Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File: wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier: C58ZMqquHAhWc6CF17tDm4RzXdtcyPbgx/qpMYvIcxg=
Subject key identifier: D0:D1:A9:E6:FC:81:29:87:3E:AD:E2:B5:8D:FB:28:14:58:BF:CF:B7
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial: 01A0D1C95A364B7A8820105753192363AEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 05:00:28 +0000
Manifest this update: Thu 24 Sep 2026 05:00:28 +0000
Manifest next update: Fri 25 Sep 2026 05:00:28 +0000
Files and hashes: 1: 5OVkeLACzo-Nzhz8nE4gNk1vVro.asa (hash: 04mqLqIJSZKheZhlT8ka6dGyJ1wGI75EEToiEoQmMuA=)
2: dLkbfrZ0nH3Kr3bvm6WG5ym4104.roa (hash: FSYFfdn3hv9kN/qMwTudiNUcB90HK6rm8oZ3RkDVyuM=)
3: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: m02ei/D/iR195CX8YbZZ1hXbhBVqRerXTMjgQSVaZ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:5a:36:4b:7a:88:20:10:57:53:19:23:63:ae:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Validity
Not Before: Sep 24 05:00:28 2026 GMT
Not After : Sep 25 05:00:28 2026 GMT
Subject: CN=d0d1a9e6fc8129873eade2b58dfb281458bfcfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:f0:7a:35:ce:79:db:26:94:ee:02:db:52:
52:57:94:60:b3:65:fe:c0:e9:ea:e0:68:2e:4b:5a:
18:d2:be:ee:70:cc:82:30:cd:55:a9:26:09:4a:1a:
06:a8:99:16:43:d0:04:30:aa:ff:f9:a2:9a:b4:81:
b3:8e:17:60:55:91:c2:69:94:b9:27:12:c1:c9:d9:
1b:10:6f:20:d9:97:78:6e:a1:2e:0f:9c:29:40:8e:
1c:8b:5a:78:7d:f3:2e:74:ea:e5:5c:cf:77:1c:22:
79:0f:16:5a:60:6b:55:d2:05:71:e3:fc:c3:46:bb:
8e:4c:83:e2:26:3a:a7:89:e1:1e:9c:79:a1:fd:02:
9e:81:c8:59:3f:c1:8f:33:a7:dd:d2:8d:d3:fd:a5:
4b:dc:d5:0c:d3:e7:85:af:c9:a4:e6:e3:98:9a:c8:
55:7f:7b:6f:22:06:9f:93:4f:9e:7e:01:e4:4b:39:
9a:ed:04:2a:91:ee:90:df:3b:41:79:73:16:b3:67:
fa:60:69:b0:d6:8c:e0:4d:5a:4c:59:44:17:92:c7:
de:0c:99:9c:eb:39:0a:2c:be:25:5e:e5:01:0a:44:
b4:71:3d:d4:43:82:ef:20:e9:35:ee:86:ba:20:85:
0f:3f:f0:b5:3c:b8:e0:bb:8d:13:6d:a3:24:d6:b9:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:A9:E6:FC:81:29:87:3E:AD:E2:B5:8D:FB:28:14:58:BF:CF:B7
X509v3 Authority Key Identifier:
keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:29:d3:08:f4:c6:64:34:7c:a8:df:aa:9d:60:bf:9f:32:18:
56:cc:21:70:3e:0a:c1:80:c6:7c:cd:d1:cf:b9:ab:b3:36:df:
f6:48:e4:88:d4:e3:86:1d:df:d4:d3:88:d6:ab:c7:35:46:7a:
f2:b3:a8:4d:42:c6:64:6e:e7:66:94:53:13:56:18:e3:c6:09:
7d:3c:8e:c7:f4:a3:94:21:fb:e7:e5:48:ff:52:69:41:1d:37:
7b:5e:f7:12:fe:1b:95:75:06:18:e0:9b:39:18:f9:d8:44:0d:
76:1c:6c:dd:3a:16:2b:0b:11:d7:16:97:b4:a8:ae:24:80:8d:
a6:68:2a:d6:48:f9:82:72:02:36:e7:36:66:5e:bf:e2:17:f3:
a7:f8:ce:5d:30:3d:9b:5d:39:cd:45:84:15:e9:d1:42:14:09:
3a:d2:d8:3e:68:9a:c3:04:93:fd:52:ab:b3:90:97:64:40:22:
61:6d:e1:37:65:3d:02:4c:01:6b:bb:8e:80:36:42:89:f5:92:
4d:ab:4a:68:a1:34:dc:a4:5c:de:e1:e6:e4:d7:f4:d3:65:0d:
fb:8a:71:f1:ab:da:22:76:77:5a:43:1c:50:ad:9c:b7:b4:4e:
eb:72:6d:39:e8:cb:9c:5b:7d:63:f0:97:55:de:38:60:5c:ad:
2e:c8:b2:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyVo2S3qIIBBXUxkjY669MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm
YjBhYTcwHhcNMjYwOTI0MDUwMDI4WhcNMjYwOTI1MDUwMDI4WjAzMTEwLwYDVQQD
EyhkMGQxYTllNmZjODEyOTg3M2VhZGUyYjU4ZGZiMjgxNDU4YmZjZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0TwejXOedsmlO4C21JSV5Rgs2X+
wOnq4GguS1oY0r7ucMyCMM1VqSYJShoGqJkWQ9AEMKr/+aKatIGzjhdgVZHCaZS5
JxLBydkbEG8g2Zd4bqEuD5wpQI4ci1p4ffMudOrlXM93HCJ5DxZaYGtV0gVx4/zD
RruOTIPiJjqnieEenHmh/QKegchZP8GPM6fd0o3T/aVL3NUM0+eFr8mk5uOYmshV
f3tvIgafk0+efgHkSzma7QQqke6Q3ztBeXMWs2f6YGmw1ozgTVpMWUQXksfeDJmc
6zkKLL4lXuUBCkS0cT3UQ4LvIOk17oa6IIUPP/C1PLjgu40TbaMk1rl0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDRqeb8gSmHPq3itY37KBRYv8+3MB8GA1UdIwQY
MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt
YTY3MTkxNWVlOTlhLzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh
LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbynTCPTG
ZDR8qN+qnWC/nzIYVswhcD4KwYDGfM3Rz7mrszbf9kjkiNTjhh3f1NOI1qvHNUZ6
8rOoTULGZG7nZpRTE1YY48YJfTyOx/SjlCH75+VI/1JpQR03e173Ev4blXUGGOCb
ORj52EQNdhxs3ToWKwsR1xaXtKiuJICNpmgq1kj5gnICNuc2Zl6/4hfzp/jOXTA9
m105zUWEFenRQhQJOtLYPmiawwST/VKrs5CXZEAiYW3hN2U9AkwBa7uOgDZCifWS
TatKaKE03KRc3uHm5Nf002UN+4px8avaInZ3WkMcUK2ct7RO63JtOejLnFt9Y/CX
Vd44YFytLsiyyg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:27:46 2026 by rpki-client