Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier: kfo1wSnSeksJt6NPLLM2jk35z/+eDWr7Z2WtpAf913A=
Subject key identifier: 67:2D:0B:06:83:57:D7:C7:01:C1:7C:D8:B4:75:DC:F9:4C:B5:C0:73
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer: /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial: 01A0C1B1986AB943198A82C81707272E9C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 02:00:36 +0000
Manifest this update: Mon 21 Sep 2026 02:00:36 +0000
Manifest next update: Tue 22 Sep 2026 02:00:36 +0000
Files and hashes: 1: AVclKH5uCVBaYbA6dT0Au-UGS98.asa (hash: 3xs/9Z38cKQ2dOzSR6cmn/M7dQXXeYoJHDHYFFYxRWY=)
2: UzwdLveCar1NWysEG_gC0gmYs3s.roa (hash: etmZBELJl6TLC8YBGOya/Pd8fe5m9VWeBzGftoSy7jE=)
3: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: 35kay0zXh7ctxbbTx6OAyuNnuJ4pFOWcDHT6NphOorE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:98:6a:b9:43:19:8a:82:c8:17:07:27:2e:9c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Validity
Not Before: Sep 21 02:00:36 2026 GMT
Not After : Sep 22 02:00:36 2026 GMT
Subject: CN=672d0b068357d7c701c17cd8b475dcf94cb5c073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:e5:8f:8f:39:38:01:1f:a6:57:af:11:2d:
e8:71:ce:d7:3a:b8:28:2d:c9:82:f9:1d:b2:a1:e5:
58:af:43:70:36:c9:ed:53:96:99:ed:54:a4:f9:5a:
1d:d5:34:75:06:45:ea:85:e4:81:e9:d4:ec:48:16:
7f:d3:56:82:5b:ad:41:f2:5c:73:75:03:f7:4e:8c:
3f:0d:e7:e3:41:84:1d:8d:a0:87:1a:7d:8e:9e:ef:
5e:23:9d:7d:93:67:8e:26:fd:f1:2e:2b:37:88:3b:
3a:a6:16:63:ae:0b:a5:7a:a1:00:f4:60:13:a9:f3:
0b:2e:70:6c:a1:48:4c:42:35:bc:f0:89:21:4b:f1:
a1:c3:a3:9e:3a:58:a1:5e:25:1c:a1:8b:50:02:a5:
10:01:a2:57:5b:7f:ef:9e:44:0e:f9:18:28:85:2a:
15:d6:30:20:8f:a6:67:15:7e:70:39:51:b2:58:1a:
1d:f3:46:3c:2c:01:5e:d7:2e:86:e1:31:3b:4d:c5:
94:19:ef:80:ce:6a:e8:52:03:f1:ce:75:ba:1f:c2:
8f:11:9d:da:d4:48:16:fa:54:96:36:ff:71:e1:5a:
2a:78:78:fe:38:a0:6a:2a:0d:04:04:71:75:cc:9c:
2e:8e:7d:de:d0:06:81:a4:dd:f1:9d:6e:0c:c6:0e:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:0B:06:83:57:D7:C7:01:C1:7C:D8:B4:75:DC:F9:4C:B5:C0:73
X509v3 Authority Key Identifier:
keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:f9:79:1c:45:03:8c:19:1f:cf:29:a7:55:54:c7:60:53:
8c:94:eb:80:10:4e:e3:0f:78:d5:07:1a:49:e1:85:1c:72:5b:
e7:99:c0:44:24:8e:5d:60:52:fd:1e:b1:f5:cd:c1:7b:7f:72:
e8:b9:67:ae:1b:0c:b6:50:5c:1f:fc:e8:0b:23:4b:80:d2:fc:
99:5c:f8:0b:4a:f9:50:36:a4:2a:3a:da:b2:86:8e:bb:8e:d1:
9f:85:7a:d4:8e:40:5a:ea:3b:3a:c8:b7:ba:64:23:36:58:b8:
92:6f:17:45:ae:36:ff:39:a8:ec:6b:f9:b4:38:38:b5:16:e6:
3f:46:68:95:23:bd:88:0f:56:6c:21:cc:4b:29:09:f3:2a:5d:
b8:4d:6a:80:ab:51:1b:07:99:93:fe:c9:8c:82:6d:01:33:a3:
d7:f9:17:00:83:26:3c:a1:41:25:af:a2:36:4c:51:f8:a9:97:
a1:10:df:e7:29:aa:44:59:5f:19:c2:82:85:2f:2c:a7:de:6f:
fa:9d:52:31:f2:8f:8e:01:eb:17:dd:c0:d5:18:d0:01:dc:a1:
5f:ea:78:1b:50:7a:91:9e:00:41:19:3b:ac:7c:2c:3c:e2:9a:
b9:e1:7f:24:1d:52:40:70:20:fa:56:91:91:78:8c:e4:23:3f:
ea:1e:f6:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsZhquUMZioLIFwcnLpwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzhmNjhhYzQxNTA1OWQ1NmQxOTM4YzM3NWE1OTg2YTZm
ZmY0YjEwHhcNMjYwOTIxMDIwMDM2WhcNMjYwOTIyMDIwMDM2WjAzMTEwLwYDVQQD
Eyg2NzJkMGIwNjgzNTdkN2M3MDFjMTdjZDhiNDc1ZGNmOTRjYjVjMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUzlj485OAEfplevES3occ7XOrgo
LcmC+R2yoeVYr0NwNsntU5aZ7VSk+Vod1TR1BkXqheSB6dTsSBZ/01aCW61B8lxz
dQP3Tow/DefjQYQdjaCHGn2Onu9eI519k2eOJv3xLis3iDs6phZjrguleqEA9GAT
qfMLLnBsoUhMQjW88IkhS/Ghw6OeOlihXiUcoYtQAqUQAaJXW3/vnkQO+RgohSoV
1jAgj6ZnFX5wOVGyWBod80Y8LAFe1y6G4TE7TcWUGe+AzmroUgPxznW6H8KPEZ3a
1EgW+lSWNv9x4VoqeHj+OKBqKg0EBHF1zJwujn3e0AaBpN3xnW4Mxg7jgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGctCwaDV9fHAcF82LR13PlMtcBzMB8GA1UdIwQY
MBaAFFrI9orEFQWdVtGTjDdaWYam//SxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4Njct
MWM4MTMyZDVmNGI0LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4NjctMWM4MTMyZDVmNGI0
LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl35eRxF
A4wZH88pp1VUx2BTjJTrgBBO4w941QcaSeGFHHJb55nARCSOXWBS/R6x9c3Be39y
6LlnrhsMtlBcH/zoCyNLgNL8mVz4C0r5UDakKjrasoaOu47Rn4V61I5AWuo7Osi3
umQjNli4km8XRa42/zmo7Gv5tDg4tRbmP0ZolSO9iA9WbCHMSykJ8ypduE1qgKtR
GweZk/7JjIJtATOj1/kXAIMmPKFBJa+iNkxR+KmXoRDf5ymqRFlfGcKChS8sp95v
+p1SMfKPjgHrF93A1RjQAdyhX+p4G1B6kZ4AQRk7rHwsPOKaueF/JB1SQHAg+laR
kXiM5CM/6h724w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:30:03 2026 by rpki-client