Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: 3NkxW979+FGGga+njNh/fXt/nVJN18/+8KM3EOyGzJ0=
Subject key identifier: 63:62:E5:D2:FD:81:3E:BF:92:70:05:D5:EC:58:C6:C8:AB:AC:74:27
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 01A103C90BCB3A02961658AAC53EFD5A8A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 1603
Signing time: Sat 03 Oct 2026 22:01:09 +0000
Manifest this update: Sat 03 Oct 2026 22:01:09 +0000
Manifest next update: Sun 04 Oct 2026 22:01:09 +0000
Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=)
2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: OQDHznMXoK7Us5tYbYTkmGL52X/tSduS4Vwe3XMFS2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:0b:cb:3a:02:96:16:58:aa:c5:3e:fd:5a:8a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Oct 3 22:01:09 2026 GMT
Not After : Oct 4 22:01:09 2026 GMT
Subject: CN=6362e5d2fd813ebf927005d5ec58c6c8abac7427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:d6:b7:ef:82:b3:80:e4:22:da:6c:c3:72:
7e:48:52:3c:7c:7f:f9:41:00:d4:98:82:ff:45:0d:
3c:bd:b1:df:10:c2:aa:4f:ed:a5:34:51:aa:49:15:
3e:6e:a1:54:d7:a0:49:53:60:30:06:26:13:95:e4:
2b:60:71:f2:fa:54:fe:0d:b1:13:44:33:08:90:1f:
30:47:8c:07:6b:e1:82:79:64:10:f9:50:3f:f7:ee:
b7:46:02:da:31:64:5e:35:ea:3d:43:35:96:24:f9:
a2:5e:cf:ad:50:80:d2:b0:34:9f:61:69:67:1c:7f:
d2:c3:d0:6d:f7:8a:82:15:c0:ce:bc:7b:c7:ba:42:
97:c0:98:e8:20:13:22:bd:3c:86:e6:6d:f2:bf:f9:
6a:60:02:d4:ee:24:b4:a5:87:92:0f:1e:9e:47:85:
f6:13:a2:d3:e1:df:b1:19:7c:f2:ab:50:e3:d3:a8:
0e:a2:88:e5:fc:89:22:92:50:1a:1f:7b:a2:95:5c:
ce:98:6a:7e:01:0a:8c:90:18:0e:b5:ea:ed:82:dd:
0d:2f:7f:5b:01:e7:3b:d4:5e:38:93:9a:38:c2:27:
74:72:28:82:6a:e6:67:0b:d4:a4:93:ed:e1:3b:86:
8f:38:c0:ee:cb:76:c4:d8:10:0b:23:9e:2e:99:21:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:62:E5:D2:FD:81:3E:BF:92:70:05:D5:EC:58:C6:C8:AB:AC:74:27
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:94:89:47:74:97:f5:db:02:19:3b:40:08:cc:29:0f:7d:72:
d6:22:33:99:05:5d:77:04:18:02:dc:1a:57:cb:8c:ee:58:44:
0f:ec:32:66:d7:3f:df:b1:f4:43:d1:23:83:1b:47:6e:5e:aa:
43:af:ae:58:fa:b5:53:0d:ff:f0:09:22:14:f0:0f:c0:2e:62:
32:5a:6c:34:11:80:d9:79:14:a2:a5:a5:76:bf:68:c1:80:a6:
b8:0e:09:ea:a7:41:b4:bc:ca:e6:a6:e1:26:6b:a5:08:f9:51:
50:f6:39:a1:01:29:a3:39:56:57:d4:4d:69:a1:e5:29:62:de:
bf:38:77:71:bf:6f:6d:01:85:92:41:fc:e9:ff:78:b6:46:0e:
10:43:1f:90:ef:63:d0:1b:7f:b2:d7:bb:97:07:7d:02:a3:c3:
4e:6d:54:10:1d:6c:84:fc:50:c2:69:dd:f3:6f:9a:b8:d3:a9:
c6:de:c1:11:45:5e:ac:99:d3:4d:f5:16:1c:89:04:f8:f0:32:
0c:7c:8b:59:61:ac:dc:9d:32:cd:c7:a1:fb:e0:ee:f7:e0:dc:
60:46:2e:6e:50:a7:f4:72:bc:5a:5a:c2:1a:29:70:37:5a:9a:
8b:a1:d7:e2:a8:bf:a7:5c:d9:76:90:23:9b:b9:a0:ae:52:b4:
39:f9:b9:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDyQvLOgKWFliqxT79WoohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1
NTcyODgwHhcNMjYxMDAzMjIwMTA5WhcNMjYxMDA0MjIwMTA5WjAzMTEwLwYDVQQD
Eyg2MzYyZTVkMmZkODEzZWJmOTI3MDA1ZDVlYzU4YzZjOGFiYWM3NDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhrWt++Cs4DkItpsw3J+SFI8fH/5
QQDUmIL/RQ08vbHfEMKqT+2lNFGqSRU+bqFU16BJU2AwBiYTleQrYHHy+lT+DbET
RDMIkB8wR4wHa+GCeWQQ+VA/9+63RgLaMWReNeo9QzWWJPmiXs+tUIDSsDSfYWln
HH/Sw9Bt94qCFcDOvHvHukKXwJjoIBMivTyG5m3yv/lqYALU7iS0pYeSDx6eR4X2
E6LT4d+xGXzyq1Dj06gOoojl/IkiklAaH3uilVzOmGp+AQqMkBgOtertgt0NL39b
Aec71F44k5o4wid0ciiCauZnC9Skk+3hO4aPOMDuy3bE2BALI54umSGnswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNi5dL9gT6/knAF1exYxsirrHQnMB8GA1UdIwQY
MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt
OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh
LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZSJR3SX
9dsCGTtACMwpD31y1iIzmQVddwQYAtwaV8uM7lhED+wyZtc/37H0Q9EjgxtHbl6q
Q6+uWPq1Uw3/8AkiFPAPwC5iMlpsNBGA2XkUoqWldr9owYCmuA4J6qdBtLzK5qbh
JmulCPlRUPY5oQEpozlWV9RNaaHlKWLevzh3cb9vbQGFkkH86f94tkYOEEMfkO9j
0Bt/ste7lwd9AqPDTm1UEB1shPxQwmnd82+auNOpxt7BEUVerJnTTfUWHIkE+PAy
DHyLWWGs3J0yzceh++Du9+DcYEYublCn9HK8WlrCGilwN1qai6HX4qi/p1zZdpAj
m7mgrlK0Ofm5Vg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:45:37 2026 by rpki-client