Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: BcUjWpN9knGUrBOfMODExw/UXLnUACdE218T/bcClmM=
Subject key identifier: D1:BF:F1:A1:D4:2B:C8:F9:43:EB:1B:A3:CA:53:DB:A4:53:24:A0:0A
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019D2696624B289E662B26A79370912A60D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 0658
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: oUIyX648i0oePwcTqs4+AAUcg9NzWgbKgAbHthC2DKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:62:4b:28:9e:66:2b:26:a7:93:70:91:2a:60:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=d1bff1a1d42bc8f943eb1ba3ca53dba45324a00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:a0:78:75:a7:ec:af:c5:12:b2:51:f0:34:
d7:67:e4:86:44:46:48:77:45:e1:5c:11:10:0e:16:
7a:b4:34:a3:3f:7f:07:2d:79:ac:1e:4b:ab:e9:cb:
68:32:4e:4e:22:c0:3e:eb:24:d3:e0:36:2b:ce:71:
19:7f:d8:20:74:eb:35:98:3e:75:d2:18:fc:60:f8:
c8:1c:42:36:cc:56:1a:d2:f0:62:24:43:75:74:a8:
6f:8c:33:1f:b0:51:33:df:bb:ec:db:33:3f:4a:34:
32:db:2e:72:7d:3e:25:f0:eb:96:0b:4e:fa:d7:0d:
47:f6:05:b7:29:69:e0:f3:d3:bf:40:84:66:29:b5:
11:c4:83:a4:cf:9b:73:08:10:7f:87:9d:65:bd:a5:
36:8e:6b:e2:01:59:b6:80:ea:56:dd:bb:6f:7b:59:
ed:24:2e:2b:0a:ab:f3:57:fb:98:be:3f:6f:1a:b9:
f8:f3:e5:1e:d8:6c:3a:e8:db:d4:a2:4e:d5:a5:26:
b8:39:90:7d:ef:f4:a0:76:8c:de:d8:38:6c:dd:d3:
ad:d5:e7:09:89:86:d1:8f:d6:b8:44:9b:5a:88:83:
c5:5a:47:f2:2f:ab:d5:d4:42:bd:ff:d0:7b:18:f8:
11:fe:28:d1:f3:51:ce:c8:ad:d3:ec:8a:f4:8c:d5:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BF:F1:A1:D4:2B:C8:F9:43:EB:1B:A3:CA:53:DB:A4:53:24:A0:0A
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b4:0d:2d:a1:50:b3:8d:f6:18:83:fc:fb:91:e4:85:0a:c8:
11:9f:08:36:f2:d3:3c:3e:28:be:83:28:20:0b:46:73:bb:0d:
50:be:23:42:87:1e:59:4f:64:a9:d4:13:18:2e:57:3a:db:b3:
46:c0:00:9e:30:02:87:98:18:83:39:a1:7f:0e:7e:5f:b5:38:
ed:25:33:29:ce:6c:e7:89:26:29:22:bf:f3:48:6b:ff:aa:a3:
9d:ac:8b:d0:32:20:06:b8:2f:0c:d2:09:b9:c8:3f:1a:40:49:
34:f8:ed:a4:15:88:11:fd:95:32:da:30:39:71:e7:16:e3:41:
15:24:63:89:01:79:0c:fc:4a:14:af:05:a8:60:d6:ce:33:45:
b6:32:7b:22:f6:d3:d8:8d:1c:b8:15:cc:ac:00:0e:8b:1c:7a:
a0:4e:a3:1d:96:13:43:85:26:2a:94:9d:ac:78:68:50:d5:de:
10:73:a8:e2:9b:15:56:b2:2f:a1:af:05:b0:06:5a:f9:c2:56:
fc:7c:d1:6d:5d:d7:7e:a7:a0:76:8c:0d:e0:ff:06:ac:95:44:
00:57:1f:40:38:56:aa:79:94:93:00:20:b2:1d:f8:33:9b:17:
28:9c:7e:41:6f:90:6a:d1:6f:8a:8d:3f:48:3c:a7:8b:ad:d9:
23:b4:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:26 2026 by rpki-client