Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: YZtzhRuBTY7IwmqSkoASYDoZANjsZ+VwxcW0JUZJm0A=
Subject key identifier: 1C:2F:9C:DF:25:92:75:D2:2A:07:3C:A9:20:43:F6:2F:46:37:4B:88
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 01A0E13D79E8DD638EC8BACEAF38492D7F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 19E4
Signing time: Sun 27 Sep 2026 05:01:37 +0000
Manifest this update: Sun 27 Sep 2026 05:01:37 +0000
Manifest next update: Mon 28 Sep 2026 05:01:37 +0000
Files and hashes: 1: HHKPepyJHyyJmRpg5BdW85bx7Rg.roa (hash: leRatzJU0XPm4R4WH9CK8QwowVlDLVOizoSP6t+BnUo=)
2: Jzo0bz9GpdF-EVQqtofEC4giH00.roa (hash: l6YPgC2yacKAlMOSWCV7HMeqcfgyqHxPQcRlIAV/XdE=)
3: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: F57zUpaWpQRJmPql+LPLIm9M8Ez+7Ap2Ol0ky4bMNa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:79:e8:dd:63:8e:c8:ba:ce:af:38:49:2d:7f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Sep 27 05:01:37 2026 GMT
Not After : Sep 28 05:01:37 2026 GMT
Subject: CN=1c2f9cdf259275d22a073ca92043f62f46374b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:7e:fd:34:ca:5a:9b:2f:bb:ec:5d:af:1c:
40:05:84:a9:38:1d:b7:81:be:ad:d6:6b:67:ea:33:
0e:fc:57:3d:c8:47:54:8c:22:57:0c:29:06:ef:b8:
d6:93:10:41:86:76:5d:b8:5d:36:6d:ad:40:04:df:
6f:3e:52:c1:fd:7e:17:9d:07:89:f1:fc:b9:8e:f2:
81:2e:e8:16:89:19:7c:6f:6a:87:02:60:7c:58:ef:
d1:f8:46:16:f1:7b:28:e6:c1:04:53:4f:f0:20:90:
27:89:fc:0e:22:b8:7f:3f:25:66:c0:38:8e:ed:13:
39:52:b2:2d:a2:4b:8b:d2:0f:55:d8:77:3c:d6:e3:
b0:d4:b6:e6:66:ae:b6:77:75:c5:25:e7:03:3c:4e:
2d:75:68:e0:60:0a:72:ad:a4:3a:62:38:c9:61:ca:
6b:8c:b6:aa:d9:db:2b:3d:01:2e:1f:ba:bc:e3:be:
ce:76:0c:34:14:45:43:88:cb:5a:5e:01:de:b3:fa:
89:55:d0:23:f8:ee:07:83:03:da:99:dc:b7:0e:a8:
1a:e9:b8:b4:0a:17:de:e9:9d:47:6e:00:90:f9:e1:
00:22:d9:18:fa:c1:16:4b:9b:1d:3d:5d:66:cd:31:
66:00:c5:96:d5:a7:f8:24:8c:9e:a5:d2:9e:86:f7:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2F:9C:DF:25:92:75:D2:2A:07:3C:A9:20:43:F6:2F:46:37:4B:88
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:67:84:16:b3:73:5f:a1:a5:97:33:95:d5:0e:f4:97:33:21:
2a:08:66:d8:10:39:4e:b4:84:37:d7:9e:20:d6:5e:47:ff:8f:
b5:88:ed:0d:cf:24:97:a0:fc:b6:4e:ec:27:5d:48:f9:ec:18:
ff:df:6a:ca:cf:fb:08:1c:5d:9f:56:e6:6c:9b:4f:b1:f1:2d:
cd:59:99:fe:5d:0a:09:36:cf:59:ea:a1:b9:4c:bc:b8:6c:14:
c3:c3:bf:c6:d3:c7:df:6a:12:75:a6:4b:59:60:5a:fa:94:92:
41:f4:3f:57:cb:40:dd:ef:b7:45:67:9f:10:6d:a3:2d:0a:b1:
61:d1:c8:b5:a5:51:0f:61:47:0e:71:5d:31:02:e0:0e:7d:7d:
4e:37:b9:63:2d:84:76:fd:f0:e3:ed:a7:4b:98:d9:2a:cc:72:
01:05:a2:b1:71:f3:0e:21:85:ea:82:af:ad:99:4e:7e:3f:17:
c8:f0:fb:19:01:2a:01:f6:59:38:b1:ad:09:8c:a2:c9:d9:1e:
d9:aa:54:9d:4a:e4:b8:5d:5d:59:69:75:2c:49:d2:2b:ce:fb:
bb:2a:e5:e6:41:c5:09:c2:09:50:12:33:d4:b6:be:10:ee:13:
8b:42:83:ec:9a:88:a4:20:47:c2:6d:f9:a1:ef:7c:e3:79:3e:
b2:fa:71:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPXno3WOOyLrOrzhJLX9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2
YzQxODgwHhcNMjYwOTI3MDUwMTM3WhcNMjYwOTI4MDUwMTM3WjAzMTEwLwYDVQQD
EygxYzJmOWNkZjI1OTI3NWQyMmEwNzNjYTkyMDQzZjYyZjQ2Mzc0Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMh+/TTKWpsvu+xdrxxABYSpOB23
gb6t1mtn6jMO/Fc9yEdUjCJXDCkG77jWkxBBhnZduF02ba1ABN9vPlLB/X4XnQeJ
8fy5jvKBLugWiRl8b2qHAmB8WO/R+EYW8Xso5sEEU0/wIJAnifwOIrh/PyVmwDiO
7RM5UrItokuL0g9V2Hc81uOw1LbmZq62d3XFJecDPE4tdWjgYApyraQ6YjjJYcpr
jLaq2dsrPQEuH7q8477Odgw0FEVDiMtaXgHes/qJVdAj+O4HgwPamdy3Dqga6bi0
Chfe6Z1HbgCQ+eEAItkY+sEWS5sdPV1mzTFmAMWW1af4JIyepdKehveQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwvnN8lknXSKgc8qSBD9i9GN0uIMB8GA1UdIwQY
MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt
ZjQyNzJlZWMyODBkLzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk
LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWeEFrNz
X6GllzOV1Q70lzMhKghm2BA5TrSEN9eeINZeR/+PtYjtDc8kl6D8tk7sJ11I+ewY
/99qys/7CBxdn1bmbJtPsfEtzVmZ/l0KCTbPWeqhuUy8uGwUw8O/xtPH32oSdaZL
WWBa+pSSQfQ/V8tA3e+3RWefEG2jLQqxYdHItaVRD2FHDnFdMQLgDn19Tje5Yy2E
dv3w4+2nS5jZKsxyAQWisXHzDiGF6oKvrZlOfj8XyPD7GQEqAfZZOLGtCYyiydke
2apUnUrkuF1dWWl1LEnSK877uyrl5kHFCcIJUBIz1La+EO4Ti0KD7JqIpCBHwm35
oe9843k+svpxWA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:42:36 2026 by rpki-client