Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: uRveZLIBMAvPLMK8szPG/+9MjpEOcd+Yk3QKwKNnId8=
Subject key identifier: F7:5B:F2:3D:46:A0:6A:C8:78:61:75:CB:31:B4:BC:39:0A:B7:AE:3F
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019E1DC78585A7C36E35B00B200BFC5C0A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 06D8
Signing time: Tue 12 May 2026 20:01:15 +0000
Manifest this update: Tue 12 May 2026 20:01:15 +0000
Manifest next update: Wed 13 May 2026 20:01:15 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: XB4baFQUV8W2w4fPIGvVDKMbzI2dozfeivokRuvXL90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:85:85:a7:c3:6e:35:b0:0b:20:0b:fc:5c:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: May 12 20:01:15 2026 GMT
Not After : May 13 20:01:15 2026 GMT
Subject: CN=f75bf23d46a06ac8786175cb31b4bc390ab7ae3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:4f:74:6d:45:ff:bb:40:34:c7:ae:c5:0d:
dd:91:11:41:0e:60:16:8b:a1:c6:8c:30:8c:c8:fa:
ee:77:0c:31:7e:b6:ab:fe:46:01:e5:c0:0a:c1:48:
57:52:0d:c1:84:82:cf:64:05:7b:2a:c2:57:44:b3:
77:3d:0c:50:46:6a:48:07:81:97:45:97:d0:e9:ee:
1e:ca:4b:b5:a2:54:4f:8c:7d:01:c8:2a:a4:5f:cf:
8d:1a:2d:98:8b:a3:04:32:45:18:35:85:62:44:61:
29:6f:55:5a:92:a7:23:96:36:e1:5f:86:d1:f9:ee:
b9:4a:4c:81:d7:50:db:ed:5e:b0:3d:a4:40:ea:6e:
0e:29:c0:e8:46:25:c0:15:2a:ce:ae:a2:bf:96:1b:
87:df:26:29:71:20:95:4e:f7:82:b1:78:a2:7b:1f:
2c:03:e2:01:94:e7:30:1b:6e:30:a3:25:be:36:a2:
c8:1b:0c:65:ed:30:ac:89:b4:e2:5c:c4:72:c0:98:
52:59:66:41:1a:5a:f8:dc:d6:e1:ab:ea:0b:77:d0:
99:1c:3f:09:aa:73:65:a0:02:41:8f:5f:63:b8:b3:
6c:cc:d9:e8:08:97:1e:fb:5f:78:02:ef:af:f9:d0:
a1:8b:99:62:ec:08:50:91:28:b1:24:c8:90:e5:89:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:F2:3D:46:A0:6A:C8:78:61:75:CB:31:B4:BC:39:0A:B7:AE:3F
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f9:ea:e1:c9:1d:74:d0:b2:8d:1e:ea:3c:05:c6:da:0e:c6:
fc:21:d2:78:3a:75:ad:dd:c1:a5:5f:f5:21:1b:c9:c9:db:5f:
d7:55:70:8c:bd:ab:87:95:9a:f5:98:69:03:bd:12:27:9c:80:
7a:2a:06:99:a6:01:91:96:f8:f1:00:74:69:f9:50:a4:1a:82:
69:cf:8d:39:1e:bb:33:78:ab:12:f4:5b:b6:f4:4f:f7:aa:c7:
b1:d1:09:11:f3:8a:14:5a:c2:bb:c1:23:16:f3:27:c5:0a:ed:
51:69:5f:e5:0e:40:e7:60:7c:99:e4:67:7d:21:38:3a:b6:58:
b1:18:a8:f4:10:90:64:02:7a:03:26:90:a9:0d:ec:fa:e6:43:
2a:e9:63:5e:df:20:34:0a:1c:d8:0a:a7:74:c3:45:1a:fa:61:
51:76:bf:40:a3:28:65:fd:36:f7:6d:73:de:d3:d7:46:8e:90:
ad:03:e6:84:30:40:73:9f:33:6f:1f:ac:9a:03:3e:b5:6e:9c:
9b:86:55:81:b4:4c:34:6d:60:dd:10:c9:e1:e8:45:86:d0:ee:
1d:a4:35:91:a9:ec:90:38:69:4a:66:6f:18:92:af:8c:dd:b4:
e3:5f:f5:06:ac:fb:bb:20:13:67:67:96:a4:f4:51:99:68:d1:
ed:99:9c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx4WFp8NuNbALIAv8XAqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh
N2IyODgwHhcNMjYwNTEyMjAwMTE1WhcNMjYwNTEzMjAwMTE1WjAzMTEwLwYDVQQD
EyhmNzViZjIzZDQ2YTA2YWM4Nzg2MTc1Y2IzMWI0YmMzOTBhYjdhZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8hPdG1F/7tANMeuxQ3dkRFBDmAW
i6HGjDCMyPrudwwxfrar/kYB5cAKwUhXUg3BhILPZAV7KsJXRLN3PQxQRmpIB4GX
RZfQ6e4eyku1olRPjH0ByCqkX8+NGi2Yi6MEMkUYNYViRGEpb1VakqcjljbhX4bR
+e65SkyB11Db7V6wPaRA6m4OKcDoRiXAFSrOrqK/lhuH3yYpcSCVTveCsXiiex8s
A+IBlOcwG24woyW+NqLIGwxl7TCsibTiXMRywJhSWWZBGlr43Nbhq+oLd9CZHD8J
qnNloAJBj19juLNszNnoCJce+194Au+v+dChi5li7AhQkSixJMiQ5YkgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdb8j1GoGrIeGF1yzG0vDkKt64/MB8GA1UdIwQY
MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It
MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy
LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfnq4ckd
dNCyjR7qPAXG2g7G/CHSeDp1rd3BpV/1IRvJydtf11VwjL2rh5Wa9ZhpA70SJ5yA
eioGmaYBkZb48QB0aflQpBqCac+NOR67M3irEvRbtvRP96rHsdEJEfOKFFrCu8Ej
FvMnxQrtUWlf5Q5A52B8meRnfSE4OrZYsRio9BCQZAJ6AyaQqQ3s+uZDKuljXt8g
NAoc2AqndMNFGvphUXa/QKMoZf02921z3tPXRo6QrQPmhDBAc58zbx+smgM+tW6c
m4ZVgbRMNG1g3RDJ4ehFhtDuHaQ1kanskDhpSmZvGJKvjN2041/1Bqz7uyATZ2eW
pPRRmWjR7Zmcdw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:33:15 2026 by rpki-client