Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: YMnfsI2x+3VhU8BQS/wAQwwlAg9UDncb9WSpZph+UYU=
Subject key identifier: 47:41:23:2E:54:B6:F5:B2:63:F2:7D:CB:82:8E:94:AB:12:B0:A7:2C
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 01A0FC7DB5A7874013363B1F16990B38BCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 1A82
Signing time: Fri 02 Oct 2026 12:01:31 +0000
Manifest this update: Fri 02 Oct 2026 12:01:31 +0000
Manifest next update: Sat 03 Oct 2026 12:01:31 +0000
Files and hashes: 1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: HzMZSWrFGwT2J1U/8mvWahmzu7NkeNgJyyq2QSwqKaY=)
2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:b5:a7:87:40:13:36:3b:1f:16:99:0b:38:bc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Oct 2 12:01:31 2026 GMT
Not After : Oct 3 12:01:31 2026 GMT
Subject: CN=4741232e54b6f5b263f27dcb828e94ab12b0a72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:2f:2b:49:9d:ed:76:92:a9:66:34:30:d0:
23:aa:2f:6b:ed:cc:03:0c:9f:cc:30:b3:32:59:c7:
28:0a:22:84:65:4e:73:f5:97:9b:c1:5c:38:4e:23:
0d:11:bf:9c:db:91:cd:f2:a3:c2:3f:3c:60:ed:aa:
35:55:ad:cc:dc:c6:66:5d:f2:41:12:dd:0f:28:86:
3f:e2:55:0e:5a:6d:93:92:5e:ce:39:ac:00:c1:06:
03:bb:9d:81:7e:5a:3e:ff:f3:7a:a1:a5:b0:5b:b8:
d5:f3:06:b7:d6:06:22:08:81:f0:e2:47:51:14:d0:
2c:ea:c1:85:c5:8e:41:c0:8a:63:a7:c6:45:25:1e:
f3:65:4d:88:9c:c4:73:00:f8:84:54:d8:16:8d:1a:
9c:78:c1:40:a5:17:6f:71:8d:f4:54:c9:34:d4:11:
8b:8e:eb:68:80:9a:ea:75:30:be:2e:62:e4:59:de:
9a:3d:84:26:c1:83:97:b3:60:b2:4c:b0:1b:61:69:
72:ef:84:79:fa:db:c2:94:ce:a0:b1:45:e0:1b:2d:
f5:84:c9:40:88:d9:bc:4a:ba:71:ba:7a:72:50:3c:
cc:55:52:b5:1f:7b:68:9d:32:d8:cd:f1:de:65:46:
f0:1a:1c:af:e6:2d:a1:48:39:2d:db:dd:77:27:0c:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:23:2E:54:B6:F5:B2:63:F2:7D:CB:82:8E:94:AB:12:B0:A7:2C
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bd:d8:c5:f5:4b:c8:4f:41:9d:ba:af:9f:75:05:12:4f:2b:
df:d6:59:2c:55:66:f6:e7:f8:0c:8c:9a:b2:7c:c3:c7:2b:27:
78:bb:6f:39:3c:2f:3c:2b:89:4f:30:8c:91:79:00:49:34:62:
c2:27:04:4c:4a:2e:48:81:51:65:b4:eb:3c:5f:e8:f3:b6:1f:
d0:62:8c:6d:5a:e0:95:30:bd:d8:83:78:b8:31:a7:d5:c9:0e:
ce:04:cc:f9:ff:3c:60:64:71:6c:a9:22:99:76:76:0c:c3:2a:
03:1c:0c:49:de:07:42:9d:07:c8:ed:ec:3a:99:df:b4:ff:ba:
c4:40:a2:08:7a:1b:0c:14:5a:eb:15:4a:64:12:56:de:61:88:
2d:9d:07:aa:ac:74:49:c9:49:c4:fe:85:c5:b4:72:99:7b:e4:
f6:2e:e8:c3:2b:43:7e:48:24:7b:8b:05:57:07:c1:58:3b:2c:
2a:07:b5:ca:67:d0:fe:d5:01:f1:f6:b8:be:d0:ec:64:ce:55:
8d:73:fd:83:ea:ac:29:21:bc:fc:ae:d8:12:6c:e3:bd:87:00:
05:80:a1:bb:97:f8:f4:c5:93:47:b0:e7:69:d0:76:a3:bd:df:
00:26:c8:28:48:dc:48:11:10:18:c7:52:d2:71:36:42:45:fd:
82:2d:6f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8fbWnh0ATNjsfFpkLOLzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx
NTZkN2MwHhcNMjYxMDAyMTIwMTMxWhcNMjYxMDAzMTIwMTMxWjAzMTEwLwYDVQQD
Eyg0NzQxMjMyZTU0YjZmNWIyNjNmMjdkY2I4MjhlOTRhYjEyYjBhNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OcvK0md7XaSqWY0MNAjqi9r7cwD
DJ/MMLMyWccoCiKEZU5z9ZebwVw4TiMNEb+c25HN8qPCPzxg7ao1Va3M3MZmXfJB
Et0PKIY/4lUOWm2Tkl7OOawAwQYDu52Bflo+//N6oaWwW7jV8wa31gYiCIHw4kdR
FNAs6sGFxY5BwIpjp8ZFJR7zZU2InMRzAPiEVNgWjRqceMFApRdvcY30VMk01BGL
jutogJrqdTC+LmLkWd6aPYQmwYOXs2CyTLAbYWly74R5+tvClM6gsUXgGy31hMlA
iNm8SrpxunpyUDzMVVK1H3tonTLYzfHeZUbwGhyv5i2hSDkt2913JwzxPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdBIy5UtvWyY/J9y4KOlKsSsKcsMB8GA1UdIwQY
MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt
OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh
LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb3YxfVL
yE9Bnbqvn3UFEk8r39ZZLFVm9uf4DIyasnzDxysneLtvOTwvPCuJTzCMkXkASTRi
wicETEouSIFRZbTrPF/o87Yf0GKMbVrglTC92IN4uDGn1ckOzgTM+f88YGRxbKki
mXZ2DMMqAxwMSd4HQp0HyO3sOpnftP+6xECiCHobDBRa6xVKZBJW3mGILZ0Hqqx0
SclJxP6FxbRymXvk9i7owytDfkgke4sFVwfBWDssKge1ymfQ/tUB8fa4vtDsZM5V
jXP9g+qsKSG8/K7YEmzjvYcABYChu5f49MWTR7DnadB2o73fACbIKEjcSBEQGMdS
0nE2QkX9gi1vUw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 16:53:01 2026 by rpki-client