Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File: wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier: 5bAzPixOFUjJhHEqoAIUdFYocdgwx6dQHBgziC/RBOA=
Subject key identifier: 99:C6:4E:0E:00:BF:DD:6B:63:98:1E:D1:3A:7A:5A:84:F9:6B:77:34
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial: 01A1AA158F57859834C7B7DC87A566C2AE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number: 1AE0
Signing time: Thu 05 Nov 2026 05:01:41 +0000
Manifest this update: Thu 05 Nov 2026 05:01:41 +0000
Manifest next update: Fri 06 Nov 2026 05:01:41 +0000
Files and hashes: 1: 5OVkeLACzo-Nzhz8nE4gNk1vVro.asa (hash: 04mqLqIJSZKheZhlT8ka6dGyJ1wGI75EEToiEoQmMuA=)
2: dLkbfrZ0nH3Kr3bvm6WG5ym4104.roa (hash: FSYFfdn3hv9kN/qMwTudiNUcB90HK6rm8oZ3RkDVyuM=)
3: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: cg1cCb3iwS6knEpaU+II+bXyZkPegHmRTbBS1Kzkk9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:15:8f:57:85:98:34:c7:b7:dc:87:a5:66:c2:ae:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Validity
Not Before: Nov 5 05:01:41 2026 GMT
Not After : Nov 6 05:01:41 2026 GMT
Subject: CN=99c64e0e00bfdd6b63981ed13a7a5a84f96b7734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:ab:f7:76:ee:f6:a0:e0:60:8c:0d:dc:1c:
78:a4:21:42:24:0e:f6:8f:f8:d8:fe:19:05:80:a1:
9a:66:03:fa:f8:0f:d0:f9:34:0c:28:de:3f:f8:9d:
1a:9d:80:34:5d:95:7e:7a:00:f5:d0:6b:81:41:4c:
67:3f:e2:2e:44:d5:95:d2:74:59:77:0a:49:e1:ac:
38:23:bf:9a:2a:aa:b8:f1:11:a1:c0:c5:01:66:7b:
db:42:4b:79:3e:c9:94:41:77:8a:49:34:b9:b4:6b:
72:9a:22:b9:e2:20:b6:e5:3f:68:ff:85:ae:43:d6:
6f:59:0e:aa:ec:e1:81:4d:6e:78:ae:9d:02:c7:5f:
07:6b:9c:91:d9:81:a4:80:72:6d:a0:b9:4b:20:8e:
8e:ab:7e:8b:d4:10:c6:06:3f:40:69:c5:10:08:a1:
c7:29:7d:65:72:59:96:ce:89:5a:46:86:51:7d:c3:
83:83:cd:43:a5:3f:77:e7:40:66:62:6c:87:23:c2:
55:69:91:56:d7:c6:1c:eb:e1:80:71:6e:e6:e4:f8:
6c:27:db:73:4b:35:1d:1d:85:9b:17:f4:ed:66:66:
e7:ae:8a:b4:ee:a2:0b:d7:9f:2b:32:91:14:e2:ff:
1d:6e:06:86:84:ce:f1:ea:57:da:f3:c0:fd:49:41:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:4E:0E:00:BF:DD:6B:63:98:1E:D1:3A:7A:5A:84:F9:6B:77:34
X509v3 Authority Key Identifier:
keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a1:b2:c7:cd:7a:0b:ed:5b:57:cf:b8:75:75:65:a0:75:cc:
ee:37:bc:80:01:2b:54:40:75:3d:da:11:1c:b0:ff:6c:e2:91:
a4:6d:1f:ac:ed:bb:ec:42:d2:16:86:d7:91:a6:25:26:95:89:
d7:a5:c7:59:eb:47:0f:4d:8b:9d:d4:4e:15:90:8d:67:59:71:
46:ae:f1:c3:e1:92:46:35:1b:af:6e:d5:e2:7b:48:7d:bf:e4:
75:9b:a6:ca:bd:8b:3c:43:76:39:7f:73:6b:b9:ee:39:7a:a0:
c1:fd:72:be:9b:b2:56:e7:ec:e2:99:63:e6:b0:b6:9a:1a:41:
21:2d:05:a2:8d:c2:a5:b4:d2:58:75:8f:47:c1:54:25:4e:b7:
e7:bf:0c:10:c7:07:72:e8:51:52:5a:2a:ee:d5:35:b0:26:8a:
bd:b1:6d:b8:d5:ea:9a:de:1a:60:9c:0f:c1:cc:12:49:b1:f3:
0d:ec:5f:a4:d1:8b:c0:1d:5d:33:a4:f2:ce:f8:e7:4b:3f:fa:
b4:05:d7:d9:38:09:e9:8a:f7:e3:56:b7:fa:8d:6e:b7:05:8d:
62:fb:38:c4:9b:31:e5:57:67:61:52:28:08:93:3c:19:4d:0f:
fe:d5:75:5f:24:91:b0:32:c9:fa:23:f3:bb:15:90:97:d3:cf:
18:7e:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:50:40 2026 by rpki-client