
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier: Vu4yJQP57COaERBJs7D+7FQfC/HngT+K+CdT2MJpg0Q=
Subject key identifier: 5C:AA:AF:DB:80:10:42:A9:8D:EC:F4:9B:04:D9:1A:B3:73:E7:AC:01
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 01A08D571FCA6CF253D1CB6AD350250CAB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 22:01:32 +0000
Manifest this update: Thu 10 Sep 2026 22:01:32 +0000
Manifest next update: Fri 11 Sep 2026 22:01:32 +0000
Files and hashes: 1: jsDYE34UviBew9m4vDFXo1V4oc8.roa (hash: gdIEnE0XT9mqo9eWipuUMBco0clAJ+AoSte8Ebzw+Y4=)
2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: LfGctHTFjfqWUAEsWVd2wWPJ1ptOfeGDQ0JmteuQMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:57:1f:ca:6c:f2:53:d1:cb:6a:d3:50:25:0c:ab:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: Sep 10 22:01:32 2026 GMT
Not After : Sep 11 22:01:32 2026 GMT
Subject: CN=5caaafdb801042a98decf49b04d91ab373e7ac01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:2f:8a:8d:1c:6b:32:36:cc:32:70:23:0f:
fb:eb:cf:17:3f:ce:fc:ae:60:2a:77:a2:88:bd:16:
5a:23:c4:b5:bc:aa:12:fb:56:e6:5c:d6:d4:24:a1:
d5:67:f8:5f:90:85:81:da:b1:df:f2:ac:07:94:f2:
77:bc:97:30:77:dd:ae:7d:7b:b8:98:b7:92:2b:34:
f0:19:11:75:72:6d:39:ed:5d:09:a7:17:4b:22:8f:
e8:e1:67:82:ae:95:a7:20:8c:3b:69:3f:09:45:a6:
dc:85:60:90:2b:78:f6:de:64:51:2b:4e:9a:04:88:
ad:4a:b6:0d:af:92:28:24:f6:a8:c6:a2:0e:63:20:
74:fa:57:c3:d4:e2:77:9c:7f:5b:a0:bf:d7:a3:c7:
c9:5d:58:2f:5e:3a:72:54:44:b8:b6:08:ac:3c:f4:
ac:f9:3d:50:ce:b8:94:b5:f1:83:0f:eb:b3:9c:c1:
2f:97:0b:24:2c:74:14:cb:50:32:45:98:ca:6a:72:
63:b8:07:21:0b:eb:6a:45:b2:26:64:62:93:5b:fd:
3a:14:7b:b6:d1:14:8e:b5:3c:30:4a:f7:cf:a6:90:
c3:4a:f4:ca:ea:bd:48:e8:f8:49:81:23:4a:04:85:
18:05:0c:9f:69:83:f1:c0:74:4d:ed:04:7b:7a:af:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:AF:DB:80:10:42:A9:8D:EC:F4:9B:04:D9:1A:B3:73:E7:AC:01
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8a:08:50:c5:a4:30:67:50:98:cc:3d:b8:06:96:83:65:6a:
55:0a:85:25:30:cc:b3:f9:69:54:93:ad:0e:5b:03:52:08:3c:
ee:b0:26:22:9e:6b:30:8c:42:79:56:c4:ad:c4:e7:21:a0:e3:
62:d2:62:8c:e9:50:4c:ef:a0:1e:f2:e3:81:dd:15:bc:3f:38:
41:b3:af:41:ab:6d:d4:40:f7:29:ee:2c:c2:ab:ec:64:e7:8c:
fa:e7:2b:fc:b3:47:fc:c8:b5:32:8d:65:62:31:51:cb:cc:07:
4a:bd:a0:1d:8c:8b:96:34:13:f0:65:96:81:1f:d4:3c:c5:02:
f8:7e:29:d2:f2:d5:b5:51:50:dd:98:e4:d3:65:f3:bb:0d:69:
3e:ae:a9:ad:a3:38:ce:a0:29:68:b7:91:e5:6c:20:f6:51:29:
60:d4:a8:80:48:d2:af:54:0b:48:c3:32:a9:81:99:c0:7f:32:
c4:a9:b2:13:d4:3a:08:c9:32:77:7f:72:7a:45:7d:75:0e:d1:
0d:0c:df:21:ad:c2:bf:40:0b:a2:ca:fb:0f:89:4f:c3:8b:98:
93:2f:ce:59:39:05:7a:f1:21:c3:55:cd:59:e7:74:d6:6e:b6:
57:f3:c7:27:0a:fb:e3:7b:eb:3a:a4:8e:dc:95:f9:2b:9c:ab:
44:4f:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:08 2026 by rpki-client