
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
File: wA_3yZHBXTi_3_s648uYg1ZSnsI.mft (raw, json)
Hash identifier: 2AlqXGSwgXIdhZ6Bv1mSXKAaLjwl1Fv11toAUY86sCQ=
Subject key identifier: 4A:37:38:34:4A:26:D3:0D:EB:5F:8C:41:07:35:4B:9E:C7:8B:40:92
Authority key identifier: C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
Certificate issuer: /CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Certificate serial: 01A100912428E4677C28A485B5420A25552B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
Manifest number: D4
Signing time: Sat 03 Oct 2026 07:01:14 +0000
Manifest this update: Sat 03 Oct 2026 07:01:14 +0000
Manifest next update: Sun 04 Oct 2026 07:01:14 +0000
Files and hashes: 1: tJdEpKTyQFiB6etKYnTD5TRM42I.roa (hash: fkYiQBu5Trdut7tZ/7hqit0Set+zAtJH4HGx3n50MEc=)
2: wA_3yZHBXTi_3_s648uYg1ZSnsI.crl (hash: WIdlG1r4t9wMe1dsFSJKZAO8r/IjXqXDwzpjNTvsT+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:91:24:28:e4:67:7c:28:a4:85:b5:42:0a:25:55:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Validity
Not Before: Oct 3 07:01:14 2026 GMT
Not After : Oct 4 07:01:14 2026 GMT
Subject: CN=4a3738344a26d30deb5f8c4107354b9ec78b4092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:29:ca:c2:c7:f5:86:43:b1:53:78:8e:fe:
16:c0:df:36:f4:09:b9:db:10:41:6a:44:e3:12:77:
27:11:09:da:a7:61:1a:42:bb:bf:e2:53:69:0d:3a:
a6:88:b3:25:9c:69:0b:55:29:83:4f:34:c6:3b:d1:
b5:ab:88:c4:31:34:18:e3:e3:d7:55:18:84:28:4c:
8f:94:16:d1:85:74:c8:ba:fd:a0:18:6e:00:55:10:
44:05:58:46:d6:07:27:b3:da:60:a1:3d:54:12:4d:
33:0d:b1:d7:15:fa:e3:f0:91:08:e1:c5:16:49:4d:
71:b6:64:b2:e7:33:53:09:44:9b:0b:1f:50:4e:4d:
75:fe:03:e2:f5:f3:f8:55:9d:44:bd:af:97:2a:9d:
02:58:eb:6a:f4:57:25:b1:ea:dc:21:60:a4:6a:97:
8d:24:c3:fd:0f:35:3e:0c:0a:0f:66:67:89:b5:1c:
aa:56:27:95:44:ad:03:dd:de:91:e4:58:5d:93:66:
44:99:0b:84:fc:63:37:c3:e2:3d:7e:19:85:2b:b2:
df:63:f4:08:11:fd:6c:17:c4:1d:4d:bf:93:9e:9e:
8c:b0:31:fa:05:34:7a:b2:9a:7b:6c:f2:dc:4f:23:
f3:e5:e0:13:97:5e:41:c3:ab:2a:cc:5f:08:df:cf:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:38:34:4A:26:D3:0D:EB:5F:8C:41:07:35:4B:9E:C7:8B:40:92
X509v3 Authority Key Identifier:
keyid:C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:c7:5e:6a:63:e0:25:4b:17:2d:09:b2:e1:c6:9f:c2:fb:
d0:d2:d9:bb:7f:2b:6b:4e:19:83:50:77:e6:76:6d:b4:6f:49:
