Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: SJY8SWgFwzaa0Rh51zYF/rlnE19h3u3k+Mdg4pwC9AU=
Subject key identifier: 1B:FE:6D:85:DF:80:52:02:5F:80:04:F0:10:3D:4A:59:0B:E2:FA:DE
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 01A0D315175CB7FA75E66731D6C1E115B05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 083F
Signing time: Thu 24 Sep 2026 11:02:49 +0000
Manifest this update: Thu 24 Sep 2026 11:02:49 +0000
Manifest next update: Fri 25 Sep 2026 11:02:49 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: b6uLJ9B+yHl5lw2IIGdPv/2alv/CH6yT1GwD/lo6Zt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:17:5c:b7:fa:75:e6:67:31:d6:c1:e1:15:b0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Sep 24 11:02:49 2026 GMT
Not After : Sep 25 11:02:49 2026 GMT
Subject: CN=1bfe6d85df8052025f8004f0103d4a590be2fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:db:c9:24:c4:69:ed:27:d2:aa:a0:78:db:
10:4f:f7:45:eb:94:be:42:15:7b:34:d6:f1:fe:e2:
7e:37:36:83:bc:35:ff:ac:ea:0e:99:97:62:bb:39:
9b:2a:69:90:6c:1b:70:a1:63:b3:c3:4e:d4:dd:c3:
68:38:af:d1:72:19:d7:48:be:ec:65:33:a0:70:b6:
eb:ce:3b:30:bd:2a:f6:a5:2b:a1:ef:cb:c6:19:99:
1e:3f:81:28:14:c2:6d:82:c7:50:d4:85:fb:a2:99:
1e:36:81:a7:24:17:2e:7f:c4:77:3e:ce:04:84:b1:
7e:b0:25:eb:d5:df:64:3b:72:47:ba:33:39:2f:26:
f0:83:f3:d6:08:3d:64:c4:e9:d4:87:6c:66:c1:55:
c1:02:6e:5b:44:19:7c:37:74:80:32:12:cf:d6:5a:
05:5f:11:28:0e:21:e2:de:2d:e1:29:ab:2e:47:54:
e2:cd:7f:63:92:e4:a6:29:ae:c7:9a:e6:27:f9:78:
19:63:b1:f7:dc:50:b6:d8:78:6e:dd:41:4d:e7:57:
9c:07:08:56:75:68:43:98:69:24:49:e6:9e:a7:fa:
c7:0f:8b:52:b1:08:df:70:9b:58:2d:59:12:7f:37:
8a:61:0d:a3:31:d8:77:ec:81:99:a4:da:22:8b:29:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FE:6D:85:DF:80:52:02:5F:80:04:F0:10:3D:4A:59:0B:E2:FA:DE
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:7d:db:b0:cc:e4:ea:84:e9:4e:81:db:35:00:b4:c5:9f:
f1:c5:26:31:3a:4b:22:5e:88:46:10:f1:b7:ed:79:1c:2d:1c:
3d:c5:80:49:37:39:a3:50:2e:d5:74:56:36:ef:57:bd:91:33:
cb:d7:a1:d0:e8:9a:74:59:4c:c4:15:91:f3:a8:a2:ec:a9:65:
c4:69:15:d5:7b:6f:5c:fd:5a:fc:93:41:66:f5:40:85:49:61:
23:07:d0:bf:bf:68:70:09:f1:e1:28:c6:ae:39:0e:55:21:65:
bc:c7:0b:64:79:89:45:03:2c:0d:17:f3:3d:3a:a1:74:67:c1:
fe:97:95:8e:ba:db:16:bd:ce:73:c4:bb:b7:0e:ca:fd:4d:b8:
70:f9:8a:61:df:19:d5:58:97:46:8f:22:ee:61:c2:2f:b2:82:
a6:ac:34:27:5d:55:0c:6a:9a:3e:d0:69:06:19:23:ae:ef:78:
eb:fc:aa:1a:9e:8b:ee:f2:dd:06:88:c1:25:8f:e0:c2:ab:eb:
70:b8:6a:ce:7d:18:fc:05:9d:3d:e4:bd:47:98:7c:83:4b:93:
65:45:dd:78:fb:1c:72:30:22:10:e2:5b:c9:b7:33:83:8d:65:
4c:49:f7:aa:63:5c:05:26:d3:d7:4c:91:16:f1:e8:b4:27:84:
c5:51:a6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:28:53 2026 by rpki-client