Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier: pGy/FyarWFU0Ud01JdWVPBTHVv/h+DU5CEdvCz45ivY=
Subject key identifier: 8C:CA:F9:F6:48:62:B5:E5:81:25:40:6F:83:01:FF:F8:58:53:24:DA
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer: /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial: 01A036A64F27E9BF3118E73EE9FDDA2D6B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number: 1A20
Signing time: Tue 25 Aug 2026 02:01:03 +0000
Manifest this update: Tue 25 Aug 2026 02:01:03 +0000
Manifest next update: Wed 26 Aug 2026 02:01:03 +0000
Files and hashes: 1: AVclKH5uCVBaYbA6dT0Au-UGS98.asa (hash: 3xs/9Z38cKQ2dOzSR6cmn/M7dQXXeYoJHDHYFFYxRWY=)
2: UzwdLveCar1NWysEG_gC0gmYs3s.roa (hash: etmZBELJl6TLC8YBGOya/Pd8fe5m9VWeBzGftoSy7jE=)
3: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: 2Lu5AsXGwtGN7b6uH5563e2U1KuF9ET2FHTpDmSZkRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:36:a6:4f:27:e9:bf:31:18:e7:3e:e9:fd:da:2d:6b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Validity
Not Before: Aug 25 02:01:03 2026 GMT
Not After : Aug 26 02:01:03 2026 GMT
Subject: CN=8ccaf9f64862b5e58125406f8301fff8585324da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:76:85:4f:8f:8b:d5:16:bc:e0:22:89:24:
d8:4c:cc:0f:d1:d2:e9:6d:52:0a:a4:a2:7e:86:03:
3d:fb:ed:18:09:5f:cb:a9:2a:95:2b:a1:95:2b:57:
c4:82:8f:2c:42:02:93:6d:31:ca:4e:ff:1d:ca:5f:
8a:28:ae:6a:c0:73:7e:15:7f:53:af:58:c9:8d:e6:
7d:ad:74:a0:ec:a8:52:4d:ee:7b:97:c8:b7:a2:84:
f8:a7:c5:c1:43:09:9c:65:a7:62:ec:48:26:b1:f2:
02:99:3b:63:dc:27:f5:2a:cc:1a:f7:b1:32:70:7c:
1c:97:1a:85:49:97:c1:8a:8c:85:2b:c7:9f:f7:8c:
8b:8b:1a:42:0d:43:27:58:06:15:ce:6c:61:9b:5e:
93:f7:c0:0f:83:d4:68:ed:39:48:ae:34:8f:d9:46:
e0:20:a1:0b:41:6b:b3:77:ac:34:26:b4:f9:50:6a:
a6:86:ff:df:25:b4:ac:8e:b8:51:ee:89:15:2d:39:
14:a4:a1:ce:7a:8b:77:08:fa:10:f2:e2:7a:17:10:
85:e0:ae:ef:86:da:4f:dc:a3:bd:25:06:39:c4:bd:
73:02:6d:73:08:bb:a0:4d:95:c8:06:6b:f7:88:ab:
d6:eb:3a:f5:3e:29:65:bf:e8:de:41:79:9e:27:fb:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CA:F9:F6:48:62:B5:E5:81:25:40:6F:83:01:FF:F8:58:53:24:DA
X509v3 Authority Key Identifier:
keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:87:9a:05:5d:bd:ef:f4:12:c9:35:5f:1f:81:77:f8:b4:5f:
87:c8:2b:3f:b7:a9:ef:29:d3:6b:37:46:c4:92:96:ca:3a:05:
0f:16:e4:33:31:16:1a:02:75:49:79:df:b7:fd:66:70:5d:38:
b0:1b:26:b3:f9:a1:0d:be:62:ec:1a:69:15:e3:4a:e1:48:9b:
f6:cf:e4:0e:bf:09:eb:94:e5:2a:1f:15:af:a2:02:03:ec:b9:
8a:b6:3f:d8:2d:72:3a:7b:77:c7:3d:9e:42:16:98:8b:b5:61:
6f:2d:02:2c:df:27:3b:d8:2b:be:f9:3d:24:b3:ec:32:fd:6c:
65:98:f2:9f:1c:76:d8:eb:72:fb:96:aa:dc:94:c4:51:b1:b4:
15:5a:b0:52:3f:59:d8:dd:26:10:bb:a1:4b:20:86:82:43:9b:
a7:63:9a:1a:ea:2c:d8:6e:34:6d:cd:08:40:18:28:86:94:e1:
97:b8:d2:86:28:c4:04:08:9b:a8:5f:8e:a9:40:23:73:12:a2:
26:c9:07:9c:01:b2:c6:22:91:53:90:fa:19:b8:3b:9f:84:6d:
df:89:30:5e:1f:fd:89:79:fd:32:a0:d1:5a:f8:99:0e:c9:0b:
69:18:95:50:cd:d9:3a:9d:dd:6c:7c:25:7a:4d:fe:ff:90:ff:
7c:00:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:15:32 2026 by rpki-client