Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: K+GmNBN5m4IMLP1LCX/M/1Rw12TcApzjcVOZZ4UerQA=
Subject key identifier: 2B:E3:A4:03:6B:EA:FE:39:BB:ED:EF:11:51:A1:46:5D:B9:F1:26:93
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019F927FA57D39237112B6CE14103E04B9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 0799
Signing time: Fri 24 Jul 2026 05:01:06 +0000
Manifest this update: Fri 24 Jul 2026 05:01:06 +0000
Manifest next update: Sat 25 Jul 2026 05:01:06 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: ctGKR3z7UEfBWXlC7YIiiK0NJuLVuX7K+jE38vpbZK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:a5:7d:39:23:71:12:b6:ce:14:10:3e:04:b9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Jul 24 05:01:06 2026 GMT
Not After : Jul 25 05:01:06 2026 GMT
Subject: CN=2be3a4036beafe39bbedef1151a1465db9f12693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:9f:c0:7a:44:a4:f7:4c:f2:f4:1a:51:6c:
e8:44:69:a4:d2:8d:3f:b4:05:8c:0c:31:28:20:da:
71:ef:b4:83:f7:e2:96:0d:af:7a:af:36:75:f8:1a:
4a:72:5f:18:0c:4b:ac:95:8d:21:2a:a1:d4:79:19:
e4:95:22:c3:38:f2:7b:bb:ce:8b:78:bf:f6:6f:c8:
fe:18:e6:ff:f4:2b:92:84:fe:57:71:b6:a4:b3:84:
0f:72:99:ee:27:52:dd:7c:9c:c4:94:0e:d6:94:5e:
3e:c5:db:88:9f:e0:ef:00:34:ea:25:0c:40:95:98:
33:80:55:7b:a6:3d:1b:32:05:71:83:b5:5b:e9:ec:
60:32:1a:db:65:5e:f1:45:1a:15:a9:45:ce:b2:e8:
7a:b8:f2:c8:00:53:45:bf:f6:be:9a:80:a3:d9:af:
07:60:fe:0b:b1:26:5d:21:1c:59:36:9f:f5:d9:3c:
84:d0:3d:65:6b:83:7f:42:38:aa:1d:b1:e7:ba:47:
f8:7d:4a:36:bf:4f:94:0e:ce:60:5b:0f:ee:c5:4c:
99:ff:2e:d9:7d:a4:e4:bb:24:20:de:49:82:97:e2:
49:43:14:33:53:f1:dd:5a:d5:05:88:11:25:eb:48:
96:9f:35:57:8c:bb:41:a5:ea:04:8e:d5:ac:76:ba:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:A4:03:6B:EA:FE:39:BB:ED:EF:11:51:A1:46:5D:B9:F1:26:93
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:95:6c:74:0f:26:0b:6e:12:e7:50:5d:43:99:f2:02:1c:15:
53:1b:0a:c3:1f:f2:81:c5:33:e0:21:24:b8:a0:62:65:4c:37:
d0:f2:cd:0b:0b:92:93:63:ab:94:22:d2:b9:64:8b:77:f0:4c:
23:24:e5:ad:03:f1:07:1a:7f:a6:77:3c:aa:a1:98:c6:a1:71:
b5:61:26:14:fc:00:ad:84:e9:2d:ba:bb:b7:72:32:6f:b1:f7:
8a:ea:21:8d:03:65:39:df:3c:29:b6:87:4a:74:33:23:c4:ec:
1f:ed:8a:56:c2:fc:06:db:1d:1e:70:5d:ba:f5:52:5f:2f:ce:
93:9e:38:95:4c:8a:d0:c8:09:2d:fa:de:16:17:15:dd:a9:73:
85:be:28:63:a9:78:f9:9e:57:03:3b:0f:d0:38:19:ee:0b:15:
aa:95:83:f6:2a:af:09:ae:19:37:40:e5:52:fa:79:e6:e6:52:
60:46:48:af:65:1f:bb:88:92:ce:d5:70:33:5b:32:af:86:55:
ea:a5:b7:eb:2d:0f:74:74:8e:ba:13:23:63:99:70:f3:6d:59:
a1:1f:de:62:5d:4d:81:39:41:bb:5f:02:fe:70:39:3f:a4:be:
71:3d:bd:6a:65:76:f0:e4:72:30:2f:c3:c6:01:65:06:de:93:
59:23:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:41 2026 by rpki-client