Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
File: WvxA0kCVgUP3KaGOLDVOucQ_E68.mft (raw, json)
Hash identifier: 9L8BCQF4ttOwFCTrXTxqSUfk6D1tCdB5CAlsXAx+gmk=
Subject key identifier: 83:65:FE:5E:DD:EF:7A:86:45:E7:E1:54:E2:03:D3:B1:73:06:3D:5D
Authority key identifier: 5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
Certificate issuer: /CN=5afc40d240958143f729a18e2c354eb9c43f13af
Certificate serial: 019F90C7CB25D06D5478FBF9AD9E9E56DE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
Manifest number: 41
Signing time: Thu 23 Jul 2026 21:00:40 +0000
Manifest this update: Thu 23 Jul 2026 21:00:40 +0000
Manifest next update: Fri 24 Jul 2026 21:00:40 +0000
Files and hashes: 1: FRfo6l0O44AlCNnhnhmuDvpHTzg.roa (hash: 7i6dHellWiAp50OL94RpcYOJ5rAib14ynKrewSzenKY=)
2: WvxA0kCVgUP3KaGOLDVOucQ_E68.crl (hash: luJZhP38kmr3Oi0xBbXMu/KdNbHPNbCiCfJlYu9czeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:cb:25:d0:6d:54:78:fb:f9:ad:9e:9e:56:de:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc40d240958143f729a18e2c354eb9c43f13af
Validity
Not Before: Jul 23 21:00:40 2026 GMT
Not After : Jul 24 21:00:40 2026 GMT
Subject: CN=8365fe5eddef7a8645e7e154e203d3b173063d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:cd:3b:ca:31:64:5d:2d:d0:89:0d:ab:f0:
63:e6:e9:39:a9:ac:af:1a:ee:4f:a1:42:11:8d:12:
95:86:2c:ed:38:01:e7:bf:4e:f3:9e:53:25:89:75:
41:2a:97:b5:c5:44:d1:06:30:aa:16:8b:99:94:78:
7a:a2:5f:33:f0:a1:12:d3:50:d9:44:9e:80:22:d0:
57:5e:b1:b8:42:16:28:65:5b:b2:35:61:8e:e3:36:
a5:cb:f6:fe:fb:3c:af:5d:5f:45:f8:e0:22:30:b8:
99:a4:8c:30:34:f0:2e:6d:bd:3b:de:cf:b6:4c:8c:
59:1c:e0:fb:66:b6:20:4e:6d:c8:a5:be:73:48:bd:
f0:21:41:4f:65:ab:ab:a9:7e:53:d2:a7:c5:1a:66:
6a:f2:8a:94:19:64:d7:0a:12:82:26:95:54:da:ef:
4d:d8:2d:c8:33:df:bf:4d:22:88:78:95:da:0b:a2:
4a:63:d0:66:c0:6b:e9:03:f8:3d:10:65:bf:48:25:
c8:0b:a0:26:6b:9a:da:5d:0a:38:e4:3b:24:a9:07:
da:70:62:f8:b2:8d:8a:a9:96:51:e8:8c:69:49:6a:
91:c9:e5:34:9d:a1:bc:3b:11:99:c2:fa:65:83:2d:
ea:b6:1c:9c:df:4c:99:14:a9:fb:5d:44:0e:33:9d:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:FE:5E:DD:EF:7A:86:45:E7:E1:54:E2:03:D3:B1:73:06:3D:5D
X509v3 Authority Key Identifier:
keyid:5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:86:08:95:b4:63:ed:49:93:89:e8:0b:8d:bb:42:cf:19:40:
3f:69:39:df:3f:92:00:1c:3c:76:50:19:88:db:b1:52:3e:05:
