Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File: WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier: ldIkOWg4PcpvXgTBrc7FqpbgFAk3EniuCdpgR8hxw1w=
Subject key identifier: A8:D7:18:27:56:FB:9C:8B:F2:3E:05:C6:13:9A:C9:47:79:D7:75:B5
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial: 01A1822BCC15C1EF4FB5B986C7BE8457FB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 11:01:10 +0000
Manifest this update: Wed 28 Oct 2026 11:01:10 +0000
Manifest next update: Thu 29 Oct 2026 11:01:10 +0000
Files and hashes: 1: CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa (hash: 62NrbZ3F0XaxVmb0wIiq4eSU0cht7XOifDXoDw7smqk=)
2: Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa (hash: idu2KS48f2h5e79Q1R66rhjvET6BFhf6C4kPWcByyac=)
3: NyFZ2eW1WSoY97If0z5zbstqwOc.roa (hash: tzK5PMS/xleldxj4Om3hBpSiQl1y+6+WsVVnD8xC2Jk=)
4: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: dFg9BuHHA0pgrdARgD9HArmBq9ZO3yhkWs3IDzQHFgM=)
5: ebzad07NZYcwcy_R1eapuxHVLc8.roa (hash: npZjo0OeCdQvVEsvxdLKnv7xOn/66fNjn6RzPB16PNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:cc:15:c1:ef:4f:b5:b9:86:c7:be:84:57:fb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
Validity
Not Before: Oct 28 11:01:10 2026 GMT
Not After : Oct 29 11:01:10 2026 GMT
Subject: CN=a8d7182756fb9c8bf23e05c6139ac94779d775b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:6e:58:43:c7:13:18:af:a2:a9:df:18:21:
7c:45:67:2d:bb:53:06:8f:d2:26:09:b3:07:02:b9:
fd:8f:af:3d:67:5f:91:92:dc:13:59:c2:d5:f6:d4:
d3:4b:49:63:1c:b9:9f:60:86:ab:8c:47:91:cb:1f:
36:1f:34:64:e4:20:9f:1e:a9:0b:34:d4:e9:71:f5:
93:f6:4b:81:d3:ac:3e:00:b3:d5:3d:cc:54:d5:64:
cf:cb:7c:66:f5:93:93:17:28:05:8c:dc:9e:4e:08:
7f:cd:0a:d0:7d:42:8e:53:1f:b6:3f:59:df:9c:b0:
ab:45:91:9d:31:67:0b:15:df:55:b5:ea:ca:23:ea:
58:1e:59:c9:2d:11:f0:1e:9c:0b:24:67:b6:50:8d:
5f:57:db:25:c5:42:71:0e:09:7f:42:a5:7c:e5:fd:
6b:95:e4:ce:84:c8:76:ec:73:b8:93:92:96:ab:84:
b6:6d:6e:cf:ef:b3:4f:6e:7d:3b:2c:db:b8:6a:a3:
ff:81:69:8f:88:0e:d6:41:e1:8e:ed:80:a2:88:e9:
05:2e:0f:7c:56:5c:77:27:02:12:fa:15:98:6e:65:
29:99:c2:56:b7:d0:c1:ce:d0:3a:fd:9b:2c:09:18:
fc:ef:c5:c5:66:67:da:38:1c:12:43:27:be:4a:0f:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D7:18:27:56:FB:9C:8B:F2:3E:05:C6:13:9A:C9:47:79:D7:75:B5
X509v3 Authority Key Identifier:
keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fa:87:94:86:45:56:64:ad:c8:a1:17:72:23:19:e2:e5:f8:
8e:bc:ef:66:f4:e0:2b:9a:cb:a9:38:51:c3:46:d5:9d:a9:0b:
7a:82:1b:96:15:8f:2a:c2:7e:c0:56:db:7a:a9:83:80:83:b0:
93:9e:9b:50:ca:42:3d:d8:53:34:cb:79:b2:17:89:a8:14:37:
cd:9c:ab:06:fc:3f:00:7d:c4:2f:35:f6:d9:90:fb:11:a5:5b:
4f:62:a7:79:49:a6:bf:fb:44:f0:fe:60:aa:fe:25:0a:1d:f7:
58:5d:e0:d5:4d:66:a8:1f:79:a9:b1:6b:f7:4b:9b:62:8d:f8:
b6:bc:91:a8:f3:3b:8d:55:8d:51:69:6a:03:e3:24:95:7d:00:
04:4f:1e:29:03:88:83:be:c7:69:a0:ae:99:54:0b:7a:89:86:
f5:f7:d5:67:82:95:df:8e:18:e9:07:7b:5e:e9:4a:7b:fc:76:
c6:ed:ba:07:a5:27:d7:bf:69:84:83:92:07:f4:f9:14:11:fb:
c9:8f:09:60:50:87:d4:47:3e:ea:2c:14:8f:63:f5:8c:9d:2b:
75:72:54:41:70:d0:15:47:37:76:62:48:14:f2:d0:4e:00:10:
80:42:bd:15:1a:45:f8:17:42:4a:dd:bc:c3:94:95:53:c2:2f:
ee:b2:c7:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK8wVwe9PtbmGx76EV/tUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OGZhNDIwMTM0NGQ0MTA3Zjc5MmVlZTI1NjZjNjJkNjU3
MTRlMmQwHhcNMjYxMDI4MTEwMTEwWhcNMjYxMDI5MTEwMTEwWjAzMTEwLwYDVQQD
EyhhOGQ3MTgyNzU2ZmI5YzhiZjIzZTA1YzYxMzlhYzk0Nzc5ZDc3NWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7VuWEPHExivoqnfGCF8RWctu1MG
j9ImCbMHArn9j689Z1+RktwTWcLV9tTTS0ljHLmfYIarjEeRyx82HzRk5CCfHqkL
NNTpcfWT9kuB06w+ALPVPcxU1WTPy3xm9ZOTFygFjNyeTgh/zQrQfUKOUx+2P1nf
nLCrRZGdMWcLFd9VterKI+pYHlnJLRHwHpwLJGe2UI1fV9slxUJxDgl/QqV85f1r
leTOhMh27HO4k5KWq4S2bW7P77NPbn07LNu4aqP/gWmPiA7WQeGO7YCiiOkFLg98
Vlx3JwIS+hWYbmUpmcJWt9DBztA6/ZssCRj878XFZmfaOBwSQye+Sg+gJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjXGCdW+5yL8j4FxhOayUd513W1MB8GA1UdIwQY
MBaAFFmPpCATRNQQf3ku7iVmxi1lcU4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2It
NjY0YjhmMDNkMTgwLzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2ItNjY0YjhmMDNkMTgw
LzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/qHlIZF
VmStyKEXciMZ4uX4jrzvZvTgK5rLqThRw0bVnakLeoIblhWPKsJ+wFbbeqmDgIOw
k56bUMpCPdhTNMt5sheJqBQ3zZyrBvw/AH3ELzX22ZD7EaVbT2KneUmmv/tE8P5g
qv4lCh33WF3g1U1mqB95qbFr90ubYo34tryRqPM7jVWNUWlqA+MklX0ABE8eKQOI
g77HaaCumVQLeomG9ffVZ4KV344Y6Qd7XulKe/x2xu26B6Un179phIOSB/T5FBH7
yY8JYFCH1Ec+6iwUj2P1jJ0rdXJUQXDQFUc3dmJIFPLQTgAQgEK9FRpF+BdCSt28
w5SVU8Iv7rLHTg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:30:45 2026 by rpki-client