Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: Q1jRRGYfmN4T9n4yDdZ6WBrcEPbQFSo/5x5ERYYjZc0=
Subject key identifier: 85:C8:B8:14:9A:A1:F8:8B:27:9D:5B:71:11:9A:BA:5F:72:27:72:92
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 019E1F7EB4C39E816D0BC72093A21CA1FDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 1062
Signing time: Wed 13 May 2026 04:00:57 +0000
Manifest this update: Wed 13 May 2026 04:00:57 +0000
Manifest next update: Thu 14 May 2026 04:00:57 +0000
Files and hashes: 1: SgMIjUcR2c12DzERn5Ts_2Ui6dU.roa (hash: GYGPZLvxKXca2OxhVOyvlt9mnOVKXNEirW2JBi+fWL4=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: NODTRZjYv6/A+LCqsPvIW/CLJC3ShpBensX9QI7AiCw=)
3: XIThFyPTW5lXLvwW5lsLjLVEtsw.roa (hash: zsPoZ1kKOA5gCoYw0cog9xPEs778Ebzg1Uy38hXQLVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:b4:c3:9e:81:6d:0b:c7:20:93:a2:1c:a1:fd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: May 13 04:00:57 2026 GMT
Not After : May 14 04:00:57 2026 GMT
Subject: CN=85c8b8149aa1f88b279d5b71119aba5f72277292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:81:7c:96:3a:f5:1d:e4:91:50:d6:f6:36:
42:d2:e8:b7:ba:9d:6a:bc:3d:09:ce:95:e1:aa:86:
1b:ec:9a:a9:fb:f2:3c:96:04:52:2f:e1:14:e3:5b:
35:84:8f:01:5e:f3:92:64:57:7e:c3:73:69:80:67:
94:b8:b7:e6:1b:e0:88:52:6a:53:e2:4e:dd:d9:c3:
ec:ea:71:73:4e:45:77:b5:7a:57:18:ac:1c:eb:46:
8b:f0:70:6c:43:5b:a6:f1:42:ef:12:f4:03:40:a3:
85:f1:2a:c9:54:a0:88:b2:be:83:cc:47:61:c6:12:
7c:7e:e0:1b:da:73:bd:d7:6e:a5:46:30:53:31:16:
15:d6:6b:53:d5:18:20:9d:9d:78:d3:b1:19:7a:a6:
be:b8:cf:23:8e:a2:7a:d2:ab:65:d4:fa:af:98:64:
2c:7c:aa:05:0f:61:27:5d:12:71:58:67:f2:90:5f:
0e:9a:4d:19:9a:79:24:89:05:61:64:cd:8f:fe:1f:
82:bd:38:f4:2a:68:9c:d6:73:3a:49:92:91:ea:25:
0b:3c:d5:bd:7a:f4:91:a9:7b:8f:5d:b9:a5:30:5c:
a9:9f:5a:7a:df:d2:0a:64:fc:f1:1f:15:77:dd:cb:
48:44:a4:82:01:a0:18:91:51:eb:be:09:a2:e7:54:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:B8:14:9A:A1:F8:8B:27:9D:5B:71:11:9A:BA:5F:72:27:72:92
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:98:0c:cc:1a:6f:d6:76:59:f9:e4:2a:b2:6f:45:43:a8:ee:
ab:96:eb:b9:0a:6a:0d:f0:97:54:f7:d1:8f:22:43:ed:3e:be:
9f:b1:66:3b:1c:56:0d:54:7c:67:b1:f5:18:a5:4c:d0:06:91:
10:f1:91:86:98:cf:13:15:38:3f:d6:c4:96:56:ae:2f:97:fa:
4e:d5:29:60:0d:ce:f7:20:f6:a5:0b:0b:c3:e2:4c:92:74:6f:
76:b1:ce:7e:db:9e:0d:da:96:0c:92:d7:64:30:90:f7:46:85:
13:58:83:dd:68:fd:2a:05:82:14:7a:68:b6:b5:28:a4:b9:f5:
77:47:13:b5:2c:68:2d:d1:ce:e7:39:1b:d9:e0:e7:7d:ef:f7:
f9:00:20:7c:25:38:3c:4d:48:d6:c4:b9:f9:59:20:87:ca:18:
49:d8:c4:1a:28:5f:4d:bb:23:a3:0e:9b:b8:f2:c1:aa:0d:0a:
a3:56:ec:1f:c4:60:6c:ba:10:41:ac:be:68:34:fa:f5:1e:b4:
61:0a:29:d5:c2:3d:48:ce:77:54:e3:c2:2c:6b:bb:e6:ce:ee:
85:8e:ed:e1:0b:64:e3:f5:81:92:b6:49:7a:d7:47:05:8b:df:
20:11:ba:f2:f3:c4:43:a2:45:95:cf:3e:02:17:ae:56:bd:97:
b5:8b:2c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffrTDnoFtC8cgk6Icof3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjNlMDk1NmE5ZDQ4MTdjZDkyODUyYzI3YTI3YjdkMmYx
MTEzZGIwHhcNMjYwNTEzMDQwMDU3WhcNMjYwNTE0MDQwMDU3WjAzMTEwLwYDVQQD
Eyg4NWM4YjgxNDlhYTFmODhiMjc5ZDViNzExMTlhYmE1ZjcyMjc3MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw92BfJY69R3kkVDW9jZC0ui3up1q
vD0JzpXhqoYb7Jqp+/I8lgRSL+EU41s1hI8BXvOSZFd+w3NpgGeUuLfmG+CIUmpT
4k7d2cPs6nFzTkV3tXpXGKwc60aL8HBsQ1um8ULvEvQDQKOF8SrJVKCIsr6DzEdh
xhJ8fuAb2nO9126lRjBTMRYV1mtT1RggnZ1407EZeqa+uM8jjqJ60qtl1PqvmGQs
fKoFD2EnXRJxWGfykF8Omk0ZmnkkiQVhZM2P/h+CvTj0Kmic1nM6SZKR6iULPNW9
evSRqXuPXbmlMFypn1p639IKZPzxHxV33ctIRKSCAaAYkVHrvgmi51QHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXIuBSaofiLJ51bcRGaul9yJ3KSMB8GA1UdIwQY
MBaAFFmz4JVqnUgXzZKFLCeie30vERPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYt
YzQ3MTcyZDVkODgyLzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYtYzQ3MTcyZDVkODgy
LzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpgMzBpv
1nZZ+eQqsm9FQ6juq5bruQpqDfCXVPfRjyJD7T6+n7FmOxxWDVR8Z7H1GKVM0AaR
EPGRhpjPExU4P9bEllauL5f6TtUpYA3O9yD2pQsLw+JMknRvdrHOftueDdqWDJLX
ZDCQ90aFE1iD3Wj9KgWCFHpotrUopLn1d0cTtSxoLdHO5zkb2eDnfe/3+QAgfCU4
PE1I1sS5+Vkgh8oYSdjEGihfTbsjow6buPLBqg0Ko1bsH8RgbLoQQay+aDT69R60
YQop1cI9SM53VOPCLGu75s7uhY7t4Qtk4/WBkrZJetdHBYvfIBG68vPEQ6JFlc8+
AheuVr2XtYss9A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:16:07 2026 by rpki-client