Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: 5yZZPlp9hLfhbw6O1eSvameGHNJOOaejEumkGxRcF1E=
Subject key identifier: 89:E4:EE:98:49:25:8D:A5:9A:1D:0D:90:EF:42:44:F4:F6:11:28:AD
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 01A0D2A5F12CC8C5560E906DF29BE53AFBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 09:01:25 +0000
Manifest this update: Thu 24 Sep 2026 09:01:25 +0000
Manifest next update: Fri 25 Sep 2026 09:01:25 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: ZTtAv9nuuqukzdNe4TVJMQrHBYEryJgluQ9Kzy0jDdU=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:f1:2c:c8:c5:56:0e:90:6d:f2:9b:e5:3a:fb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Sep 24 09:01:25 2026 GMT
Not After : Sep 25 09:01:25 2026 GMT
Subject: CN=89e4ee9849258da59a1d0d90ef4244f4f61128ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:dc:83:12:e8:35:83:94:44:8d:df:cf:54:
db:3a:a4:a6:6e:69:26:5f:c8:b6:40:b1:dc:0c:b5:
4a:a9:85:3f:d3:a0:49:6e:7c:a3:d8:65:b1:66:d7:
c8:97:fd:da:fe:40:89:6d:9e:63:77:42:6c:78:15:
ad:fb:c7:c6:8d:2a:e0:c3:4a:69:7a:a6:bd:32:04:
90:4a:15:f7:b6:e8:95:b8:99:60:b0:7c:c1:12:f7:
3d:d4:01:ac:ef:78:95:76:0b:f7:c9:a2:1a:17:79:
be:82:76:ce:f6:4a:16:5c:ae:3a:d2:29:b6:c8:2b:
09:eb:b5:c1:b3:d4:1e:83:f3:86:59:33:bf:62:69:
00:76:c8:53:de:9c:a7:f9:77:31:8c:cc:21:c5:34:
20:93:ce:9a:31:e1:3d:b9:18:81:c5:e3:c7:06:70:
71:0a:c2:2c:06:ae:5c:9c:4c:55:38:7c:03:4d:b1:
cf:a7:2a:32:2a:85:d0:5e:76:87:69:4e:a9:62:b1:
89:f7:ef:6c:21:51:d9:f1:b5:66:b9:88:d6:84:ab:
c3:e9:b3:1c:42:8e:be:a1:8b:58:24:c3:a6:1e:0b:
2d:be:bb:dc:b2:15:b5:88:b5:5d:46:ce:c0:8d:aa:
27:19:05:78:67:e2:38:47:9f:38:93:b9:1f:76:62:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:EE:98:49:25:8D:A5:9A:1D:0D:90:EF:42:44:F4:F6:11:28:AD
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6d:1a:d0:c7:a8:f3:74:ef:d1:54:3b:44:6c:1d:dc:23:61:
bd:2f:50:d5:e3:34:14:cf:be:2a:96:47:99:33:5c:b1:f9:3b:
fc:01:1f:11:b9:2c:02:5f:90:8f:2d:b5:0c:53:7c:04:62:6d:
ec:11:ff:e2:35:ad:e8:e2:7a:8d:a6:13:84:ca:9a:41:9d:2c:
59:7e:7e:bf:2c:3b:42:18:59:d8:b5:a8:f1:13:d8:97:41:18:
52:ef:70:9b:7b:84:ce:e2:22:9d:00:2c:4e:c8:a6:8f:26:37:
47:5a:8e:3a:75:3f:6e:72:f6:4d:ab:7c:d4:3d:9d:8a:df:8e:
78:6b:f4:d4:46:12:56:da:e2:ed:6d:d5:37:07:aa:d5:ab:76:
47:aa:2c:c7:fa:ff:f6:58:df:25:ce:55:79:9f:e3:46:ca:7c:
95:bb:88:37:f9:fe:df:09:b9:1f:b5:4f:5e:f7:d3:12:7c:e9:
a3:68:66:4f:e4:84:22:d7:1c:f3:60:58:84:63:df:82:39:4d:
65:96:f1:ac:06:26:ac:b9:a5:bd:14:f0:19:6b:e3:8b:fb:42:
4d:05:c7:f5:d5:7f:59:6a:7b:40:8c:c6:ce:b7:d0:a2:fa:b1:
46:37:12:6e:ea:df:f7:95:81:13:0e:9b:ff:1f:d3:7f:57:e6:
53:a6:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:15:44 2026 by rpki-client