Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: SJPTrOJCPtAtaGzg80Z5t8pkwSF2fv4j0aQKV16xJsU=
Subject key identifier: E8:96:EC:6C:AF:4F:01:BF:F7:23:8C:7E:E5:54:8D:1F:6C:CD:59:4D
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019E1E6C88A6596FB74D866B60CCFD5F4239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0B41
Signing time: Tue 12 May 2026 23:01:29 +0000
Manifest this update: Tue 12 May 2026 23:01:29 +0000
Manifest next update: Wed 13 May 2026 23:01:29 +0000
Files and hashes: 1: JlA25F-M7KvAsSDseKudSFRF3HA.roa (hash: gES4kDR6mhGPpQfnhqsx3vEvMQVGKlNZIuooaU01hCo=)
2: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
3: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: FQjOnj6htBLZ9BLywpVOFM5RpLbyuJNMtXcchn8x+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:88:a6:59:6f:b7:4d:86:6b:60:cc:fd:5f:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: May 12 23:01:29 2026 GMT
Not After : May 13 23:01:29 2026 GMT
Subject: CN=e896ec6caf4f01bff7238c7ee5548d1f6ccd594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:65:db:41:19:81:ef:6e:55:af:3a:08:80:
50:a0:5c:c9:95:96:e1:90:ae:26:08:77:bc:dc:cc:
57:30:21:30:5a:d3:86:02:ef:11:a4:91:1f:fb:fd:
87:b7:3f:1d:d6:5c:68:8f:60:1b:81:46:f1:c9:95:
41:3a:98:23:5a:6f:59:15:9d:a9:8c:31:f7:4b:6a:
86:d5:e8:90:7c:ca:e2:80:a7:84:68:eb:37:09:03:
50:aa:bf:90:0b:3e:00:aa:ae:eb:ff:5c:e4:88:ed:
24:52:a9:0a:1f:26:55:8e:3a:7e:cf:56:cc:4a:63:
c8:e1:a5:8c:c3:32:e2:3c:e1:a7:b9:28:33:ce:09:
2d:11:9f:d3:93:6b:fd:12:c3:a3:46:83:f5:de:cc:
05:d6:62:24:b5:9d:f5:09:71:85:62:bb:50:2c:e8:
ab:29:b2:1d:1a:d2:84:89:db:3b:be:dd:13:d9:d1:
b2:08:a8:12:82:81:83:68:25:0c:15:5d:3a:de:46:
9c:a1:a2:d4:85:39:44:76:cd:87:f0:f8:20:a7:16:
f1:ff:27:d4:1e:31:57:38:4b:b9:fb:9f:31:4b:af:
60:10:b9:8c:91:cb:aa:60:63:ca:dd:22:0c:09:d8:
89:d7:9a:d0:0d:0a:ff:c6:54:37:48:05:7a:23:39:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:EC:6C:AF:4F:01:BF:F7:23:8C:7E:E5:54:8D:1F:6C:CD:59:4D
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7b:52:fa:06:84:35:60:8c:80:f0:44:b0:8e:dd:8c:b7:33:
9b:6e:f7:52:9f:94:76:d1:0b:e2:d9:b2:da:3e:e5:b3:96:46:
41:e4:19:61:15:8d:db:ef:b2:ba:6b:8a:4f:cc:2b:46:4b:7c:
28:1b:c9:38:47:b0:a9:d6:09:e8:09:6f:14:2b:4d:91:b4:0f:
90:eb:50:a2:97:4c:c9:14:49:e4:07:88:9f:21:b0:3c:e4:62:
7b:52:f6:6e:fd:f0:bf:05:85:8c:24:f7:3f:f5:9c:f2:76:c6:
54:7e:b8:49:da:26:bf:fe:07:f6:c9:55:b8:0b:ee:cb:59:6f:
5f:0e:0d:cf:72:f0:e6:4f:36:0a:35:8b:22:e9:e6:97:f8:3c:
9d:15:3e:2e:9e:15:d4:16:58:4e:31:06:5c:f6:aa:a9:4f:d9:
b7:49:0d:2c:f6:a1:a8:2a:83:bf:13:a3:1a:24:5c:a9:0c:1f:
f0:69:83:3e:3b:3f:bd:d7:3b:75:c5:a1:d0:be:4f:9f:db:10:
99:88:e2:f8:b8:ea:33:50:95:d9:f3:eb:fb:ef:08:8d:1a:5a:
46:75:63:9e:ba:80:79:b7:62:6d:52:b8:ff:80:cb:36:74:5b:
21:b1:f9:59:06:90:2b:59:89:06:71:79:35:1a:e6:3e:96:42:
35:8c:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:15 2026 by rpki-client