Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
File: WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft (raw, json)
Hash identifier: Ye/oym2UqEcGlRyz0iqPWZEZqSX+EiZYWH9H1WTCGFE=
Subject key identifier: 5C:94:10:04:82:F5:6C:10:5E:E4:CF:4A:30:CB:69:C5:31:BD:75:A5
Authority key identifier: 5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
Certificate issuer: /CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Certificate serial: 019F9549F12B54E59C0AE194B84F90B42D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:18 +0000
Manifest this update: Fri 24 Jul 2026 18:01:18 +0000
Manifest next update: Sat 25 Jul 2026 18:01:18 +0000
Files and hashes: 1: 8u2z2Xga5O5N_cJ6XwfoQDyeqjI.roa (hash: UTaNMd3CEd0lWrDH+fieqbIVnu1cLWotgckfZ6yVE20=)
2: WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl (hash: l1jigJFKjq+RnQuiGnFjzNRXCBrkUp+T19NqKU1fgrQ=)
3: _5WF2PQCdHfSB17pJupjN-FIiNc.roa (hash: Ya29FAa0OUkvMPvOrcq7snCU9GLA5RS5i5UVH+eGNFE=)
4: s5ImGcjXCXBrl_lB3UGcVOEG1pc.roa (hash: IH63TUzfzMb/SQxlsB7kB/bwWUNTCvlV00UxXhSJjuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:f1:2b:54:e5:9c:0a:e1:94:b8:4f:90:b4:2d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Validity
Not Before: Jul 24 18:01:18 2026 GMT
Not After : Jul 25 18:01:18 2026 GMT
Subject: CN=5c94100482f56c105ee4cf4a30cb69c531bd75a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:b5:04:c6:04:07:fd:9e:c7:f3:f4:a2:15:
79:68:fe:ea:70:f3:6a:d5:b1:8c:10:51:17:a1:4a:
97:0f:c1:17:2a:f0:6d:ce:d6:e8:bb:40:95:18:57:
9a:b1:55:9a:9c:15:a4:04:bf:42:2c:96:82:fc:21:
5f:a7:aa:26:4d:ba:89:b6:8f:50:d0:6f:4c:35:b2:
8a:af:4b:21:78:98:97:8d:a1:e0:da:65:f0:48:a8:
d4:ae:68:a1:da:c4:bc:57:79:31:ab:c0:a8:21:89:
ff:02:cb:32:33:f7:8f:a9:07:71:b2:e6:cf:c3:b8:
bd:fc:4a:bf:50:40:be:59:f9:43:63:da:36:4f:72:
1b:5d:54:1f:fc:d7:fb:38:aa:dd:82:c3:f5:51:96:
01:ae:5f:a8:21:ca:18:9a:5e:39:10:9b:b9:57:92:
1f:55:16:a9:2f:ee:1f:ef:bf:ec:5c:8a:19:f4:79:
bc:52:16:86:a5:84:a9:dc:61:97:d4:6d:4e:9a:36:
2a:c5:42:19:56:62:5e:b9:25:dd:d1:2d:98:7e:9e:
ec:95:1c:46:0c:f5:94:ce:f1:67:9f:9d:a5:85:c9:
5c:bf:f5:fb:80:9f:3e:46:83:23:0e:4e:ba:45:5f:
00:8b:2f:1f:4d:de:a0:9d:27:09:49:c8:ed:83:1f:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:10:04:82:F5:6C:10:5E:E4:CF:4A:30:CB:69:C5:31:BD:75:A5
X509v3 Authority Key Identifier:
keyid:5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e6:9b:74:8f:b8:11:70:a2:cb:d7:84:8e:30:f7:ac:ea:65:
