Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: jjw1Egimyi4ecm/MHi5v9Z2TcWffWfCN5nyTK0c4dhc=
Subject key identifier: 02:30:72:97:40:0C:68:B6:7A:E0:42:EA:CA:35:7B:82:F4:91:91:4F
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019F9135B6899AFA20D85244C716A9C07A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0C01
Signing time: Thu 23 Jul 2026 23:00:44 +0000
Manifest this update: Thu 23 Jul 2026 23:00:44 +0000
Manifest next update: Fri 24 Jul 2026 23:00:44 +0000
Files and hashes: 1: JlA25F-M7KvAsSDseKudSFRF3HA.roa (hash: gES4kDR6mhGPpQfnhqsx3vEvMQVGKlNZIuooaU01hCo=)
2: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
3: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: URUldoKw4hMAJo2Zp1AmC1AwRnd70N1Jx/QuJX5Ks8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:b6:89:9a:fa:20:d8:52:44:c7:16:a9:c0:7a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Jul 23 23:00:44 2026 GMT
Not After : Jul 24 23:00:44 2026 GMT
Subject: CN=02307297400c68b67ae042eaca357b82f491914f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:58:4a:9c:04:74:35:5b:ac:32:11:0b:ff:
7f:81:28:1a:7b:17:8b:a8:cd:6b:04:e7:07:9b:42:
f5:c9:f8:8e:e3:04:cc:f4:74:63:61:e9:1a:a1:83:
6b:14:04:93:e6:71:06:a3:10:7f:20:0d:c0:3c:4d:
33:c9:78:66:26:aa:b7:7a:07:4f:88:e4:97:0d:39:
c3:bf:30:c9:5c:46:2f:39:30:fb:1d:b0:22:97:9a:
17:21:5b:b8:fa:51:3e:0e:76:88:62:b8:f1:59:d3:
0b:ff:17:e1:85:bf:e1:1c:36:d1:d5:6e:2c:ff:b5:
57:ab:74:8f:79:87:f5:16:1a:e5:b8:ea:4a:0b:d1:
66:29:17:5e:42:ad:cb:1d:0b:03:da:7c:0d:ef:5f:
f1:83:5b:a6:a1:a9:23:9f:54:24:4e:66:e8:e8:f6:
27:23:1d:5b:4d:37:28:b9:7f:eb:3d:01:1f:67:b6:
6e:2b:c8:2d:62:6f:18:50:b2:3c:b4:b8:5c:9f:eb:
64:79:fa:17:6b:a4:71:96:68:24:b9:2a:81:82:49:
cb:8b:cc:57:0b:c3:74:22:d3:05:dc:c7:73:94:79:
e2:9d:04:6c:fc:bf:41:30:1b:ad:89:66:d6:52:1a:
db:f1:f1:19:3c:59:88:7a:81:c0:dc:79:4b:97:4d:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:30:72:97:40:0C:68:B6:7A:E0:42:EA:CA:35:7B:82:F4:91:91:4F
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:96:20:7d:7a:8c:f2:9d:6c:93:21:0f:dd:b0:d1:d7:c7:
5d:af:0d:15:62:7a:ca:03:81:5f:35:96:96:ca:19:38:bb:14:
4a:9d:81:9c:7a:c6:95:fd:76:16:0c:95:67:3f:d6:a0:d8:d2:
4d:d3:9c:a0:b4:76:49:26:49:a1:e0:16:eb:33:ac:fb:49:0e:
b6:2a:b7:08:6b:03:64:f1:0a:b5:f2:f8:70:1d:ca:10:bb:df:
d0:74:b2:d0:e0:19:a9:76:a4:c5:2c:bc:22:b5:ea:c7:d7:b9:
33:00:b6:2f:77:ce:b6:8f:19:a9:ba:9b:cd:b1:75:6c:fa:4e:
16:9d:e4:c8:2a:4d:4e:87:02:e3:64:ec:12:91:9c:0c:72:5a:
86:9d:50:b2:6f:f1:75:85:31:00:d8:ba:7d:3a:e8:86:42:c6:
36:b3:dc:9c:ca:be:09:dd:d8:77:3a:f5:1d:3d:d7:3f:22:80:
0f:4e:a6:8d:84:86:c6:5d:a5:4f:51:f4:24:58:4f:57:a5:73:
9b:2f:0b:4c:40:24:41:13:79:f1:bb:f0:cb:d8:2e:56:8a:b1:
12:11:7e:23:04:0d:5b:9e:66:6a:e9:22:c1:cd:f3:5a:2a:fc:
cd:fb:a1:ef:06:51:00:d4:fc:98:e1:11:a0:23:01:45:c3:27:
e9:8d:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:15 2026 by rpki-client