Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: 8SoaMBmjMOr6q5pkGkWiQwgzgCxXmK0rCTzMDi5+7Qs=
Subject key identifier: 78:FF:8B:1A:86:D3:46:7F:2A:EB:E7:5A:B9:76:64:08:69:E8:FA:D9
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019E1DFEB04AA9441EC6E7CC74FAEC9835D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0B16
Signing time: Tue 12 May 2026 21:01:30 +0000
Manifest this update: Tue 12 May 2026 21:01:30 +0000
Manifest next update: Wed 13 May 2026 21:01:30 +0000
Files and hashes: 1: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: EZqKj8SxY5gWvbEXk6RKYKkA6MpSnYFExpMZs63A4Yk=)
3: wksYSx05kpG2_m1bA5uuiXnqKFc.roa (hash: k+uDuqacR/yRBvtSsf1I4NfjvCtYBj4iQtFjb6MXywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:b0:4a:a9:44:1e:c6:e7:cc:74:fa:ec:98:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: May 12 21:01:30 2026 GMT
Not After : May 13 21:01:30 2026 GMT
Subject: CN=78ff8b1a86d3467f2aebe75ab976640869e8fad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:c9:cc:83:bc:6a:0b:40:3a:af:43:f3:ed:
1f:a0:c6:da:0b:5b:e3:43:f3:ca:bb:ed:7f:30:72:
40:24:5f:36:54:2a:4f:a7:19:47:b7:5e:cd:7c:44:
ee:99:d0:ec:37:f5:0a:fd:16:cd:8c:08:1d:88:ab:
ec:86:70:4f:de:5b:49:e7:32:ea:de:e6:dc:b4:74:
86:3b:a4:ac:76:06:42:1d:63:66:c0:62:fb:9a:8a:
e4:26:b7:3a:59:3d:79:10:08:c3:be:9e:12:81:af:
c9:57:f0:3b:11:82:29:85:0c:97:08:18:63:8a:5e:
54:0d:e0:b1:63:d0:bc:b1:ae:2d:9c:e6:7f:29:6d:
ad:b8:65:52:c8:2b:35:0e:94:c9:29:68:a0:1e:3f:
60:d8:2e:22:65:4c:b6:09:d1:4f:2e:b1:f1:44:a5:
bb:23:df:95:76:59:01:7a:98:9a:e5:42:fa:50:b8:
eb:3e:c8:fc:be:f3:6d:96:5f:18:f7:df:f8:a6:f3:
09:7c:a5:8c:d7:f2:1d:72:f8:dc:b0:e9:4d:68:f2:
d4:50:29:32:52:38:78:54:0a:f9:8a:1b:d4:12:d7:
aa:6f:26:1a:bb:77:b6:01:53:5a:78:eb:02:86:39:
e3:69:cc:9b:95:90:00:07:04:48:38:e9:87:c5:de:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:8B:1A:86:D3:46:7F:2A:EB:E7:5A:B9:76:64:08:69:E8:FA:D9
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:83:93:50:82:82:09:f8:88:9d:eb:a2:68:c8:e0:b4:02:77:
0f:d8:c9:8a:a8:50:bf:70:66:3a:ef:af:05:ed:99:aa:ab:de:
f4:d2:8d:85:fc:74:34:ce:7d:a0:c0:dc:04:dd:f1:28:3b:f8:
cb:c2:39:eb:e0:21:7c:55:b4:8a:17:25:d5:2c:1c:21:cf:93:
93:94:82:5d:64:a4:89:03:23:48:e0:5f:ec:81:e7:40:59:0b:
6b:5c:7c:5e:38:09:3d:69:d3:66:4d:07:9b:ab:62:79:63:e5:
52:c7:7e:1b:33:a9:fe:3e:9a:91:f1:c7:6d:a2:20:33:fc:c7:
9b:b7:4c:79:f3:d9:e4:9b:ef:29:1d:11:55:30:83:37:7c:66:
8e:81:11:13:91:78:14:09:0e:e6:8e:b1:a9:3e:2a:14:8d:fc:
73:b3:07:21:a0:1a:76:3d:90:8c:9d:42:8d:a2:bf:5d:8a:92:
db:be:5d:b5:ff:c0:bc:2b:42:21:ea:58:87:bc:e8:d7:0a:19:
af:8b:9c:b5:87:45:33:61:ef:3c:92:24:5a:d5:f5:01:8b:0a:
92:26:17:f7:cd:b3:b8:9e:6f:37:06:2a:a5:0a:e2:02:5b:dc:
ea:7f:2c:ed:17:f1:3e:9d:10:3e:27:cf:65:e5:66:3d:f4:0d:
bd:d9:73:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/rBKqUQexufMdPrsmDXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl
YTYzYjUwHhcNMjYwNTEyMjEwMTMwWhcNMjYwNTEzMjEwMTMwWjAzMTEwLwYDVQQD
Eyg3OGZmOGIxYTg2ZDM0NjdmMmFlYmU3NWFiOTc2NjQwODY5ZThmYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNDJzIO8agtAOq9D8+0foMbaC1vj
Q/PKu+1/MHJAJF82VCpPpxlHt17NfETumdDsN/UK/RbNjAgdiKvshnBP3ltJ5zLq
3ubctHSGO6SsdgZCHWNmwGL7morkJrc6WT15EAjDvp4Sga/JV/A7EYIphQyXCBhj
il5UDeCxY9C8sa4tnOZ/KW2tuGVSyCs1DpTJKWigHj9g2C4iZUy2CdFPLrHxRKW7
I9+VdlkBepia5UL6ULjrPsj8vvNtll8Y99/4pvMJfKWM1/IdcvjcsOlNaPLUUCky
Ujh4VAr5ihvUEteqbyYau3e2AVNaeOsChjnjacyblZAABwRIOOmHxd68kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj/ixqG00Z/KuvnWrl2ZAhp6PrZMB8GA1UdIwQY
MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt
ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj
LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4OTUIKC
CfiIneuiaMjgtAJ3D9jJiqhQv3BmOu+vBe2Zqqve9NKNhfx0NM59oMDcBN3xKDv4
y8I56+AhfFW0ihcl1SwcIc+Tk5SCXWSkiQMjSOBf7IHnQFkLa1x8XjgJPWnTZk0H
m6tieWPlUsd+GzOp/j6akfHHbaIgM/zHm7dMefPZ5JvvKR0RVTCDN3xmjoERE5F4
FAkO5o6xqT4qFI38c7MHIaAadj2QjJ1CjaK/XYqS275dtf/AvCtCIepYh7zo1woZ
r4uctYdFM2HvPJIkWtX1AYsKkiYX982zuJ5vNwYqpQriAlvc6n8s7RfxPp0QPifP
ZeVmPfQNvdlz6Q==
-----END CERTIFICATE-----
Generated at Wed May 13 08:52:10 2026 by rpki-client