e3:9f:85:f5:92:31:9d:eb:03:08:f6:ba:1b:ae:1e:b2:31:06:
90:c1:dc:f8:9e:8b:52:94:8d:5c:cd:54:bf:5b:0c:63:4a:1a:
ed:88:4b:0c:60:fe:d9:be:9b:73:6e:0b:89:89:cc:b2:82:65:
0d:c9:22:f0:05:1e:a5:8f:8c:69:ae:8a:cb:55:ae:33:72:f2:
98:48:46:d1:99:b6:39:38:e2:8d:d8:e3:ae:e2:6b:fe:02:d7:
3b:cd:ae:17:75:6b:43:eb:d1:d7:f8:b4:a9:ec:d1:29:39:a4:
47:57:0f:26:06:26:09:2d:77:df:30:56:a4:5a:ba:15:05:29:
5a:73:55:0e:ee:db:3b:24:07:69:41:05:88:f7:4e:2d:48:9a:
af:cc:11:3a:b0:ea:93:11:97:36:f7:00:29:75:6b:63:94:4e:
0a:90:37:47:e7:d7:aa:51:7a:67:b4:84:23:bf:12:76:30:76:
48:cb:1d:50:65:e3:75:36:f1:ba:72:81:6f:0d:1c:fc:b6:42:
1a:d2:ed:d4:a6:6c:9b:9c:5a:ff:73:08:ef:77:e5:23:8b:98:
9b:4e:9d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx8sl0G1UePv5rZ6eVt6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmM0MGQyNDA5NTgxNDNmNzI5YTE4ZTJjMzU0ZWI5YzQz
ZjEzYWYwHhcNMjYwNzIzMjEwMDQwWhcNMjYwNzI0MjEwMDQwWjAzMTEwLwYDVQQD
Eyg4MzY1ZmU1ZWRkZWY3YTg2NDVlN2UxNTRlMjAzZDNiMTczMDYzZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJnNO8oxZF0t0IkNq/Bj5uk5qayv
Gu5PoUIRjRKVhiztOAHnv07znlMliXVBKpe1xUTRBjCqFouZlHh6ol8z8KES01DZ
RJ6AItBXXrG4QhYoZVuyNWGO4zaly/b++zyvXV9F+OAiMLiZpIwwNPAubb073s+2
TIxZHOD7ZrYgTm3Ipb5zSL3wIUFPZaurqX5T0qfFGmZq8oqUGWTXChKCJpVU2u9N
2C3IM9+/TSKIeJXaC6JKY9BmwGvpA/g9EGW/SCXIC6Ama5raXQo45DskqQfacGL4
so2KqZZR6IxpSWqRyeU0naG8OxGZwvplgy3qthyc30yZFKn7XUQOM50d9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINl/l7d73qGRefhVOID07FzBj1dMB8GA1UdIwQY
MBaAFFr8QNJAlYFD9ymhjiw1TrnEPxOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Z4QTBrQ1ZnVVAzS2FHT0xEVk91Y1FfRTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjk4MGMtMTUyYi00MjZkLTk2NDkt
ZmU4ZDAyMTFkMThjLzEvV3Z4QTBrQ1ZnVVAzS2FHT0xEVk91Y1FfRTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Zjk4MGMtMTUyYi00MjZkLTk2NDktZmU4ZDAyMTFkMThj
LzEvV3Z4QTBrQ1ZnVVAzS2FHT0xEVk91Y1FfRTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4YIlbRj
7UmTiegLjbtCzxlAP2k53z+SABw8dlAZiNuxUj4F45+F9ZIxnesDCPa6G64esjEG
kMHc+J6LUpSNXM1Uv1sMY0oa7YhLDGD+2b6bc24LiYnMsoJlDcki8AUepY+Maa6K
y1WuM3LymEhG0Zm2OTjijdjjruJr/gLXO82uF3VrQ+vR1/i0qezRKTmkR1cPJgYm
CS133zBWpFq6FQUpWnNVDu7bOyQHaUEFiPdOLUiar8wROrDqkxGXNvcAKXVrY5RO
CpA3R+fXqlF6Z7SEI78SdjB2SMsdUGXjdTbxunKBbw0c/LZCGtLt1KZsm5xa/3MI
73flI4uYm06dyw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:02 2026 by rpki-client