Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: mYrpo5KKM5f1heODE0A4M/YEMOUHjfzqFGDdarE8xss=
Subject key identifier: BB:17:BA:F9:2E:54:BA:45:4F:3A:83:0C:25:C5:C6:6E:06:E9:DD:89
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 01A102497968964294D0B45D95E6B7CFC759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 0A35
Signing time: Sat 03 Oct 2026 15:02:11 +0000
Manifest this update: Sat 03 Oct 2026 15:02:11 +0000
Manifest next update: Sun 04 Oct 2026 15:02:11 +0000
Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: 8siuwADc66KMbSc9RtuRlUknT1F57XWPZl9XrlOXg1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:79:68:96:42:94:d0:b4:5d:95:e6:b7:cf:c7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Oct 3 15:02:11 2026 GMT
Not After : Oct 4 15:02:11 2026 GMT
Subject: CN=bb17baf92e54ba454f3a830c25c5c66e06e9dd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:96:b7:f5:ff:e2:04:0e:6a:a3:05:87:a3:
fd:c4:ad:99:a9:66:8e:ba:96:44:87:8d:ea:24:00:
11:41:20:ba:25:cf:65:c1:52:70:08:33:9e:64:73:
15:87:c8:e8:49:7a:80:08:68:b1:c5:a0:7d:50:ea:
dc:eb:71:7e:ce:27:21:b3:cd:b1:a3:78:d3:fd:49:
f5:e5:9b:91:e3:5a:61:51:7f:ac:b0:b7:9d:1c:34:
43:0a:35:43:24:27:4d:df:4d:ee:1d:d5:5e:f7:49:
ec:18:bb:09:71:8a:64:66:7c:7c:1a:37:41:ca:17:
5d:74:5b:27:55:fa:ca:a2:96:7b:37:40:6a:1e:18:
60:ae:ea:6f:70:a0:dd:31:4d:64:fb:cc:b6:0e:26:
83:bc:65:25:7a:59:10:99:62:1a:83:36:90:ee:89:
ed:74:5c:bc:7b:47:2f:ca:59:84:56:59:17:c5:ff:
df:43:1f:31:b9:ba:de:7a:8d:20:8b:4f:2a:90:ca:
ac:4c:33:ff:da:9a:f6:cd:6f:6d:a6:a2:73:9f:2e:
f9:8b:03:23:a3:3b:f5:5d:36:c2:ad:ae:95:1d:92:
c9:cb:e7:c9:53:6e:f0:ec:c2:6d:0e:68:59:8d:f8:
4e:a0:25:4a:9c:68:a9:95:77:68:9a:d3:73:7b:9f:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:BA:F9:2E:54:BA:45:4F:3A:83:0C:25:C5:C6:6E:06:E9:DD:89
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:19:d2:c0:d4:c9:0e:cd:39:12:ec:c9:6e:dc:72:b6:8f:97:
de:11:9f:09:7a:8f:f7:63:33:d5:bd:e0:c1:39:00:61:a2:70:
d8:83:62:34:dd:0f:62:d6:7b:45:93:74:18:ad:b5:c8:72:45:
f1:cf:f9:13:05:29:e6:09:2d:d1:2a:7f:d2:42:e9:7e:b4:d2:
70:f3:77:e8:64:c6:f3:b7:8c:a3:39:9a:fd:8f:a9:c1:3f:b4:
ec:c3:c4:05:a3:ac:a1:14:2a:77:3b:76:1b:59:2c:37:a2:3d:
ec:65:f4:d3:9c:36:a5:f9:e4:a4:a3:0f:34:a0:a7:72:1d:8a:
21:e3:45:7e:0c:ac:6c:e5:7d:6c:d4:24:45:db:40:63:72:68:
f2:a5:17:a9:91:58:a4:f6:07:ba:5e:ec:77:ef:2b:9f:f9:49:
24:72:e4:50:cb:bd:91:74:27:b9:4c:5d:f9:04:05:e7:60:0e:
11:5b:a4:37:1d:fd:8e:3c:21:06:18:88:fb:ea:72:f4:dd:04:
36:b5:ef:a8:68:e3:c6:18:b6:cd:2c:57:c7:46:e2:4f:a1:45:
3e:b3:3f:62:ae:35:9d:d8:1a:93:e0:c5:b4:61:9c:34:98:c5:
da:ae:b1:4a:49:41:6d:ad:79:70:5d:fe:40:52:94:84:3e:b6:
6d:c1:58:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSXlolkKU0LRdlea3z8dZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk
ZTVjMGEwHhcNMjYxMDAzMTUwMjExWhcNMjYxMDA0MTUwMjExWjAzMTEwLwYDVQQD
EyhiYjE3YmFmOTJlNTRiYTQ1NGYzYTgzMGMyNWM1YzY2ZTA2ZTlkZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIqWt/X/4gQOaqMFh6P9xK2ZqWaO
upZEh43qJAARQSC6Jc9lwVJwCDOeZHMVh8joSXqACGixxaB9UOrc63F+zichs82x
o3jT/Un15ZuR41phUX+ssLedHDRDCjVDJCdN303uHdVe90nsGLsJcYpkZnx8GjdB
yhdddFsnVfrKopZ7N0BqHhhgrupvcKDdMU1k+8y2DiaDvGUlelkQmWIagzaQ7ont
dFy8e0cvylmEVlkXxf/fQx8xubreeo0gi08qkMqsTDP/2pr2zW9tpqJzny75iwMj
ozv1XTbCra6VHZLJy+fJU27w7MJtDmhZjfhOoCVKnGiplXdomtNze58uqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsXuvkuVLpFTzqDDCXFxm4G6d2JMB8GA1UdIwQY
MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt
MmQ4MDE5MDE3ODQ5LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5
LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRnSwNTJ
Ds05EuzJbtxyto+X3hGfCXqP92Mz1b3gwTkAYaJw2INiNN0PYtZ7RZN0GK21yHJF
8c/5EwUp5gkt0Sp/0kLpfrTScPN36GTG87eMozma/Y+pwT+07MPEBaOsoRQqdzt2
G1ksN6I97GX005w2pfnkpKMPNKCnch2KIeNFfgysbOV9bNQkRdtAY3Jo8qUXqZFY
pPYHul7sd+8rn/lJJHLkUMu9kXQnuUxd+QQF52AOEVukNx39jjwhBhiI++py9N0E
NrXvqGjjxhi2zSxXx0biT6FFPrM/Yq41ndgak+DFtGGcNJjF2q6xSklBba15cF3+
QFKUhD62bcFYRw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 22:35:49 2026 by rpki-client