Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
File: WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft (raw, json)
Hash identifier: +lv5c5RouLfesQ2d1kaxnlcCclsxDOdj3cAGJx+Fm2c=
Subject key identifier: 53:E6:4D:67:30:A0:ED:72:A5:64:95:42:A8:51:34:7F:DE:90:B3:B4
Authority key identifier: 5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
Certificate issuer: /CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Certificate serial: 019F954A1972DDCAC023C293F169752BD36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:29 +0000
Manifest this update: Fri 24 Jul 2026 18:01:29 +0000
Manifest next update: Sat 25 Jul 2026 18:01:29 +0000
Files and hashes: 1: PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa (hash: jz0AWqz5TrCrCZOL8S5rk8ZUwf9/3LQqBKen3hyQ+JU=)
2: WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl (hash: G1A9GSHzHMGIyzEe2i85G47sJBx1Rf1xjt9onv9oS1M=)
3: vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa (hash: kvS6Muny5DxKn7c0ClorB/3JIoMx7iQSiPe4vnhIL2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:19:72:dd:ca:c0:23:c2:93:f1:69:75:2b:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Validity
Not Before: Jul 24 18:01:29 2026 GMT
Not After : Jul 25 18:01:29 2026 GMT
Subject: CN=53e64d6730a0ed72a5649542a851347fde90b3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:04:17:1f:20:07:07:c1:ea:79:7b:05:95:
0c:ed:38:d4:bd:43:c9:ca:9f:c2:b2:07:69:fc:a4:
2d:98:1d:ce:7c:7e:ea:c8:7f:e7:03:d6:44:c6:82:
72:f7:00:eb:7d:d9:93:4a:77:7c:3b:57:f9:9c:65:
d3:ae:25:a5:68:da:65:69:53:c3:12:39:b0:97:6d:
87:60:87:29:78:ff:67:9e:9b:50:5e:d8:f6:5b:a1:
f6:5b:a8:2e:41:6c:e8:f5:81:d8:bb:f2:69:af:94:
ca:96:43:ed:50:da:ac:76:15:bf:37:72:bf:66:50:
de:42:f2:98:01:e4:13:52:72:c2:4c:2a:1a:e9:92:
5f:e1:fa:30:0c:a4:5b:87:1c:15:d9:49:84:76:93:
84:d4:4a:eb:52:4e:52:ce:d2:16:8b:cd:d0:70:ca:
3b:8e:b0:55:8e:90:92:ee:8c:95:05:99:72:86:34:
5e:3a:bc:b6:86:d5:b3:9f:95:69:d9:10:a3:a3:b4:
17:4a:47:ac:3f:75:b2:e7:24:43:4b:84:06:71:92:
b0:f9:f9:2a:53:b2:52:c0:36:e4:0e:64:16:b4:42:
b5:5a:a1:85:f4:07:fc:89:36:ed:b5:61:1e:2d:f3:
2b:be:cf:85:0d:30:6e:14:19:6f:21:69:10:88:f6:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:4D:67:30:A0:ED:72:A5:64:95:42:A8:51:34:7F:DE:90:B3:B4
X509v3 Authority Key Identifier:
keyid:5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:4a:56:db:91:af:10:f3:cb:c2:59:a0:da:eb:fa:b0:8b:
f0:8f:a8:df:f1:9b:f0:c9:6c:90:1f:5f:ed:96:41:72:93:bd:
97:d8:49:46:7b:66:cb:44:89:b0:3c:05:a3:6a:03:1a:42:ff:
5a:bd:9a:0f:27:14:86:10:64:79:8f:f2:a4:69:9d:06:c8:9a:
ca:55:7b:55:7d:63:2b:15:50:90:29:23:5d:93:b7:6d:8b:10:
f2:6f:55:3e:f5:43:83:49:27:b1:6d:6b:a9:31:0c:68:31:c6:
d3:0f:3c:c5:67:d7:bb:ae:76:de:30:c4:61:0a:5b:b6:6c:50:
d3:55:62:f5:83:25:7b:a2:5a:71:0e:2c:46:c6:ed:fb:3c:69:
4c:a9:68:65:78:f6:13:a0:d6:5f:cf:f6:9c:04:26:68:53:28:
83:66:24:81:a3:9d:f5:fd:59:28:e8:8d:f2:66:ba:fd:21:ed:
aa:a5:9c:e0:f5:21:27:80:c4:6c:e0:23:1a:a9:8c:0e:6d:b4:
e6:7a:53:b7:4d:3c:67:ed:11:c7:18:f3:4f:7d:c9:39:43:84:
91:2a:7b:50:b6:8d:4a:44:ca:86:43:5f:95:eb:c2:d1:f6:4a:
ba:f3:67:5d:70:69:6e:64:4f:ed:93:76:68:c8:61:dc:6f:c5:
e3:a6:16:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VShly3crAI8KT8Wl1K9NsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhN2FjYThkYmE1YTQ5ZjllOWQ5Y2ViMzE5MzFjZTIzNDNh
MDA1YmMwHhcNMjYwNzI0MTgwMTI5WhcNMjYwNzI1MTgwMTI5WjAzMTEwLwYDVQQD
Eyg1M2U2NGQ2NzMwYTBlZDcyYTU2NDk1NDJhODUxMzQ3ZmRlOTBiM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+QEFx8gBwfB6nl7BZUM7TjUvUPJ
yp/Csgdp/KQtmB3OfH7qyH/nA9ZExoJy9wDrfdmTSnd8O1f5nGXTriWlaNplaVPD
Ejmwl22HYIcpeP9nnptQXtj2W6H2W6guQWzo9YHYu/Jpr5TKlkPtUNqsdhW/N3K/
ZlDeQvKYAeQTUnLCTCoa6ZJf4fowDKRbhxwV2UmEdpOE1ErrUk5SztIWi83QcMo7
jrBVjpCS7oyVBZlyhjReOry2htWzn5Vp2RCjo7QXSkesP3Wy5yRDS4QGcZKw+fkq
U7JSwDbkDmQWtEK1WqGF9Af8iTbttWEeLfMrvs+FDTBuFBlvIWkQiPbTHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPmTWcwoO1ypWSVQqhRNH/ekLO0MB8GA1UdIwQY
MBaAFFp6yo26Wkn56dnOsxkxziNDoAW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25yS2picGFTZm5wMmM2ekdUSE9JME9nQmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt
MDIzYjZjMDc5M2YxLzEvV25yS2picGFTZm5wMmM2ekdUSE9JME9nQmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx
LzEvV25yS2picGFTZm5wMmM2ekdUSE9JME9nQmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6FKVtuR
rxDzy8JZoNrr+rCL8I+o3/Gb8MlskB9f7ZZBcpO9l9hJRntmy0SJsDwFo2oDGkL/
Wr2aDycUhhBkeY/ypGmdBsiaylV7VX1jKxVQkCkjXZO3bYsQ8m9VPvVDg0knsW1r
qTEMaDHG0w88xWfXu6523jDEYQpbtmxQ01Vi9YMle6JacQ4sRsbt+zxpTKloZXj2
E6DWX8/2nAQmaFMog2YkgaOd9f1ZKOiN8ma6/SHtqqWc4PUhJ4DEbOAjGqmMDm20
5npTt008Z+0RxxjzT33JOUOEkSp7ULaNSkTKhkNflevC0fZKuvNnXXBpbmRP7ZN2
aMhh3G/F46YWDw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:12 2026 by rpki-client