Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: 9oKIFokhihKFE5k1jbFK793MG8T5jDfMN5hMOhzEFU0=
Subject key identifier: A2:91:89:DA:98:1C:4F:EE:73:19:D9:19:9E:24:76:08:39:70:16:C9
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019F921195A172DF03FCEA775605ADF08938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 03:00:53 +0000
Manifest this update: Fri 24 Jul 2026 03:00:53 +0000
Manifest next update: Sat 25 Jul 2026 03:00:53 +0000
Files and hashes: 1: VZpbhc_eA7Oa0vwDTYsJW7g_4No.roa (hash: dCVENeZNnKA0zMmSc6XUDO4uQQz/dpb9CG4I1Q8TMQ8=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: MCIJhpzCuNg+gQMHi4v0WfTFVxEZ5hHjU+ctsq/8L+o=)
3: rz3WoPqGui6kz8uexMDSkDV-nM4.roa (hash: KxkWcXhCgpvZEzmrBaZNOG4SOGTTNmcegmhijqx+bwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:95:a1:72:df:03:fc:ea:77:56:05:ad:f0:89:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Jul 24 03:00:53 2026 GMT
Not After : Jul 25 03:00:53 2026 GMT
Subject: CN=a29189da981c4fee7319d9199e247608397016c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:bd:3c:dc:6a:5e:97:04:c2:13:61:c6:d7:
64:94:d0:8b:b4:75:97:24:fe:60:20:c1:ea:1c:45:
8a:20:e9:6c:87:40:4d:7f:dc:ed:51:e4:13:90:aa:
50:60:85:f4:f6:f4:44:32:9b:93:4f:3d:33:3b:64:
46:7e:1e:71:34:b8:07:27:33:ba:fc:49:aa:b5:b9:
b0:72:60:0d:7e:3c:b1:4a:51:5e:db:cb:c2:63:38:
69:8d:6b:ab:23:02:eb:17:bd:90:fa:b1:eb:22:93:
6a:85:58:45:aa:c3:24:fe:cf:be:e0:44:4f:66:6f:
a6:0f:e6:8b:9d:3a:b7:8d:fd:c3:23:30:c7:4a:59:
17:40:fe:af:23:3b:cc:d0:93:2d:2f:ab:da:90:b5:
55:da:59:d5:a3:a3:94:df:c5:1b:3c:50:fc:2d:fb:
67:4c:00:03:4d:b3:84:38:aa:d1:4f:ce:20:7a:8b:
99:c7:c3:1b:8a:1e:7b:eb:57:18:10:0d:8e:62:a4:
a4:78:8a:9a:98:b3:8d:bf:b0:07:1c:bc:e4:7f:0d:
f8:72:b0:93:76:98:cf:6f:7e:dc:e4:5b:6b:61:0a:
2b:f8:c0:e8:2d:dd:a0:44:64:50:57:60:83:2a:62:
b5:3c:d9:1f:97:c6:44:be:d9:17:23:f9:8f:2a:f9:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:89:DA:98:1C:4F:EE:73:19:D9:19:9E:24:76:08:39:70:16:C9
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:18:31:db:5c:d6:3c:11:30:6d:c2:12:eb:22:e6:9b:f3:d0:
b4:ab:90:ca:b9:7a:71:8d:bc:26:7f:3e:00:68:b6:02:40:1f:
72:48:fd:b5:1b:ea:ea:04:7e:07:5a:d8:09:90:d4:72:25:35:
17:f1:2b:81:03:56:3f:a5:ae:2a:e3:f2:23:9f:87:44:d7:76:
a8:b7:c6:6f:c0:1d:80:ca:d3:05:b6:89:62:ef:d8:f5:06:48:
46:a1:ab:f8:d6:f5:8a:b5:74:92:d8:b7:21:10:c2:73:f6:3f:
62:7e:98:2d:6a:ba:84:26:26:13:e1:d3:a5:ff:ad:51:d8:f8:
82:65:26:de:5b:4d:89:6c:f1:53:33:41:a2:c1:ae:5f:ac:d5:
30:cb:85:35:cc:4d:13:b0:5a:3d:04:50:06:03:27:b4:45:b7:
22:4b:ac:33:23:cf:6a:4d:67:e4:a9:98:2e:a8:e7:4f:9e:a7:
26:99:a6:af:4f:79:d0:48:39:00:52:8a:27:88:7c:50:a2:53:
8c:b4:6e:c2:a7:5f:6d:3d:2e:c4:4f:82:8f:c2:71:50:f7:81:
7d:40:08:53:6d:17:72:b6:07:34:77:97:2e:db:8f:43:8f:2f:
1b:4a:ea:e9:51:cc:b8:52:67:d1:45:a7:bc:c6:64:8a:6b:fb:
bd:73:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:37 2026 by rpki-client