Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File: wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier: KW2gmY4bQwgEX/6R6r3eI/ZF/XYHcX5aYH5hiBZTJTU=
Subject key identifier: F6:54:4E:3B:E4:D3:83:74:F0:09:FD:3D:7F:9C:CE:50:93:B6:F3:F8
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial: 01A0E709A6F4A22E1C17D1E593AEF3A4C309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 08:02:44 +0000
Manifest this update: Mon 28 Sep 2026 08:02:44 +0000
Manifest next update: Tue 29 Sep 2026 08:02:44 +0000
Files and hashes: 1: 5OVkeLACzo-Nzhz8nE4gNk1vVro.asa (hash: 04mqLqIJSZKheZhlT8ka6dGyJ1wGI75EEToiEoQmMuA=)
2: dLkbfrZ0nH3Kr3bvm6WG5ym4104.roa (hash: FSYFfdn3hv9kN/qMwTudiNUcB90HK6rm8oZ3RkDVyuM=)
3: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: iFHgSVSve6n8sfhUmGcnf4d6pe1e7z6eYssFIlyo/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:a6:f4:a2:2e:1c:17:d1:e5:93:ae:f3:a4:c3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Validity
Not Before: Sep 28 08:02:44 2026 GMT
Not After : Sep 29 08:02:44 2026 GMT
Subject: CN=f6544e3be4d38374f009fd3d7f9cce5093b6f3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fa:f7:c7:c0:ec:8e:de:ae:8b:ce:18:44:09:
09:53:87:75:f0:02:66:0d:7a:71:66:f6:eb:a5:2a:
95:8d:27:ea:82:b9:30:58:77:f2:cf:17:03:ce:f2:
e0:ea:80:ed:40:fd:ca:b9:81:d1:af:c0:f3:6b:54:
45:af:b6:ea:f1:d8:53:3e:a5:00:7c:28:23:c6:7b:
46:08:a7:55:09:e2:11:8a:e8:28:63:08:ff:d4:79:
66:bc:9c:ea:4b:57:72:7b:b5:26:57:1d:17:04:85:
0c:b4:62:c8:5b:a5:4d:99:b7:78:36:ee:44:a5:5b:
83:74:22:60:1e:9b:68:78:97:8c:3d:40:47:54:7c:
12:ea:9d:0f:22:71:91:e0:42:51:2c:6f:17:0d:6d:
ce:12:69:62:65:d5:5a:e7:74:27:72:c2:b3:ce:ba:
cf:ea:ab:3a:2b:d6:9c:74:17:b5:a6:a8:b5:66:79:
7c:6f:c3:70:9a:dd:33:04:f9:26:d6:70:e1:ec:f5:
64:a4:a2:8f:e4:63:80:4a:ff:77:69:d7:78:f3:3d:
f0:b2:c8:fd:16:b9:81:46:19:c4:3b:55:6a:e7:18:
d2:e2:e9:12:65:38:c4:ca:53:18:9d:50:55:33:68:
90:e7:ba:71:21:fd:b5:fe:0d:98:79:1e:ed:ba:9e:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:4E:3B:E4:D3:83:74:F0:09:FD:3D:7F:9C:CE:50:93:B6:F3:F8
X509v3 Authority Key Identifier:
keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:31:93:96:bb:52:42:1c:2b:ec:05:12:af:cd:1b:d7:5e:
30:9b:e8:b4:ab:c5:d8:b4:22:b6:56:6f:0b:ca:2c:94:fc:11:
2a:43:5f:3f:e2:56:f6:e0:4b:03:9f:44:ca:4a:ac:dd:19:1b:
7a:2b:db:03:e0:b1:ab:0b:5f:e7:a8:cc:9d:7c:bd:27:af:b5:
d4:24:9e:ea:8c:9d:80:fc:4d:b8:14:92:21:ed:4e:e3:89:ab:
24:5e:a6:fc:fd:f8:e5:94:58:b0:6b:63:f2:9b:32:59:8a:14:
02:80:75:3b:41:33:42:00:80:13:3c:7a:32:ab:2f:42:ae:83:
ed:f4:ec:92:df:65:6d:83:ac:dd:69:a7:30:78:c2:bc:4a:7b:
7a:f8:7c:3d:f5:d8:b8:61:d4:bb:87:2c:54:3d:f4:65:8f:9b:
a5:52:d1:ea:f5:a5:64:ba:f1:29:3c:07:9e:d4:fa:95:85:ed:
4b:03:55:9d:a7:3b:e3:b4:23:26:00:e4:47:8c:b3:bf:db:30:
90:44:79:b3:bb:07:79:60:6b:ad:c7:0c:21:b0:f4:96:74:e6:
ae:2b:63:76:07:3e:a3:6c:80:73:e5:b9:29:d9:25:bf:37:81:
77:90:e2:54:c2:b4:1c:42:50:8e:37:c6:55:af:0c:8d:2b:39:
a4:bf:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:17:51 2026 by rpki-client