Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: ioLEy+kAdD8hGtMQ0PgVH8OItTx0adRpliCK/E3sgWI=
Subject key identifier: EE:0B:F4:46:81:95:A4:14:7E:24:EB:AD:B7:97:E0:A9:BB:49:4E:04
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 01A1081403B9D109766A9D826F8059083AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 18:01:31 +0000
Manifest this update: Sun 04 Oct 2026 18:01:31 +0000
Manifest next update: Mon 05 Oct 2026 18:01:31 +0000
Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: 4idkWv0phUmifTcHyfql3X4oz38/G0C+oJEjGpPfN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:03:b9:d1:09:76:6a:9d:82:6f:80:59:08:3a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Oct 4 18:01:31 2026 GMT
Not After : Oct 5 18:01:31 2026 GMT
Subject: CN=ee0bf4468195a4147e24ebadb797e0a9bb494e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:34:d9:98:23:58:38:4d:eb:fd:4d:82:bd:
71:ba:74:ff:33:6f:1b:93:b3:df:04:ad:fd:32:34:
03:33:7b:a6:9c:d7:90:37:4f:26:2c:07:4f:e5:00:
bc:8a:6d:15:1d:d4:28:2b:76:68:e1:3b:e9:15:f5:
32:e9:fb:9d:83:73:33:e3:9c:e1:94:82:07:f3:f9:
4a:04:7a:78:65:54:20:c4:60:67:19:22:2a:9a:56:
7b:be:e5:85:9f:c0:30:8a:08:7e:55:6d:fd:2a:5d:
63:de:94:e8:44:2e:00:71:82:ef:33:d0:91:0b:06:
61:3a:62:05:7e:01:5c:1e:7b:3c:82:f2:f1:f9:38:
2e:ab:28:d8:85:58:e2:7f:14:73:82:76:d6:d3:e5:
c2:b4:44:8e:fa:34:bc:d4:ef:96:13:cd:79:e7:1c:
36:65:c3:5f:55:bb:f5:6f:5f:d3:c3:fa:fa:bc:2b:
31:85:c7:e9:f6:de:2c:0e:6d:87:03:6e:24:46:89:
89:51:9e:e1:29:72:bd:3a:c2:d1:d6:ca:ca:bd:87:
0d:be:32:d8:df:1e:29:86:50:de:8e:11:fe:46:f7:
fb:11:6b:6d:28:c5:70:31:f0:f8:92:f2:80:8a:03:
0e:30:b0:c9:8b:90:5b:99:ec:3e:ff:42:11:a8:e4:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:F4:46:81:95:A4:14:7E:24:EB:AD:B7:97:E0:A9:BB:49:4E:04
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8b:c4:b6:d1:81:ed:43:6b:29:26:73:f2:28:2e:c5:da:cd:
87:5c:80:83:df:c7:3f:47:00:aa:c0:c1:d1:92:74:82:29:95:
94:2f:ca:1e:82:f1:10:e5:a2:69:cd:22:1c:e6:8e:49:05:31:
97:e5:cd:73:79:6a:a3:8b:70:ad:68:d1:b4:b4:3a:57:aa:26:
bf:34:ca:b8:32:d3:f5:91:11:d5:50:b6:ae:ab:e2:4f:fc:36:
47:b6:a2:df:2d:5b:47:74:67:c2:ad:a9:de:7b:c3:c7:45:bc:
bd:d9:43:02:f1:6a:df:e5:54:cc:4b:82:0d:af:a3:09:4e:c2:
8b:ca:7f:b9:6e:ec:13:02:a1:70:d1:dc:de:c8:0d:cd:1c:92:
67:e0:5f:0b:f8:36:c1:9c:81:e7:04:f8:70:82:1d:a4:7e:41:
c5:44:ae:26:23:24:63:18:b8:f9:28:1d:8a:0c:ba:62:e1:63:
07:a6:11:9f:fb:14:b1:cc:d0:90:0f:09:dd:ae:29:d0:dd:58:
ac:40:3a:da:1f:18:5a:f9:ef:5f:6a:a9:fc:02:47:b5:70:89:
55:80:57:32:72:ea:53:69:a3:cf:6b:82:ef:20:ff:59:57:d4:
2a:58:53:7f:f0:7f:5c:7a:e2:6b:60:dd:0d:e5:12:84:2a:a7:
19:65:8c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEIFAO50Ql2ap2Cb4BZCDqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl
NTA3OTkwHhcNMjYxMDA0MTgwMTMxWhcNMjYxMDA1MTgwMTMxWjAzMTEwLwYDVQQD
EyhlZTBiZjQ0NjgxOTVhNDE0N2UyNGViYWRiNzk3ZTBhOWJiNDk0ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnU02ZgjWDhN6/1Ngr1xunT/M28b
k7PfBK39MjQDM3umnNeQN08mLAdP5QC8im0VHdQoK3Zo4TvpFfUy6fudg3Mz45zh
lIIH8/lKBHp4ZVQgxGBnGSIqmlZ7vuWFn8Awigh+VW39Kl1j3pToRC4AcYLvM9CR
CwZhOmIFfgFcHns8gvLx+TguqyjYhVjifxRzgnbW0+XCtESO+jS81O+WE8155xw2
ZcNfVbv1b1/Tw/r6vCsxhcfp9t4sDm2HA24kRomJUZ7hKXK9OsLR1srKvYcNvjLY
3x4phlDejhH+Rvf7EWttKMVwMfD4kvKAigMOMLDJi5Bbmew+/0IRqORG+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4L9EaBlaQUfiTrrbeX4Km7SU4EMB8GA1UdIwQY
MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt
MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm
LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArovEttGB
7UNrKSZz8iguxdrNh1yAg9/HP0cAqsDB0ZJ0gimVlC/KHoLxEOWiac0iHOaOSQUx
l+XNc3lqo4twrWjRtLQ6V6omvzTKuDLT9ZER1VC2rqviT/w2R7ai3y1bR3Rnwq2p
3nvDx0W8vdlDAvFq3+VUzEuCDa+jCU7Ci8p/uW7sEwKhcNHc3sgNzRySZ+BfC/g2
wZyB5wT4cIIdpH5BxUSuJiMkYxi4+Sgdigy6YuFjB6YRn/sUsczQkA8J3a4p0N1Y
rEA62h8YWvnvX2qp/AJHtXCJVYBXMnLqU2mjz2uC7yD/WVfUKlhTf/B/XHria2Dd
DeUShCqnGWWMkg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:44:06 2026 by rpki-client