
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File: WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier: 9UmO2OTlDyjIyDXDtUPt9ZqYVbp8Dw7IBaWAyOVlnXE=
Subject key identifier: 22:9E:ED:D0:1C:7E:76:9C:69:50:BB:B2:89:9B:2C:7F:3C:16:9E:F3
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial: 019D27E03CE566943CDCCDAE173DCA66120C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number: 0DAE
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: 2vhUyxqvbM87FhG8VayrS_h4Ehg.roa (hash: YkNXmvC/1KhJtBfuJaW8vYi5YDAGfs1/fQlWkJ7TJpU=)
2: QcPtbvqsOMuV70yR3jYtDijDmuU.roa (hash: 1d2DpCFv9KtW18ls9Gaq6LAHmxDBVtcw2IbhHZ1MgIM=)
3: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: GOqb1iTRVnkcPHYSz6z0fBg3Q/dYLZFjPNfgn1QJ9hY=)
4: bRKnz6AwD1XfyLGZob58d8icW2I.roa (hash: h8iO3jw7vnUn96rCOaCL+fzZYX1R9IrS//wzYnSu/i8=)
5: nbFoGiZrK3Fb5OWjy4HYDx8RqMs.roa (hash: nACQPDtwAyQqYR5SdSIolmQFC3RDWoo+IhA3GV/1VsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3c:e5:66:94:3c:dc:cd:ae:17:3d:ca:66:12:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=229eedd01c7e769c6950bbb2899b2c7f3c169ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:eb:e1:51:05:51:55:c8:e7:d3:bd:9c:25:
a4:42:59:ed:9c:b0:52:bd:ed:70:f6:81:0e:69:09:
bb:c5:f0:08:2d:2c:5d:f4:78:34:62:04:56:bb:a3:
50:5a:ae:74:f1:31:36:d9:4f:74:0e:0a:de:4f:dc:
53:a8:5b:75:de:2a:09:52:c0:ce:45:e0:28:aa:19:
b6:09:3f:ab:e8:a5:eb:1a:d2:81:96:4f:9a:27:27:
ed:53:92:75:c9:a0:e5:29:d3:70:85:4f:c2:ba:cc:
2e:ba:4d:a8:e1:ad:a3:6b:fa:5b:66:a4:84:20:fe:
48:87:ca:1e:59:1a:5b:a9:d0:24:28:0b:cc:e1:85:
53:29:21:37:d4:13:87:9a:ef:12:98:f4:0a:e6:4d:
2f:f2:fd:8a:9f:fd:2b:72:e1:81:cd:45:8b:e4:37:
98:94:69:c2:b2:b6:f4:b5:ac:8d:57:a0:74:c3:e1:
70:8f:97:8d:56:09:b6:dd:c1:d8:bd:a0:47:80:d2:
18:2a:47:39:a3:ea:1e:95:d5:de:34:92:11:c1:6b:
77:6a:a2:fd:7f:cc:22:85:37:63:fe:fc:19:cb:34:
de:e5:41:09:61:28:b3:71:d1:77:8b:bb:5c:d2:b8:
fe:40:c9:62:13:7d:06:09:b9:81:4c:0e:66:77:26:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:ED:D0:1C:7E:76:9C:69:50:BB:B2:89:9B:2C:7F:3C:16:9E:F3
X509v3 Authority Key Identifier:
keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:29:d8:c1:11:80:d8:d0:87:f7:46:52:30:b6:8b:b9:91:94:
79:fb:9e:fc:2a:97:39:62:47:71:a6:ab:2c:ec:9e:98:55:67:
d0:ca:c5:4c:92:3e:c7:f1:c9:9c:62:80:4d:da:3f:7a:b2:83:
04:aa:54:1f:8d:11:54:18:80:b9:2e:fd:8e:19:c5:1f:98:db:
54:44:cc:05:e5:6e:41:dc:ab:56:19:5f:d3:45:a1:33:3e:15:
f7:27:6e:71:66:97:31:85:74:fc:e5:8d:21:6c:73:bd:45:35:
96:a3:e4:e4:50:2a:08:6b:29:ba:6d:c8:05:aa:45:ed:36:2c:
8a:fc:56:d4:31:13:47:5f:af:ff:47:71:22:68:d5:d2:7c:5e:
f7:f9:1f:b9:db:6b:cc:ee:95:6f:9e:35:4b:9d:4b:b0:55:42:
5b:79:2a:f6:23:0b:3d:e8:5e:50:9c:89:90:e2:c9:a5:6b:41:
24:78:78:49:ab:0d:0f:80:f1:d2:db:12:9a:b4:f0:2e:24:ce:
65:cb:76:1a:29:c3:b0:28:28:39:87:2e:67:a4:7d:d5:96:28:
0c:8a:8c:20:0b:e6:58:8e:2b:52:1b:e9:43:db:50:fd:90:52:
a5:7c:b3:ee:e9:8f:57:e2:d5:88:2b:b2:42:35:4c:e4:86:bf:
48:3d:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:48 2026 by rpki-client