Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: AE+TDN3Wa6G9SVRV7vE3zHm/isjA6o2ypBPS3H9Po98=
Subject key identifier: F0:AB:66:7A:CC:D1:E4:3A:9F:95:E8:7F:E3:19:A3:D5:10:F9:94:F9
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 019F9436A79B3FF95D0FE70FE2BBC45C2321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 07AE
Signing time: Fri 24 Jul 2026 13:00:37 +0000
Manifest this update: Fri 24 Jul 2026 13:00:37 +0000
Manifest next update: Sat 25 Jul 2026 13:00:37 +0000
Files and hashes: 1: ra29butMifiezKtKfx76h0-beS4.roa (hash: CSRhvGkVJgI5m+Ih+PZR1asLchKiPtTXHdFmOp2umxE=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: BZdLBUSXSkY0CYQTTtMW89ZlXfoD9xUQb5aTI0jMBUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:a7:9b:3f:f9:5d:0f:e7:0f:e2:bb:c4:5c:23:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Jul 24 13:00:37 2026 GMT
Not After : Jul 25 13:00:37 2026 GMT
Subject: CN=f0ab667accd1e43a9f95e87fe319a3d510f994f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:0f:a8:e7:8f:7b:b6:d4:c8:e8:7f:8c:25:
e2:e5:8f:06:e4:61:ed:0b:17:7a:3c:72:03:da:06:
16:84:3c:a6:d1:ed:b3:e9:17:40:01:28:70:5a:7a:
45:82:83:e0:9a:77:d1:9a:c2:06:27:91:82:50:57:
9d:b8:18:5d:28:f9:f9:20:dc:0f:e8:95:e0:fc:71:
35:fa:69:99:3b:32:92:ba:e9:85:09:2c:80:e8:5b:
27:98:61:6c:6a:b2:53:b9:b8:d9:0a:c7:fc:96:40:
52:18:c9:87:2f:f2:73:38:bf:a8:8d:5e:d0:44:f6:
29:6e:08:74:db:63:2f:b6:b6:a9:b7:5f:3f:90:e3:
57:57:3c:25:16:2b:7e:a0:c6:3f:42:26:c2:4f:fe:
ed:11:5b:48:75:fa:ac:d7:56:3e:2c:57:1c:7d:a6:
40:ba:82:54:e5:34:4a:12:b3:ee:c6:9f:4f:c1:8c:
97:e0:ff:89:87:0b:70:c5:6f:bd:15:85:ea:42:bc:
40:e5:be:4e:81:3d:ed:34:32:b5:18:ed:75:db:6e:
5d:36:2c:22:9d:4d:e3:2e:8e:9c:1c:77:dd:47:17:
91:3f:12:5c:47:ec:ef:38:cd:d5:57:b3:17:68:ae:
bb:61:1e:39:8e:b2:7f:63:7f:33:36:2e:3a:6b:a1:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:66:7A:CC:D1:E4:3A:9F:95:E8:7F:E3:19:A3:D5:10:F9:94:F9
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8c:e2:64:00:e4:8a:f2:48:aa:bc:d6:34:d6:5c:38:ad:48:
39:ec:43:ee:fc:3e:3f:d6:2d:f2:da:cf:ca:f3:c1:d0:2e:fe:
ec:c9:79:fc:bb:99:fd:7b:75:ef:e8:3a:70:95:25:e8:2a:a0:
99:33:08:3a:88:02:5f:15:3a:98:56:71:ad:db:93:e4:b2:ab:
60:7b:1f:31:89:87:7a:de:7d:a8:94:ce:f6:a4:0a:f8:81:41:
09:c8:d4:93:e9:34:ec:61:be:bf:a8:5a:79:9a:7e:28:be:c4:
6f:e5:be:34:c7:d3:32:51:dd:85:40:56:f5:93:cc:ab:cc:50:
e0:bf:6d:fc:3c:45:aa:a5:4e:97:57:08:5c:f9:8c:1c:60:a7:
df:0d:05:60:57:f1:49:96:93:a3:51:6e:4f:75:a6:c4:e0:cd:
30:67:4d:b2:80:d7:cb:0f:02:2a:eb:6f:84:cd:f7:81:3e:20:
a8:81:22:9f:03:4b:f2:70:33:1e:9e:87:9f:2c:01:4a:69:de:
2e:23:4d:fe:1b:30:8b:10:02:7a:10:87:e6:c2:ce:3b:4f:06:
a5:93:e1:6f:4a:fe:ce:1d:30:06:32:7b:99:d0:64:ea:0e:26:
99:85:85:1e:7f:39:cd:ff:a9:59:4a:b4:71:63:28:63:f6:b6:
b3:c5:9c:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNqebP/ldD+cP4rvEXCMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz
YTE5OTYwHhcNMjYwNzI0MTMwMDM3WhcNMjYwNzI1MTMwMDM3WjAzMTEwLwYDVQQD
EyhmMGFiNjY3YWNjZDFlNDNhOWY5NWU4N2ZlMzE5YTNkNTEwZjk5NGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArscPqOePe7bUyOh/jCXi5Y8G5GHt
Cxd6PHID2gYWhDym0e2z6RdAAShwWnpFgoPgmnfRmsIGJ5GCUFeduBhdKPn5INwP
6JXg/HE1+mmZOzKSuumFCSyA6FsnmGFsarJTubjZCsf8lkBSGMmHL/JzOL+ojV7Q
RPYpbgh022Mvtrapt18/kONXVzwlFit+oMY/QibCT/7tEVtIdfqs11Y+LFccfaZA
uoJU5TRKErPuxp9PwYyX4P+JhwtwxW+9FYXqQrxA5b5OgT3tNDK1GO11225dNiwi
nU3jLo6cHHfdRxeRPxJcR+zvOM3VV7MXaK67YR45jrJ/Y38zNi46a6GS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCrZnrM0eQ6n5Xof+MZo9UQ+ZT5MB8GA1UdIwQY
MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct
NzFhZWE1NGFmODU4LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4
LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4ziZADk
ivJIqrzWNNZcOK1IOexD7vw+P9Yt8trPyvPB0C7+7Ml5/LuZ/Xt17+g6cJUl6Cqg
mTMIOogCXxU6mFZxrduT5LKrYHsfMYmHet59qJTO9qQK+IFBCcjUk+k07GG+v6ha
eZp+KL7Eb+W+NMfTMlHdhUBW9ZPMq8xQ4L9t/DxFqqVOl1cIXPmMHGCn3w0FYFfx
SZaTo1FuT3WmxODNMGdNsoDXyw8CKutvhM33gT4gqIEinwNL8nAzHp6HnywBSmne
LiNN/hswixACehCH5sLOO08GpZPhb0r+zh0wBjJ7mdBk6g4mmYWFHn85zf+pWUq0
cWMoY/a2s8Wclw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:15 2026 by rpki-client