7:5a:f1:73:1f:4f:75:95:15:8c:35:00:
2c:d2:6d:c6:7d:a9:07:67:cc:13:d6:4b:d6:24:d6:1d:8f:8e:
d8:97:6b:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/9MK9hmIj35HDMSNBxLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWE4MWFhOWIyMTk3ZDkxMjdiNDQyNTI1MTAwZmZhYTM2
ZTBkNTIwHhcNMjYwNzI0MTIwMDQ0WhcNMjYwNzI1MTIwMDQ0WjAzMTEwLwYDVQQD
EygzOTI1OGU0MzA4YTYxOGZkM2EyMTVlNWIwM2JmNTY5Zjk5ZjEzZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h2IauvlZIjmO/6wqgNqWFo/WOhK
VmvM7425j66W31LAtqqiz01+3Ng6hpiha0ch7rnIuKGlR8ZwKLcgXWzwjcKMSLxN
5idgx93EhE9cPAIAwASGEUBpv3fi/m6np0VAbiNeiUblCaJ8lKxILXzdQOBh/LBg
oDX5rOj9FZVu2R/cSHTmW6/wnIPdmKZPLiesD5asHZMfqo1jRToTX2zwxcFXIhdB
fKX4mzRrNHK6VN4i0lQ+oI9Os7uIKAb2xFaI0+FbusiZD+KTsmtP6ApVRHYpUnZJ
z1IvWzevoQx+Q/oN6NUDvzJJCOsvUfyHzFU3DQzMBs7IFfthZD5BT81cUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkljkMIphj9OiFeWwO/Vp+Z8T+kMB8GA1UdIwQY
MBaAFFvqgaqbIZfZEntEJSUQD/qjbg1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yMjQxNTUtM2NhNC00ZmY3LWE5NjQt
ZmMwZGQ5MjUyYzlhLzEvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yMjQxNTUtM2NhNC00ZmY3LWE5NjQtZmMwZGQ5MjUyYzlh
LzEvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASh+VTijm
cRh/E/tdrsInR3Re60mZCJAYAjqXZTxZHdsp5spLf7yhHStFWxQW1CnVZnvlSXiF
1yFQteuSheYYnYAqErvtOBGHUS9ObA15KS5dL0D/7Dt2xYlyeMKFPx+8DjllBz3O
oQyZh4/COFDiukQ7EEBgxq/mZil2qjeauH02PdYsjdNsUvpQoYBixRzrBp0XHVlt
GTr3Wy/fTLyJKQDw1aqDyfcqnrjcoG5rDbb4lmA8ur83yxMiU+rcBtM9pEZqHbLt
UmuQAhOPHDj01zHtqqf/1MZGgHFlrA/yx1rxcx9PdZUVjDUALNJtxn2pB2fME9ZL
1iTWHY+O2JdrUg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:14 2026 by rpki-client