Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: /aJkftDsIaQGA5fMQjG9VtNlcEqX/Om753rj9mP/tHM=
Subject key identifier: 02:BD:CD:70:A7:F5:3B:FE:39:BA:80:3E:2E:D3:FB:1D:84:C5:FB:D5
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 019F954AA62E3C79C22D25C1EBDFDFA29821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 17FA
Signing time: Fri 24 Jul 2026 18:02:05 +0000
Manifest this update: Fri 24 Jul 2026 18:02:05 +0000
Manifest next update: Sat 25 Jul 2026 18:02:05 +0000
Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: /uA8bC1iNYa9KLuEfFQNUqOovbe9NCy5xVjo2He1BMc=)
2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:a6:2e:3c:79:c2:2d:25:c1:eb:df:df:a2:98:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Jul 24 18:02:05 2026 GMT
Not After : Jul 25 18:02:05 2026 GMT
Subject: CN=02bdcd70a7f53bfe39ba803e2ed3fb1d84c5fbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:70:7e:e0:01:01:96:f2:f5:6a:b4:53:17:
d2:f9:90:d9:7d:ef:37:ee:2f:86:9f:3f:02:e6:ae:
f8:0f:f8:4d:7d:7f:db:73:da:e2:49:a6:c3:e8:8b:
a1:04:3b:66:fe:f9:4b:0e:8e:ad:25:e4:9d:95:5a:
fc:92:67:c0:a0:13:de:56:ac:8e:e9:14:96:a4:e3:
2b:64:16:9b:4e:8e:11:16:ec:c5:6b:9b:13:c8:f0:
cd:30:aa:0d:24:cd:69:89:a0:fe:81:ba:62:6f:11:
06:04:fb:8f:4a:6e:42:49:d8:aa:9d:68:ea:e0:5a:
97:8b:94:b6:14:a4:64:06:f3:de:4d:e1:4d:1d:81:
27:ea:84:06:ef:5f:f7:e8:a6:4e:54:b6:48:6a:e9:
fe:fb:14:22:8e:65:65:92:8d:24:5f:03:ce:8d:ff:
f0:52:47:80:cb:d9:08:31:9b:7c:32:7a:ad:97:dd:
73:3d:70:7a:8f:81:db:e5:ef:db:46:82:5b:f9:2a:
7d:97:eb:81:7c:bf:49:4d:f1:fd:1f:48:33:3d:fd:
e2:3c:28:d3:5f:0a:5c:2d:c5:4e:11:c8:00:0c:8e:
78:90:a8:08:b0:b3:4f:49:ff:a9:ba:14:0a:51:d8:
49:ee:59:35:b4:13:04:9b:aa:d8:35:21:2f:0d:59:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BD:CD:70:A7:F5:3B:FE:39:BA:80:3E:2E:D3:FB:1D:84:C5:FB:D5
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b2:8d:64:15:ce:cc:53:bc:9b:6c:b2:29:77:07:c8:37:18:
ee:1e:28:07:a8:16:48:b7:bb:1d:f2:72:27:54:d7:43:64:71:
be:42:4a:d5:d4:c0:85:a3:68:d6:aa:1d:86:7a:03:92:45:b9:
f4:a9:c6:f1:85:a0:89:72:cc:80:7b:9a:b1:40:2d:ac:c9:8d:
0f:8f:65:63:08:cd:a6:c2:cc:e9:b0:41:4a:a4:b0:bd:75:e5:
73:a4:0e:f8:4d:5d:11:65:fd:15:c0:89:df:28:27:f7:80:19:
94:83:8e:f4:a8:31:31:6b:43:5c:88:dc:53:fb:ff:52:e5:cc:
cb:fe:50:c0:a1:0a:9e:4a:fc:6c:38:99:5c:b7:9e:ce:95:ce:
2c:45:80:b5:9c:d0:37:d7:a2:0d:a8:d9:d5:27:bc:19:cb:49:
6a:2d:26:a1:c8:ca:1c:9d:d1:f9:ac:83:11:5f:a9:24:f2:a1:
19:8e:b9:ab:c4:d3:af:54:3e:33:f8:7f:f6:cd:4f:15:e4:9b:
ae:32:c4:0b:78:31:3c:ad:6e:82:e5:c2:56:97:1a:33:85:76:
a1:aa:36:23:90:a4:21:a2:f2:00:c9:b0:0d:3e:36:11:40:82:
d5:69:fb:8a:3b:5b:b8:3b:ff:b5:85:93:2a:58:0a:03:b6:5d:
4a:be:65:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSqYuPHnCLSXB69/fopghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl
NGJhYWEwHhcNMjYwNzI0MTgwMjA1WhcNMjYwNzI1MTgwMjA1WjAzMTEwLwYDVQQD
EygwMmJkY2Q3MGE3ZjUzYmZlMzliYTgwM2UyZWQzZmIxZDg0YzVmYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv45wfuABAZby9Wq0UxfS+ZDZfe83
7i+Gnz8C5q74D/hNfX/bc9riSabD6IuhBDtm/vlLDo6tJeSdlVr8kmfAoBPeVqyO
6RSWpOMrZBabTo4RFuzFa5sTyPDNMKoNJM1piaD+gbpibxEGBPuPSm5CSdiqnWjq
4FqXi5S2FKRkBvPeTeFNHYEn6oQG71/36KZOVLZIaun++xQijmVlko0kXwPOjf/w
UkeAy9kIMZt8Mnqtl91zPXB6j4Hb5e/bRoJb+Sp9l+uBfL9JTfH9H0gzPf3iPCjT
XwpcLcVOEcgADI54kKgIsLNPSf+puhQKUdhJ7lk1tBMEm6rYNSEvDVlVGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK9zXCn9Tv+ObqAPi7T+x2ExfvVMB8GA1UdIwQY
MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt
ZmVjMjVkMmU5MThkLzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk
LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbKNZBXO
zFO8m2yyKXcHyDcY7h4oB6gWSLe7HfJyJ1TXQ2RxvkJK1dTAhaNo1qodhnoDkkW5
9KnG8YWgiXLMgHuasUAtrMmND49lYwjNpsLM6bBBSqSwvXXlc6QO+E1dEWX9FcCJ
3ygn94AZlIOO9KgxMWtDXIjcU/v/UuXMy/5QwKEKnkr8bDiZXLeezpXOLEWAtZzQ
N9eiDajZ1Se8GctJai0mocjKHJ3R+ayDEV+pJPKhGY65q8TTr1Q+M/h/9s1PFeSb
rjLEC3gxPK1uguXCVpcaM4V2oao2I5CkIaLyAMmwDT42EUCC1Wn7ijtbuDv/tYWT
KlgKA7ZdSr5laQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:49 2026 by rpki-client