8f:b9:ea:4e:c1:e9:12:c2:dc:2b:61:04:8c:d5:45:db:33:28:
a5:d9:9b:ad:a1:a4:c2:ce:0f:0b:85:dd:c0:be:d0:d3:f4:15:
2e:92:23:38:7e:68:bd:45:f0:09:74:a8:3c:50:5f:f4:26:8d:
d2:76:55:f0:6c:b2:b4:26:8a:63:41:a8:9c:91:33:9f:7b:63:
27:05:cd:d6:b0:76:dc:b3:c9:d8:23:ed:fe:14:49:9f:16:7b:
9b:f7:94:08:d4:dd:82:36:ee:f5:b5:a7:45:71:d8:3c:f0:73:
5b:f3:49:e2:ea:cf:69:84:e3:06:fe:63:01:a3:d3:ba:ff:72:
e7:19:d2:42:1c:21:70:fa:96:12:e2:81:7b:da:28:20:58:dc:
15:29:21:5d:a4:8b:0b:b1:97:49:cd:2e:c6:1d:68:64:12:40:
03:d1:80:52:0e:f4:3b:35:26:45:35:08:5a:36:14:e9:c4:7c:
d7:f3:ac:d1:10:aa:a3:78:b6:48:33:5b:27:23:44:5a:9b:24:
5a:7d:a2:13:8e:1c:3a:c6:1f:d5:9a:13:1c:bb:07:71:af:0c:
ce:df:e2:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAkSQo5Gd8KKSFtUIKJVUrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGZmN2M5OTFjMTVkMzhiZmRmZmIzYWUzY2I5ODgzNTY1
MjllYzIwHhcNMjYxMDAzMDcwMTE0WhcNMjYxMDA0MDcwMTE0WjAzMTEwLwYDVQQD
Eyg0YTM3MzgzNDRhMjZkMzBkZWI1ZjhjNDEwNzM1NGI5ZWM3OGI0MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/QpysLH9YZDsVN4jv4WwN829Am5
2xBBakTjEncnEQnap2EaQru/4lNpDTqmiLMlnGkLVSmDTzTGO9G1q4jEMTQY4+PX
VRiEKEyPlBbRhXTIuv2gGG4AVRBEBVhG1gcns9pgoT1UEk0zDbHXFfrj8JEI4cUW
SU1xtmSy5zNTCUSbCx9QTk11/gPi9fP4VZ1Eva+XKp0CWOtq9FclsercIWCkapeN
JMP9DzU+DAoPZmeJtRyqVieVRK0D3d6R5Fhdk2ZEmQuE/GM3w+I9fhmFK7LfY/QI
Ef1sF8QdTb+Tnp6MsDH6BTR6spp7bPLcTyPz5eATl15Bw6sqzF8I388VnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo3ODRKJtMN61+MQQc1S57Hi0CSMB8GA1UdIwQY
MBaAFMAP98mRwV04v9/7OuPLmINWUp7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FfM3laSEJYVGlfM19zNjQ4dVlnMVpTbnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMjlhMGMtMGU2YS00YWMyLTk1Mzgt
YWZiMDI1Njc2NTA1LzEvd0FfM3laSEJYVGlfM19zNjQ4dVlnMVpTbnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wMjlhMGMtMGU2YS00YWMyLTk1MzgtYWZiMDI1Njc2NTA1
LzEvd0FfM3laSEJYVGlfM19zNjQ4dVlnMVpTbnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRrHXmpj
4CVLFy0JsuHGn8L70NLZu38ra04Zg1B35nZttG9Jj7nqTsHpEsLcK2EEjNVF2zMo
pdmbraGkws4PC4XdwL7Q0/QVLpIjOH5ovUXwCXSoPFBf9CaN0nZV8GyytCaKY0Go
nJEzn3tjJwXN1rB23LPJ2CPt/hRJnxZ7m/eUCNTdgjbu9bWnRXHYPPBzW/NJ4urP
aYTjBv5jAaPTuv9y5xnSQhwhcPqWEuKBe9ooIFjcFSkhXaSLC7GXSc0uxh1oZBJA
A9GAUg70OzUmRTUIWjYU6cR81/Os0RCqo3i2SDNbJyNEWpskWn2iE44cOsYf1ZoT
HLsHca8Mzt/i4A==
-----END CERTIFICATE-----
Generated at Sat Oct 3 17:38:45 2026 by rpki-client