Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: G68XDCyXNP0EhEzGAhJaa6SFazFiFrcMuJTRVvLKHwo=
Subject key identifier: 8E:DD:DE:4F:DD:0E:A8:D3:A5:28:41:E0:EA:01:40:4E:03:E1:97:9E
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 01A0D6F04337D9682C59D9DEBD7FFED34ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 05:01:05 +0000
Manifest this update: Fri 25 Sep 2026 05:01:05 +0000
Manifest next update: Sat 26 Sep 2026 05:01:05 +0000
Files and hashes: 1: FC3W89E7lPxHMttdKdqwUZ8ayGo.roa (hash: P2wT7iaUIOeyGlWOhw0T1qRlFG0Wm2TszirFqNtZ4G8=)
2: Q1lmJ-pOH8Zlev_WBTLT_II-SzM.asa (hash: XpylMLX06y98WuOlXUOZt6B7EKHaAeUMsRTKgHzZXVU=)
3: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: Vk+mMGqxnC6aMtRgXPxvIRyVLQmParHMDDKQFLM7dGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:43:37:d9:68:2c:59:d9:de:bd:7f:fe:d3:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Sep 25 05:01:05 2026 GMT
Not After : Sep 26 05:01:05 2026 GMT
Subject: CN=8eddde4fdd0ea8d3a52841e0ea01404e03e1979e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:2e:bf:b7:78:d2:01:5b:6d:12:b5:16:d3:
7f:e6:20:12:89:c9:32:de:b0:f0:e1:06:e4:ca:9a:
91:59:14:ea:ee:29:b4:b1:82:3e:00:e8:1b:1d:6a:
af:da:45:59:48:f1:a3:6c:05:72:12:d0:f9:2f:94:
b6:19:1b:b1:8d:43:eb:cf:c3:1d:af:29:db:e0:ea:
34:99:8e:06:c9:88:81:c7:c9:85:7f:61:c6:c7:2c:
56:ba:59:df:17:fb:84:68:91:4a:60:d8:94:ab:e8:
2c:27:e4:37:a4:00:50:63:6e:80:f8:21:35:f7:b3:
07:b2:f4:74:60:c1:a3:ca:62:cc:6e:cd:e6:9e:01:
97:31:13:09:11:21:6e:d7:03:ad:c2:0c:fc:9e:2e:
61:d3:c7:39:bf:4f:a4:6f:41:72:12:ed:b1:51:81:
13:cb:55:db:e6:bb:1c:61:36:a5:f9:71:27:78:09:
b5:b4:ab:15:2f:d3:6f:96:8e:f8:b5:a2:5b:95:d1:
89:dd:83:b8:22:54:92:34:2f:89:8d:8d:91:60:7a:
13:3a:83:4d:62:19:f9:8d:a5:f8:01:b5:0f:6e:5f:
37:bc:fc:18:b8:5d:58:8e:ed:2b:80:06:e6:92:93:
94:7e:ff:1c:55:6a:ce:1c:58:24:07:5d:30:2f:e1:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:DE:4F:DD:0E:A8:D3:A5:28:41:E0:EA:01:40:4E:03:E1:97:9E
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b7:60:a4:1c:5e:69:7b:e3:8e:9d:09:c2:ea:01:de:18:65:
69:cc:08:2a:2a:4d:6b:9c:da:0d:07:a9:13:01:d5:dd:f1:7b:
bd:cc:ba:fc:ff:e5:49:9a:a9:d2:be:df:b0:64:e8:42:0a:f0:
5b:66:d2:56:1a:98:01:2b:f8:28:59:02:54:89:af:45:cd:df:
d5:3d:d6:21:57:7f:7f:9c:ce:cb:9c:1c:97:e2:13:b1:d6:2f:
d2:ea:65:bb:24:04:fa:dd:42:a6:53:2b:1d:fd:f7:92:74:2f:
11:2b:0f:ee:6d:f8:fc:a0:a6:b1:cc:98:16:75:90:3b:49:d7:
0b:db:8a:35:4e:7d:65:b3:a5:2b:b4:b8:72:95:2b:71:bf:4b:
cb:73:00:62:e1:fb:ee:ea:8e:33:97:40:a7:c9:e8:79:6f:b5:
04:78:5b:2a:b6:b2:cc:84:c6:a0:f2:43:85:ba:32:17:99:d0:
80:e4:7e:14:cb:9f:79:8b:20:ab:3a:61:76:79:f9:e6:1e:12:
c8:09:21:24:c0:9b:4c:f7:ac:47:1b:5c:38:53:04:25:33:e3:
85:23:ba:5d:44:39:c2:ab:5d:9f:33:a7:92:ce:72:9c:50:1e:
66:c1:a6:8e:5d:df:aa:51:f8:fe:98:f6:c9:f2:9c:1d:26:db:
69:6c:9b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8EM32WgsWdnevX/+00q+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzk2NGFhYmY0MDRkZGEzZjVlMGVjYzFjNzA2YWIzMjdj
NmY5MzEwHhcNMjYwOTI1MDUwMTA1WhcNMjYwOTI2MDUwMTA1WjAzMTEwLwYDVQQD
Eyg4ZWRkZGU0ZmRkMGVhOGQzYTUyODQxZTBlYTAxNDA0ZTAzZTE5NzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVouv7d40gFbbRK1FtN/5iASicky
3rDw4QbkypqRWRTq7im0sYI+AOgbHWqv2kVZSPGjbAVyEtD5L5S2GRuxjUPrz8Md
rynb4Oo0mY4GyYiBx8mFf2HGxyxWulnfF/uEaJFKYNiUq+gsJ+Q3pABQY26A+CE1
97MHsvR0YMGjymLMbs3mngGXMRMJESFu1wOtwgz8ni5h08c5v0+kb0FyEu2xUYET
y1Xb5rscYTal+XEneAm1tKsVL9Nvlo74taJbldGJ3YO4IlSSNC+JjY2RYHoTOoNN
Yhn5jaX4AbUPbl83vPwYuF1Yju0rgAbmkpOUfv8cVWrOHFgkB10wL+HLDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7d3k/dDqjTpShB4OoBQE4D4ZeeMB8GA1UdIwQY
MBaAFMJ5ZKq/QE3aP14OzBxwarMnxvkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEt
NWViZjJhNTRlYjZkLzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEtNWViZjJhNTRlYjZk
LzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrdgpBxe
aXvjjp0JwuoB3hhlacwIKipNa5zaDQepEwHV3fF7vcy6/P/lSZqp0r7fsGToQgrw
W2bSVhqYASv4KFkCVImvRc3f1T3WIVd/f5zOy5wcl+ITsdYv0upluyQE+t1CplMr
Hf33knQvESsP7m34/KCmscyYFnWQO0nXC9uKNU59ZbOlK7S4cpUrcb9Ly3MAYuH7
7uqOM5dAp8noeW+1BHhbKrayzITGoPJDhboyF5nQgOR+FMufeYsgqzphdnn55h4S
yAkhJMCbTPesRxtcOFMEJTPjhSO6XUQ5wqtdnzOnks5ynFAeZsGmjl3fqlH4/pj2
yfKcHSbbaWyb/Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:25:38 2026 by rpki-client