69:44:89:01:d2:55:90:95:10:0e:1e:ec:3b:a1:4d:d2:ae:27:
4f:ab:36:f0:a6:94:57:0e:5a:13:11:5a:2c:31:f3:35:63:a0:
3d:96:97:76:38:06:a5:1a:ed:81:d2:03:81:c8:29:86:a0:6a:
94:ef:ec:59:16:89:bf:e8:e3:31:2e:4a:03:93:c5:6d:bc:1f:
ff:b9:30:70:1d:c8:ed:cb:c4:94:20:f0:55:e0:88:ea:db:34:
de:e8:7f:b5:6c:47:76:9f:2b:a5:27:19:a8:2f:71:78:5b:7b:
58:61:ff:75:02:0a:7a:3e:e3:51:9a:96:fc:63:b5:50:b6:30:
de:ee:56:d1:04:a6:85:23:66:ea:da:59:44:ee:4f:c7:33:11:
5b:b8:9d:88:6c:f4:a5:c6:40:b6:5f:2c:80:cc:58:52:6d:af:
0b:90:fa:54:03:4a:3e:e6:4f:54:f4:ce:fd:04:4e:56:6a:56:
98:62:24:fb:76:63:b2:c1:72:d6:83:a7:5f:80:31:ab:fe:72:
09:65:2e:d4:aa:43:44:5d:c8:e9:06:82:5e:ce:b3:0b:45:e0:
c2:21:7a:b1:e0:75:e8:1c:5c:95:7b:6d:dc:41:ed:6a:9e:dc:
42:4a:40:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSfErVOWcCuGUuE+QtC0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmIyYTk5NTkxNDkzMWNjNGE1YjUzODVmNmNiMDk0Nzc3
YzY5NzUwHhcNMjYwNzI0MTgwMTE4WhcNMjYwNzI1MTgwMTE4WjAzMTEwLwYDVQQD
Eyg1Yzk0MTAwNDgyZjU2YzEwNWVlNGNmNGEzMGNiNjljNTMxYmQ3NWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pm1BMYEB/2ex/P0ohV5aP7qcPNq
1bGMEFEXoUqXD8EXKvBtztbou0CVGFeasVWanBWkBL9CLJaC/CFfp6omTbqJto9Q
0G9MNbKKr0sheJiXjaHg2mXwSKjUrmih2sS8V3kxq8CoIYn/AssyM/ePqQdxsubP
w7i9/Eq/UEC+WflDY9o2T3IbXVQf/Nf7OKrdgsP1UZYBrl+oIcoYml45EJu5V5If
VRapL+4f77/sXIoZ9Hm8UhaGpYSp3GGX1G1OmjYqxUIZVmJeuSXd0S2Yfp7slRxG
DPWUzvFnn52lhclcv/X7gJ8+RoMjDk66RV8Aiy8fTd6gnScJScjtgx9eewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyUEASC9WwQXuTPSjDLacUxvXWlMB8GA1UdIwQY
MBaAFFr7KplZFJMcxKW1OF9ssJR3fGl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZzcW1Wa1VreHpFcGJVNFgyeXdsSGQ4YVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt
NGE4YjZiNDA4MmIxLzEvV3ZzcW1Wa1VreHpFcGJVNFgyeXdsSGQ4YVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx
LzEvV3ZzcW1Wa1VreHpFcGJVNFgyeXdsSGQ4YVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOabdI+4
EXCiy9eEjjD3rOplaUSJAdJVkJUQDh7sO6FN0q4nT6s28KaUVw5aExFaLDHzNWOg
PZaXdjgGpRrtgdIDgcgphqBqlO/sWRaJv+jjMS5KA5PFbbwf/7kwcB3I7cvElCDw
VeCI6ts03uh/tWxHdp8rpScZqC9xeFt7WGH/dQIKej7jUZqW/GO1ULYw3u5W0QSm
hSNm6tpZRO5PxzMRW7idiGz0pcZAtl8sgMxYUm2vC5D6VANKPuZPVPTO/QROVmpW
mGIk+3ZjssFy1oOnX4Axq/5yCWUu1KpDRF3I6QaCXs6zC0XgwiF6seB16BxclXtt
3EHtap7cQkpAaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:37 2026 by rpki-client