Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier: A2F0lO9MM7t6/+FwM/tsxGLJ57+8Yj9QU3lFHjGcV6A=
Subject key identifier: E6:77:ED:4D:ED:55:61:D9:17:65:78:02:92:AD:B5:D5:43:74:FA:69
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer: /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial: 01A034B7F1B19B44D636EF077CD35F9EDCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number: 1A1F
Signing time: Mon 24 Aug 2026 17:01:05 +0000
Manifest this update: Mon 24 Aug 2026 17:01:05 +0000
Manifest next update: Tue 25 Aug 2026 17:01:05 +0000
Files and hashes: 1: AVclKH5uCVBaYbA6dT0Au-UGS98.asa (hash: 3xs/9Z38cKQ2dOzSR6cmn/M7dQXXeYoJHDHYFFYxRWY=)
2: UzwdLveCar1NWysEG_gC0gmYs3s.roa (hash: etmZBELJl6TLC8YBGOya/Pd8fe5m9VWeBzGftoSy7jE=)
3: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: 24/O754iKsFWKYy32K0qZaxZhfwtj38sU0A5KKa80BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 14:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:b7:f1:b1:9b:44:d6:36:ef:07:7c:d3:5f:9e:dc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Validity
Not Before: Aug 24 17:01:05 2026 GMT
Not After : Aug 25 17:01:05 2026 GMT
Subject: CN=e677ed4ded5561d91765780292adb5d54374fa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:ba:b0:67:c6:7d:3d:55:73:79:8b:37:55:
d4:2b:58:3a:a3:35:b0:eb:b8:95:81:54:35:1c:96:
ff:25:21:5d:df:1d:2e:8d:f6:ad:03:f7:a6:87:60:
46:49:b0:f6:a7:61:b3:09:67:1d:25:d1:4f:0f:56:
cb:3f:d6:ab:95:d3:43:e8:fb:34:e0:a8:e8:21:6b:
60:c9:66:02:8f:ab:96:bc:58:85:ec:c4:00:1e:f2:
84:26:c8:50:12:49:6a:13:bb:44:e2:3f:c2:4f:e6:
54:56:3e:c6:8d:38:0d:ed:9a:4a:a9:be:43:34:3b:
43:f1:66:be:78:dd:a7:c8:e1:b8:a0:f6:d7:1f:20:
86:6f:ae:be:59:fe:18:64:f8:6b:64:8b:4f:8c:8a:
06:b0:00:16:82:1c:9e:11:64:07:ca:d1:1a:1f:12:
24:b9:ee:24:18:11:63:3c:ea:8d:9d:19:69:d6:07:
12:be:6f:6c:9f:81:95:6a:9d:21:2d:c3:e4:02:eb:
54:73:20:83:79:ad:4f:d4:0f:16:46:5c:a8:8d:3d:
0b:83:33:1b:ab:63:32:da:6a:e7:06:96:da:93:61:
42:ff:27:17:21:8e:85:74:d2:b5:94:7a:b0:3d:a5:
6b:01:c3:bb:8d:18:38:96:4f:e0:99:61:11:32:b5:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:ED:4D:ED:55:61:D9:17:65:78:02:92:AD:B5:D5:43:74:FA:69
X509v3 Authority Key Identifier:
keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:84:e9:e2:6a:d1:01:91:52:4b:9b:b1:53:25:36:b3:ff:48:
37:33:ac:90:e3:67:e2:04:e6:03:37:7b:af:2f:37:61:a7:fe:
41:5a:39:62:8a:65:3f:d0:6a:1a:52:bf:b6:0a:4f:ef:e9:6d:
8b:74:17:00:0d:0c:6d:49:a0:5c:30:23:9a:51:2d:bc:c0:a2:
74:a6:7d:2b:32:2e:d1:5a:1b:bf:84:44:73:40:b8:01:8e:d1:
ac:4b:1f:9f:6e:34:3c:b4:f0:dd:d5:57:bc:2b:19:56:60:b3:
53:a0:6d:0d:18:b6:d0:fb:d3:c8:d8:a8:bf:c0:b4:18:26:24:
74:39:93:45:f7:0e:2b:2c:ec:c5:21:45:90:03:b9:00:1f:6c:
6b:43:1f:42:e3:59:53:f0:07:01:54:7e:2a:40:08:0e:52:14:
f9:c4:d2:6f:55:70:d0:ba:d8:bd:b6:b2:b0:7f:54:74:7b:22:
1d:3e:96:72:14:b8:b5:47:e2:d1:ea:82:32:3f:c3:9b:58:42:
94:d3:e1:c2:1f:e2:eb:f5:ed:f1:38:37:51:f7:eb:d3:60:11:
e5:7a:8c:e6:b1:c2:c9:9f:87:17:72:d4:42:c6:98:9b:e0:a3:
6d:b1:d8:12:ab:45:00:96:f4:8d:a1:f0:86:91:4b:4a:b0:f8:
3a:2b:01:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA0t/Gxm0TWNu8HfNNfntzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzhmNjhhYzQxNTA1OWQ1NmQxOTM4YzM3NWE1OTg2YTZm
ZmY0YjEwHhcNMjYwODI0MTcwMTA1WhcNMjYwODI1MTcwMTA1WjAzMTEwLwYDVQQD
EyhlNjc3ZWQ0ZGVkNTU2MWQ5MTc2NTc4MDI5MmFkYjVkNTQzNzRmYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz26sGfGfT1Vc3mLN1XUK1g6ozWw
67iVgVQ1HJb/JSFd3x0ujfatA/emh2BGSbD2p2GzCWcdJdFPD1bLP9arldND6Ps0
4KjoIWtgyWYCj6uWvFiF7MQAHvKEJshQEklqE7tE4j/CT+ZUVj7GjTgN7ZpKqb5D
NDtD8Wa+eN2nyOG4oPbXHyCGb66+Wf4YZPhrZItPjIoGsAAWghyeEWQHytEaHxIk
ue4kGBFjPOqNnRlp1gcSvm9sn4GVap0hLcPkAutUcyCDea1P1A8WRlyojT0LgzMb
q2My2mrnBpbak2FC/ycXIY6FdNK1lHqwPaVrAcO7jRg4lk/gmWERMrUivwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZ37U3tVWHZF2V4ApKttdVDdPppMB8GA1UdIwQY
MBaAFFrI9orEFQWdVtGTjDdaWYam//SxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4Njct
MWM4MTMyZDVmNGI0LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4NjctMWM4MTMyZDVmNGI0
LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4Tp4mrR
AZFSS5uxUyU2s/9INzOskONn4gTmAzd7ry83Yaf+QVo5YoplP9BqGlK/tgpP7+lt
i3QXAA0MbUmgXDAjmlEtvMCidKZ9KzIu0Vobv4REc0C4AY7RrEsfn240PLTw3dVX
vCsZVmCzU6BtDRi20PvTyNiov8C0GCYkdDmTRfcOKyzsxSFFkAO5AB9sa0MfQuNZ
U/AHAVR+KkAIDlIU+cTSb1Vw0LrYvbaysH9UdHsiHT6WchS4tUfi0eqCMj/Dm1hC
lNPhwh/i6/Xt8Tg3Uffr02AR5XqM5rHCyZ+HF3LUQsaYm+CjbbHYEqtFAJb0jaHw
hpFLSrD4OisBUw==
-----END CERTIFICATE-----
Generated at Mon Aug 24 19:12:48 2026 by rpki-client