Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier: Hhlwi5GmwV4XBDB/mx9QbveSYOG9iJQE+6zavbVck+c=
Subject key identifier: 10:33:DA:C2:B2:32:20:ED:0A:70:94:3F:61:E3:AC:7A:71:CE:58:7A
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 01A0C557CA7EB55C102457EF55DA69205B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 19:00:59 +0000
Manifest this update: Mon 21 Sep 2026 19:00:59 +0000
Manifest next update: Tue 22 Sep 2026 19:00:59 +0000
Files and hashes: 1: jsDYE34UviBew9m4vDFXo1V4oc8.roa (hash: gdIEnE0XT9mqo9eWipuUMBco0clAJ+AoSte8Ebzw+Y4=)
2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: kBKH/8pLnT7IzoO6QPKEMUWTusz++xzJVR7/iy7JMHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:ca:7e:b5:5c:10:24:57:ef:55:da:69:20:5b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: Sep 21 19:00:59 2026 GMT
Not After : Sep 22 19:00:59 2026 GMT
Subject: CN=1033dac2b23220ed0a70943f61e3ac7a71ce587a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:83:79:71:2c:ae:7d:15:ca:04:50:9c:aa:
b4:8a:4a:38:a5:a4:88:9a:82:29:1d:77:06:17:d2:
a8:c7:a6:97:b9:0a:7a:14:1d:53:be:54:b2:2b:c3:
d2:3e:6d:62:47:87:47:8f:a5:55:8e:99:61:7f:fd:
0e:fe:88:8c:0d:ef:57:fd:24:98:27:90:83:94:cd:
3f:92:fe:a2:29:7c:e3:19:fa:3b:f1:02:79:b8:d0:
02:39:37:eb:ae:66:e1:f0:2d:33:a0:b4:d5:f5:4d:
75:87:cf:f2:e3:4b:5f:72:f8:f3:9f:76:ba:d0:ad:
2a:5d:ee:45:e0:a8:c4:22:22:10:5c:c9:fc:6d:ca:
ef:5c:5c:00:67:e2:92:4b:75:be:b1:34:e1:a7:46:
89:1f:e8:d3:87:71:91:ae:77:90:f0:d2:7e:26:85:
cb:10:07:45:ad:07:5e:9b:72:9a:5e:84:f8:b4:c7:
c2:3d:91:40:df:80:b8:17:d9:c6:ad:77:d2:67:5c:
70:d8:79:50:cf:db:b3:49:df:ee:14:a1:11:4e:0a:
c7:7c:b2:ce:b0:07:2f:e5:b1:7f:d8:a7:0b:e6:28:
30:f0:54:02:eb:30:6f:f2:97:69:de:3a:8d:6d:d8:
2e:c6:5c:9d:3a:3e:e6:eb:51:58:3d:cb:b2:5b:e4:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:33:DA:C2:B2:32:20:ED:0A:70:94:3F:61:E3:AC:7A:71:CE:58:7A
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:d9:df:20:c7:df:82:24:4a:2a:04:72:ac:22:f5:d2:0f:
fb:83:4c:7c:7d:91:5a:a4:b5:99:3d:42:69:f4:e2:4b:6d:35:
cd:22:99:7c:a1:e6:d0:62:d9:94:54:9e:fe:e4:66:b6:d9:3c:
42:ac:a6:90:13:a8:58:cb:ad:8b:df:76:be:45:fb:ee:21:83:
58:76:8f:f5:5f:c2:af:61:32:50:bb:cb:ee:45:e9:dd:f3:80:
f7:29:1a:93:49:43:6a:16:6a:72:35:5d:12:47:34:8b:c2:a6:
77:bb:da:67:18:13:c6:6a:44:d7:c5:fd:89:3a:be:d5:31:9d:
99:9a:5c:2c:75:53:c6:7d:f6:b7:88:ca:24:e3:be:c5:28:22:
50:8a:d2:95:83:43:35:2e:7c:a2:ea:46:66:65:82:93:8b:a1:
cf:82:cd:7b:a8:7f:b5:16:d3:81:3d:6c:9a:80:7f:a7:00:cd:
de:74:51:0d:c3:f1:b2:0e:56:3c:f3:b1:42:7f:ae:a2:61:62:
d6:41:c7:e7:3d:ad:5a:be:3b:3c:21:0d:f8:3f:3f:66:07:b5:
58:09:7d:04:72:40:b5:88:8a:57:67:f8:8f:af:62:91:92:29:
bc:68:f9:df:4e:2e:9e:f3:5c:8d:07:88:7a:d3:9c:d0:b2:16:
72:a4:2b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:20:49 2026 by rpki-client