
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
File: WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft (raw, json)
Hash identifier: XWITnv6o7IMR0vnjDQ5UCifL9+bc7Ni4+OLz1Gw1OLc=
Subject key identifier: 39:73:C9:06:19:CB:8B:BF:2F:9A:A7:A1:76:DE:D5:ED:4A:39:AB:38
Authority key identifier: 58:0D:E6:52:41:F7:63:D6:90:8D:01:A4:43:DD:F5:94:22:0C:0F:46
Certificate issuer: /CN=580de65241f763d6908d01a443ddf594220c0f46
Certificate serial: 019FF7FEC99A2D595EC19DEE255974C2BA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
Manifest number: 2B
Signing time: Wed 12 Aug 2026 22:01:37 +0000
Manifest this update: Wed 12 Aug 2026 22:01:37 +0000
Manifest next update: Thu 13 Aug 2026 22:01:37 +0000
Files and hashes: 1: WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl (hash: HXA89FyK2j+PD3JIDysr6tyLakUD0OKjz20xKAzl6h0=)
2: ZSIyFnlfJZuqIU-6QI9Jt6BhStQ.asa (hash: yafPGi/4cIiLIirWhcmLE4fOTcFchmZLLaICx5mS/sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:c9:9a:2d:59:5e:c1:9d:ee:25:59:74:c2:ba:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580de65241f763d6908d01a443ddf594220c0f46
Validity
Not Before: Aug 12 22:01:37 2026 GMT
Not After : Aug 13 22:01:37 2026 GMT
Subject: CN=3973c90619cb8bbf2f9aa7a176ded5ed4a39ab38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:ad:3b:3b:16:9d:94:21:48:9a:7c:9b:c4:
33:75:7e:fa:72:82:17:1b:d9:5b:f0:77:2b:34:3d:
f8:35:b9:88:e9:85:09:a9:ed:b4:2a:fc:25:d5:2f:
ed:22:f2:49:8d:5b:1d:ac:79:b2:e5:ce:9c:5e:29:
a1:68:f0:19:cc:69:86:1d:94:02:64:41:24:a7:fb:
15:95:ee:d4:b7:48:15:c9:d6:f6:e1:2b:17:2a:a3:
e2:73:fe:d0:1b:ca:68:e7:32:d4:8e:bd:fd:da:77:
43:a8:92:f6:f2:27:17:40:e5:45:07:28:10:8b:c3:
56:0b:e0:cb:7d:e7:47:44:66:c3:99:e5:f8:49:32:
d1:cb:ed:22:e6:8c:98:63:d7:a8:7b:6f:5b:1c:6c:
23:14:79:76:b3:6e:5c:26:55:f4:72:0b:21:0d:cf:
41:1f:2c:69:04:38:d1:bd:8f:fe:71:af:d9:37:82:
46:f9:06:1c:56:ce:85:2d:53:4b:78:4f:a0:9f:92:
5e:37:1b:a1:3f:17:61:31:85:38:e6:43:e1:22:5b:
c7:ae:9c:eb:23:05:56:a2:aa:06:6c:21:53:28:88:
4c:92:b6:45:c3:6e:cc:05:09:36:47:6b:9b:06:65:
9b:cf:ee:7a:5a:8b:61:3b:cf:88:69:75:3e:3f:31:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:73:C9:06:19:CB:8B:BF:2F:9A:A7:A1:76:DE:D5:ED:4A:39:AB:38
X509v3 Authority Key Identifier:
keyid:58:0D:E6:52:41:F7:63:D6:90:8D:01:A4:43:DD:F5:94:22:0C:0F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7d:b8:1c:91:19:8b:93:e9:8a:b8:9c:ef:8a:ad:b2:a5:00:
c9:e0:20:cf:19:24:65:05:46:81:4a:e9:2c:12:2d:33:d2:01:
3c:de:f2:9d:3c:3a:ac:5a:29:4e:97:38:d8:7d:bb:dc:df:45:
17:65:6b:3a:f3:14:2c:a7:68:8f:c6:4b:f1:43:c1:99:f8:34:
14:db:91:8b:4b:4d:b5:5d:37:4e:f7:45:92:fe:b4:ff:68:21:
e8:68:ad:91:63:21:28:b5:ab:c8:9b:5d:a7:b3:b4:c5:1b:d8:
36:84:2b:55:ee:9e:e5:bb:db:58:9f:a8:90:eb:ef:59:e3:1b:
ef:93:57:cd:22:cc:f8:18:e8:5e:0e:c0:c4:81:2f:1f:dc:da:
87:3e:53:86:ae:93:1c:1c:ed:1b:a4:f7:de:0e:d7:dd:4d:40:
31:58:65:64:d8:91:8b:ad:ee:66:e6:cb:f4:cd:f1:01:1b:13:
7f:8c:52:a9:83:98:c9:d0:a7:09:50:fd:db:91:0f:47:50:05:
08:cb:00:f6:24:11:50:dd:c7:74:11:df:e5:e5:2d:5f:c1:a7:
23:a2:ac:fe:ac:42:e1:a3:d3:e7:2f:00:c2:3b:55:96:e9:90:
99:c8:67:7f:6f:12:02:7f:fb:08:f0:6c:45:d8:88:91:af:cd:
f2:35:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:27 2026 by rpki-client