Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier: FPDP6VAoUdPp13rcRH30sBfCmt8lBBAcR2Qh1WOaV6Y=
Subject key identifier: 12:95:A3:C5:99:C2:54:28:CA:C0:26:F4:46:32:5C:92:54:DB:EB:01
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial: 01A0E13D55A597D89177352CCFE5C14D3748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number: 0996
Signing time: Sun 27 Sep 2026 05:01:28 +0000
Manifest this update: Sun 27 Sep 2026 05:01:28 +0000
Manifest next update: Mon 28 Sep 2026 05:01:28 +0000
Files and hashes: 1: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: QmOZwtaOrj7mG2l7bY8/khaw+5OckXDqCRXDwD89Xak=)
2: uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa (hash: n7rmT7eWhWaDz6MLyzDuXY6l9WnAuvoKMn9XsT5ZVWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:55:a5:97:d8:91:77:35:2c:cf:e5:c1:4d:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Validity
Not Before: Sep 27 05:01:28 2026 GMT
Not After : Sep 28 05:01:28 2026 GMT
Subject: CN=1295a3c599c25428cac026f446325c9254dbeb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:6c:99:a7:ef:80:f2:2a:f5:d4:95:76:f2:
6e:aa:f4:cd:03:f4:c6:ad:4b:69:11:54:81:6d:e0:
f6:c1:0e:32:78:2a:4a:5a:e4:c0:c4:4a:5e:ab:30:
d3:c0:a7:d2:fe:b8:39:3e:92:85:f3:e5:c1:1e:aa:
07:df:e6:95:64:58:27:c2:cd:06:b8:f7:fb:cf:8f:
60:b0:d1:23:c2:5c:64:62:ef:4c:0f:84:63:71:14:
e6:cc:79:f7:8d:b9:e2:e0:2f:b4:a5:2a:e6:76:fe:
31:96:27:7c:e7:b7:cf:37:32:05:da:3f:9a:df:72:
35:6a:1f:46:31:8e:ca:e0:c5:ac:ca:ff:fb:17:a7:
3f:8d:43:b2:95:c3:e2:25:fc:fb:eb:17:f8:1c:fe:
de:57:31:5f:bb:cc:74:44:05:cb:d2:43:34:76:ab:
60:1b:05:12:ac:86:31:7e:a2:fe:af:b3:45:94:b2:
c9:56:8f:10:dd:ce:35:2e:fe:bd:b7:2b:4b:4a:ce:
ed:94:4c:78:41:09:ba:cf:6d:e5:24:64:11:f3:47:
9f:5d:e6:d1:bc:85:f2:4f:e9:69:ca:1c:ad:00:f3:
71:ce:3e:16:06:fd:5c:f5:0a:d0:96:ad:7d:89:74:
a7:a9:d4:72:96:95:d8:67:df:88:61:2b:29:1d:1b:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:95:A3:C5:99:C2:54:28:CA:C0:26:F4:46:32:5C:92:54:DB:EB:01
X509v3 Authority Key Identifier:
keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ed:64:61:a6:f4:c2:81:bf:e6:d7:b4:fb:04:ae:e4:fc:a8:
64:d0:28:53:2f:2c:83:af:ab:fc:cb:1c:c0:01:a6:27:68:22:
ef:da:3b:c2:c4:23:00:f1:61:f8:ea:96:ed:3b:a6:55:28:81:
44:cf:c2:ac:b8:f2:6c:7c:79:ed:90:0b:13:e1:4d:55:23:cf:
9e:ca:9a:28:d3:74:2a:ce:ea:3e:6a:7c:8e:68:1a:cc:f3:0f:
aa:cb:22:02:22:24:83:ae:64:ed:e3:b2:d7:60:a6:78:9f:ee:
cf:cf:2f:c3:05:e2:cf:4c:c0:8b:75:b0:3c:0e:4a:02:40:6b:
6e:e3:e8:c3:69:6c:16:57:fe:96:62:6c:88:58:c2:cb:0c:32:
d9:e9:db:af:24:c7:04:f5:18:83:07:02:74:16:60:5f:21:58:
28:c1:b9:54:1b:1a:23:f9:13:27:ad:c2:5e:0b:33:6a:91:37:
6c:22:83:b3:da:90:5b:28:35:d8:d5:75:f4:00:0a:69:e7:dc:
41:c3:87:65:dc:4c:59:c8:c0:23:3e:6b:fe:d6:26:7f:4e:81:
6f:05:d6:05:08:8b:8f:89:a1:4b:a7:9d:15:cb:bf:c5:f9:2f:
12:b8:71:6a:fd:a5:6e:9b:c7:62:83:7f:e2:70:38:fd:5d:c0:
67:c9:c6:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPVWll9iRdzUsz+XBTTdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YmM1MmIxNTA2OWMxYzQ3YjU0ZTk3YjlmNTY5NGI3NTVi
NWNlYjEwHhcNMjYwOTI3MDUwMTI4WhcNMjYwOTI4MDUwMTI4WjAzMTEwLwYDVQQD
EygxMjk1YTNjNTk5YzI1NDI4Y2FjMDI2ZjQ0NjMyNWM5MjU0ZGJlYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozlsmafvgPIq9dSVdvJuqvTNA/TG
rUtpEVSBbeD2wQ4yeCpKWuTAxEpeqzDTwKfS/rg5PpKF8+XBHqoH3+aVZFgnws0G
uPf7z49gsNEjwlxkYu9MD4RjcRTmzHn3jbni4C+0pSrmdv4xlid857fPNzIF2j+a
33I1ah9GMY7K4MWsyv/7F6c/jUOylcPiJfz76xf4HP7eVzFfu8x0RAXL0kM0dqtg
GwUSrIYxfqL+r7NFlLLJVo8Q3c41Lv69tytLSs7tlEx4QQm6z23lJGQR80efXebR
vIXyT+lpyhytAPNxzj4WBv1c9QrQlq19iXSnqdRylpXYZ9+IYSspHRvISwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKVo8WZwlQoysAm9EYyXJJU2+sBMB8GA1UdIwQY
MBaAFFm8UrFQacHEe1Tpe59WlLdVtc6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEt
MmMxMGIxOWQ0YzJhLzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEtMmMxMGIxOWQ0YzJh
LzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+1kYab0
woG/5te0+wSu5PyoZNAoUy8sg6+r/MscwAGmJ2gi79o7wsQjAPFh+OqW7TumVSiB
RM/CrLjybHx57ZALE+FNVSPPnsqaKNN0Ks7qPmp8jmgazPMPqssiAiIkg65k7eOy
12CmeJ/uz88vwwXiz0zAi3WwPA5KAkBrbuPow2lsFlf+lmJsiFjCywwy2enbryTH
BPUYgwcCdBZgXyFYKMG5VBsaI/kTJ63CXgszapE3bCKDs9qQWyg12NV19AAKaefc
QcOHZdxMWcjAIz5r/tYmf06BbwXWBQiLj4mhS6edFcu/xfkvErhxav2lbpvHYoN/
4nA4/V3AZ8nGqQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:21 2026 by rpki-client