Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: Enk/9QUzm64dg5AHE998x/wkHtxuU8OsS3SvzOsqlCI=
Subject key identifier: 34:28:B5:6F:CB:EA:93:74:A4:A5:03:DD:23:C5:74:AC:DD:A5:77:FC
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019D265F40012C0122F21ACB3FF4514DE533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 1307
Signing time: Wed 25 Mar 2026 19:01:09 +0000
Manifest this update: Wed 25 Mar 2026 19:01:09 +0000
Manifest next update: Thu 26 Mar 2026 19:01:09 +0000
Files and hashes: 1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: JW0gMLRfDjfqyVfZoNt4UeE1qzMDdiy+7NnVipuAvhQ=)
2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=)
3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:40:01:2c:01:22:f2:1a:cb:3f:f4:51:4d:e5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Mar 25 19:01:09 2026 GMT
Not After : Mar 26 19:01:09 2026 GMT
Subject: CN=3428b56fcbea9374a4a503dd23c574acdda577fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:0e:8d:af:53:58:20:de:a2:e3:5a:8c:c5:
31:4d:57:d0:5b:ef:23:be:cb:0b:7c:a5:88:fd:44:
b6:cc:1d:2d:ef:a0:2e:9e:1b:c4:86:47:4a:82:c0:
6c:26:5c:44:1e:01:c5:47:64:28:a5:b9:34:2c:c8:
2d:56:19:48:75:76:f1:13:1e:55:3c:9a:10:4d:31:
80:67:71:88:07:56:41:0f:ea:3e:e4:13:b9:11:77:
d5:ca:f8:7f:9d:94:38:e9:3f:43:66:47:18:6d:f1:
1c:d1:64:c8:b0:b9:c9:bf:9c:c9:6a:98:cf:2d:73:
26:03:33:f5:2e:18:45:ae:32:00:8c:e9:bd:a0:d1:
2a:fa:85:2b:51:45:31:d5:52:26:6b:e9:fe:8e:85:
e8:c4:95:46:54:c1:ea:cb:f5:27:ba:33:59:db:0a:
06:1b:8e:f7:4b:78:c4:a6:51:63:a7:39:75:ee:33:
fc:12:8b:42:40:1e:70:f7:3e:69:51:01:78:78:db:
b6:3a:7c:68:10:21:d4:6a:2b:7b:0d:98:e6:91:36:
59:06:a8:02:ed:67:3c:47:e9:7a:fa:14:24:4c:54:
3d:ca:2f:67:37:95:a5:23:79:5e:f0:9f:d9:dc:c6:
ff:ae:bf:98:43:93:8e:39:6a:d2:07:55:dc:dd:d6:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:B5:6F:CB:EA:93:74:A4:A5:03:DD:23:C5:74:AC:DD:A5:77:FC
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7b:bd:50:64:41:65:2b:f1:10:22:93:75:2a:12:cb:d2:8b:
cc:5e:eb:82:c4:0a:cd:35:b4:0f:c0:96:7c:86:97:3c:7f:1e:
19:cb:16:6e:3a:41:2f:1d:7a:eb:fc:6d:7c:d6:51:6a:5f:01:
97:f1:a4:8f:9f:33:89:b3:2a:33:f8:5a:43:12:f7:12:2f:84:
31:00:8d:51:be:28:e4:52:e1:c3:23:ba:3e:70:a0:3b:d1:18:
db:1e:3c:98:d2:62:b7:80:c4:6d:c8:5f:52:7b:fb:5e:22:7d:
06:ce:74:f0:e4:03:87:74:85:00:1d:26:f7:11:6c:ac:63:b9:
6d:10:7f:60:e0:c6:88:1e:18:6f:04:56:e4:6e:3b:48:90:35:
e5:ee:4c:4d:f1:86:c5:b9:3e:ce:3b:7b:9e:99:3e:e9:7a:80:
ec:b1:d3:1e:f0:54:53:c5:d2:5f:c3:8b:1d:1d:aa:24:f7:1b:
47:08:a3:2b:70:c7:51:6c:d3:43:58:7e:a9:bb:b8:da:da:5d:
e3:84:b9:2d:6e:a2:07:c8:82:67:eb:b1:43:f8:09:ae:9f:01:
f4:c2:e7:f6:78:1a:54:df:f5:b8:42:39:26:dd:26:60:c6:c6:
2f:e7:c7:4c:95:df:c6:44:03:f7:75:76:d8:79:de:e2:42:6d:
dd:73:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:58 2026 by rpki-client