Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier: hNG0S7s1aT4Ajpkwz/0gQOEfL9vx0/gkcdofgToAy4A=
Subject key identifier: BE:A0:92:C7:75:E9:EB:5B:99:AC:E5:CE:CA:6A:23:ED:B4:F4:AD:C2
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial: 01A0C40DB4A3F085211DAF648DF5FB5A2415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number: 09A3
Signing time: Mon 21 Sep 2026 13:00:27 +0000
Manifest this update: Mon 21 Sep 2026 13:00:27 +0000
Manifest next update: Tue 22 Sep 2026 13:00:27 +0000
Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: vyqxhCwRFjzfoX+BlTBDESKd+AHB/jaEo0PxbbLqJJ8=)
2: U9tmgs6mFCWkoWieHrxDrEXnwL0.roa (hash: x4lfPhn0duWowl/P6x8Mok6jDaTFHCYfcJEYP4lecMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:b4:a3:f0:85:21:1d:af:64:8d:f5:fb:5a:24:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
Validity
Not Before: Sep 21 13:00:27 2026 GMT
Not After : Sep 22 13:00:27 2026 GMT
Subject: CN=bea092c775e9eb5b99ace5ceca6a23edb4f4adc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:6c:ee:7b:69:c2:c5:a8:44:2e:ec:bd:0d:
6b:39:b3:3f:2b:fe:12:21:43:d3:84:80:f9:5e:99:
fd:e4:54:2f:e5:c4:36:4d:0a:1f:93:ba:1e:dc:e7:
b1:fa:8c:8d:04:93:15:1b:8e:d3:93:1a:82:e6:e8:
19:b4:e0:b5:24:ba:35:dd:22:aa:fb:c7:c8:74:80:
5a:2d:71:fc:47:fb:bb:0b:60:ce:a8:af:73:9d:67:
64:09:75:1b:c3:03:1f:99:53:02:86:bd:ed:bd:40:
73:43:88:46:42:58:64:07:bd:10:46:d1:e2:dd:7f:
21:3f:09:57:67:55:10:d8:30:0c:e4:12:4a:c4:51:
93:e8:c7:ee:08:04:f0:57:a5:6a:a4:c0:97:b5:f9:
07:30:15:8b:b4:91:e3:c9:64:42:46:fe:ae:c1:34:
08:b6:dd:34:71:7e:54:23:f2:e2:12:bb:3b:a6:8c:
1c:f9:dc:e3:5d:52:fb:57:0f:16:d6:ab:be:ba:85:
9e:9a:05:0c:42:0f:93:11:1f:bd:7f:33:11:95:f7:
dd:e3:ab:53:a0:8a:a5:b9:45:34:bc:08:02:8f:da:
2e:f7:4e:40:d1:26:73:cd:5f:6c:c7:7b:1a:41:5a:
0f:db:12:07:9e:3d:c2:de:ac:81:c8:12:6f:c7:85:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:92:C7:75:E9:EB:5B:99:AC:E5:CE:CA:6A:23:ED:B4:F4:AD:C2
X509v3 Authority Key Identifier:
keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:62:76:63:d4:42:fa:fb:3b:ff:98:3b:c6:b5:1e:60:4d:a9:
45:e9:ab:8e:3e:9a:49:1f:39:69:ce:21:16:d9:a9:5e:dc:ba:
49:13:42:b7:67:3c:64:8c:32:52:90:12:a9:98:67:eb:17:32:
63:80:06:99:1f:70:36:43:5a:7d:7f:3e:7b:7f:af:d8:f9:43:
80:46:46:a5:39:df:86:79:1b:60:94:f7:92:5d:85:ae:1d:27:
cc:a8:72:ab:5d:f5:8b:41:04:d4:13:53:98:b8:cc:2a:10:a9:
23:8e:d2:b6:5a:70:a3:ef:49:5b:88:a3:bb:01:85:26:2a:95:
36:7d:2b:ac:39:e7:b8:3c:fd:0a:28:2b:5b:b7:03:d8:4e:5f:
84:c7:f5:2e:2e:93:98:15:e7:8b:7c:07:f3:76:ae:37:81:67:
43:94:a5:41:9b:3a:66:02:41:96:d8:4c:9f:fc:6c:78:38:49:
01:fd:0c:1e:db:7e:be:58:15:ae:89:8a:e0:1c:d7:6f:93:8a:
e4:d0:d2:5a:4a:d0:7f:de:54:cf:da:34:81:37:d3:d8:24:5a:
9c:93:b6:46:44:b7:ce:80:19:0b:2a:bd:ce:b3:1a:4c:fa:60:
be:6a:39:fe:a5:02:02:c4:47:e5:ab:24:94:ed:43:9e:fb:35:
db:29:1f:4c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDEDbSj8IUhHa9kjfX7WiQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjYyMzhiZWNkMzU2ZGY4N2QwYzYzMDI0ODEyM2Y4ZjIx
OWUxOGMwHhcNMjYwOTIxMTMwMDI3WhcNMjYwOTIyMTMwMDI3WjAzMTEwLwYDVQQD
EyhiZWEwOTJjNzc1ZTllYjViOTlhY2U1Y2VjYTZhMjNlZGI0ZjRhZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lNs7ntpwsWoRC7svQ1rObM/K/4S
IUPThID5Xpn95FQv5cQ2TQofk7oe3Oex+oyNBJMVG47TkxqC5ugZtOC1JLo13SKq
+8fIdIBaLXH8R/u7C2DOqK9znWdkCXUbwwMfmVMChr3tvUBzQ4hGQlhkB70QRtHi
3X8hPwlXZ1UQ2DAM5BJKxFGT6MfuCATwV6VqpMCXtfkHMBWLtJHjyWRCRv6uwTQI
tt00cX5UI/LiErs7powc+dzjXVL7Vw8W1qu+uoWemgUMQg+TER+9fzMRlffd46tT
oIqluUU0vAgCj9ou905A0SZzzV9sx3saQVoP2xIHnj3C3qyByBJvx4XyRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL6gksd16etbmazlzspqI+209K3CMB8GA1UdIwQY
MBaAFPlmI4vs01bfh9DGMCSBI/jyGeGMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XWWppLXpUVnQtSDBNWXdKSUVqLVBJWjRZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYThlY2U3LTJiNmMtNDQ1MS04YjNk
LTMzMmRiZDlhNjBhZi8xLzEtV1lqaS16VFZ0LUgwTVl3SklFai1QSVo0WXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I3L2E4ZWNlNy0yYjZjLTQ0NTEtOGIzZC0zMzJkYmQ5YTYw
YWYvMS8xLVdZamktelRWdC1IME1Zd0pJRWotUElaNFl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmJ2
Y9RC+vs7/5g7xrUeYE2pRemrjj6aSR85ac4hFtmpXty6SRNCt2c8ZIwyUpASqZhn
6xcyY4AGmR9wNkNafX8+e3+v2PlDgEZGpTnfhnkbYJT3kl2Frh0nzKhyq131i0EE
1BNTmLjMKhCpI47Stlpwo+9JW4ijuwGFJiqVNn0rrDnnuDz9CigrW7cD2E5fhMf1
Li6TmBXni3wH83auN4FnQ5SlQZs6ZgJBlthMn/xseDhJAf0MHtt+vlgVromK4BzX
b5OK5NDSWkrQf95Uz9o0gTfT2CRanJO2RkS3zoAZCyq9zrMaTPpgvmo5/qUCAsRH
5asklO1Dnvs12ykfTA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:36 2026 by rpki-client