Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
File: WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft (raw, json)
Hash identifier: UUk76HngU4kS0c3vbJR1nnlX2UkXiv6JuNQBePaGXAU=
Subject key identifier: B7:11:8D:CA:FA:4F:18:AE:9C:4F:F3:45:BA:2D:66:59:83:64:40:67
Authority key identifier: 58:0D:E6:52:41:F7:63:D6:90:8D:01:A4:43:DD:F5:94:22:0C:0F:46
Certificate issuer: /CN=580de65241f763d6908d01a443ddf594220c0f46
Certificate serial: 01A0FF7F37F56F00F9F992CB8F5AFB1C76CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
Manifest number: B4
Signing time: Sat 03 Oct 2026 02:02:02 +0000
Manifest this update: Sat 03 Oct 2026 02:02:02 +0000
Manifest next update: Sun 04 Oct 2026 02:02:02 +0000
Files and hashes: 1: OrKlLU-6Dy7PhTaJT_n9NRQ3vK4.asa (hash: gEuujiXrVU5bzSl4dhG7Ym0h+GD6qj8ww1/VOBqwark=)
2: WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl (hash: rq6+xYCd+aqg6eEkZl93RjM7Ev+Ro+CvsMcB5ra7f+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:7f:37:f5:6f:00:f9:f9:92:cb:8f:5a:fb:1c:76:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580de65241f763d6908d01a443ddf594220c0f46
Validity
Not Before: Oct 3 02:02:02 2026 GMT
Not After : Oct 4 02:02:02 2026 GMT
Subject: CN=b7118dcafa4f18ae9c4ff345ba2d665983644067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:96:7c:14:45:4e:2f:85:06:1c:d2:ba:ce:
c4:60:53:21:ab:1d:7f:5f:e4:35:98:56:1f:3e:9f:
a1:af:1d:e4:74:0c:ed:b1:46:7f:72:05:5e:40:96:
39:a3:29:49:66:55:ea:0f:ac:7a:58:7e:90:6b:05:
e1:03:d9:b9:e3:e6:c0:5c:43:4c:7c:25:ef:b4:aa:
2b:ed:80:56:fa:e2:2f:58:f3:c2:06:17:9d:a9:9e:
b8:77:44:6f:f4:62:27:02:30:be:50:77:10:8d:3e:
99:9d:4e:83:f3:97:29:62:75:34:6d:a7:0f:aa:d0:
2e:89:94:1c:fe:c8:ed:37:48:06:e2:79:db:04:83:
42:8e:f1:39:a7:22:57:2a:dd:18:63:6c:72:43:fd:
41:c7:59:14:38:13:62:42:f9:ed:cd:87:ac:60:5e:
db:d7:e3:70:28:43:70:c3:93:1f:b0:dd:c9:0f:f6:
10:20:e3:00:d0:f6:85:c1:66:a0:14:c4:c5:7f:a7:
10:5b:8a:fc:8c:69:16:86:2e:4d:d2:8c:2c:6c:b6:
a5:26:4c:83:50:17:e2:13:86:a6:30:aa:35:64:a7:
dd:96:d6:59:f7:c4:17:e9:46:3a:56:83:07:42:04:
71:e6:5f:d5:44:80:72:ed:3d:47:1d:03:f8:1e:0f:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:8D:CA:FA:4F:18:AE:9C:4F:F3:45:BA:2D:66:59:83:64:40:67
X509v3 Authority Key Identifier:
keyid:58:0D:E6:52:41:F7:63:D6:90:8D:01:A4:43:DD:F5:94:22:0C:0F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4b0abe-c332-4aae-ab60-d8e1bc44d2d4/1/WA3mUkH3Y9aQjQGkQ931lCIMD0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ea:06:03:ca:dc:fc:6c:53:aa:75:0f:08:67:0a:e7:d3:8c:
97:3f:0f:98:83:19:3f:83:47:12:f9:6f:07:89:a9:fc:bc:91:
af:14:78:9c:cd:db:c1:b1:e4:47:42:d5:2a:48:35:c7:27:7b:
d5:9f:9d:8b:ec:c5:26:ff:43:74:70:95:c4:69:c6:ff:2d:a4:
75:e4:c7:23:ec:1d:c4:5b:b9:11:2c:b8:1e:0f:78:71:d4:02:
1d:82:6d:6e:03:19:8e:fd:9b:52:ec:2b:a4:57:d6:d4:a5:68:
73:81:08:31:a8:6b:81:b3:4c:21:8e:18:1a:b6:eb:03:13:6d:
fb:e4:ff:b0:c5:69:24:e7:a2:89:ea:6b:05:89:16:1f:50:1f:
28:b1:b2:3d:bd:b7:7f:13:30:d2:1f:1c:8a:71:31:e3:53:50:
74:c1:74:86:07:cd:62:72:38:b4:be:da:96:b3:9d:85:cf:8e:
8c:90:7d:39:b4:53:a7:be:95:1a:9c:fa:e7:c2:63:be:5a:05:
ab:61:0e:7a:2f:ce:c6:e9:cc:4a:1f:3d:c3:0a:88:ac:39:12:
82:47:a9:44:c0:4b:55:d4:04:8d:c0:bc:e9:e8:a9:56:ad:03:
ea:c7:14:9a:12:58:5f:b0:a8:16:8e:ac:5e:a8:58:e3:c7:d4:
d7:5d:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:07:46 2026 by rpki-client