Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: nCTEm123QPVFhqcIX8gn3V9HqltgZW0+1RSX8KDlPCU=
Subject key identifier: 6B:36:4F:C0:61:12:CB:0C:2E:40:6A:27:E3:73:8E:2F:C7:51:87:43
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019D26286233A92CF33A3FAA1007745F8D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0AC0
Signing time: Wed 25 Mar 2026 18:01:13 +0000
Manifest this update: Wed 25 Mar 2026 18:01:13 +0000
Manifest next update: Thu 26 Mar 2026 18:01:13 +0000
Files and hashes: 1: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: AEftK17tOfVah9nwbhLSJasXjz5eqQ3HYU66E5r/SPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:62:33:a9:2c:f3:3a:3f:aa:10:07:74:5f:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Mar 25 18:01:13 2026 GMT
Not After : Mar 26 18:01:13 2026 GMT
Subject: CN=6b364fc06112cb0c2e406a27e3738e2fc7518743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:6d:48:78:0b:4d:40:1e:9f:7b:44:6f:d5:
66:51:aa:3c:02:8b:95:d8:75:05:ad:25:63:b0:92:
7a:c7:e7:1f:7a:55:a7:3c:6b:6a:2b:42:8f:5f:f1:
b7:bc:53:dc:77:3c:33:9e:0a:2e:54:dd:56:33:c1:
77:a8:45:a7:fa:ad:2f:eb:ae:f4:8c:b8:21:71:4e:
1a:1f:8a:90:1f:59:8c:23:35:e2:9b:c0:00:c2:7e:
e2:d2:42:71:9e:ab:22:78:1c:f4:35:69:93:63:36:
d4:30:5a:b9:8e:85:7e:a8:b1:77:24:49:7e:2c:46:
15:02:95:6b:e8:d2:6b:da:9e:f7:0f:e2:13:c0:61:
59:26:68:02:54:31:a3:a8:16:fb:12:56:9e:40:16:
41:17:92:db:00:a1:6d:57:85:0a:bb:5e:66:73:57:
dc:ff:c6:02:4e:52:f7:bb:6d:1e:22:29:11:17:c0:
06:98:17:73:64:73:8c:ce:66:c8:80:d3:fe:4c:3c:
c2:03:1f:0a:a7:30:2f:59:02:a1:5a:a4:c4:6a:55:
ae:31:5c:87:9d:3f:91:04:8c:de:48:6b:1a:08:a4:
ec:de:5c:46:d5:00:1c:d6:15:33:e7:3f:cf:a4:b3:
0a:fa:8f:7e:d6:38:62:9f:8d:f2:55:2e:dc:24:e6:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:36:4F:C0:61:12:CB:0C:2E:40:6A:27:E3:73:8E:2F:C7:51:87:43
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c9:cc:db:61:54:be:96:fe:5e:ee:79:0b:1f:f5:ba:a0:a8:
52:6d:a3:49:be:40:09:16:cf:a7:52:b9:ad:a9:4e:22:e9:51:
64:95:db:e7:a9:4b:4d:d8:30:2f:1c:91:17:d9:64:43:93:64:
c5:de:d1:c5:64:85:d0:87:71:16:12:04:1c:01:56:d0:30:af:
89:4c:66:d2:55:e8:69:8b:86:26:50:e4:79:26:eb:36:7b:eb:
bc:bb:07:ce:e8:a2:67:12:e8:c7:65:09:e2:ac:c4:69:da:d8:
47:3c:35:f7:9e:56:e9:80:50:52:dd:24:76:44:a8:97:0c:81:
c2:a3:98:ea:ea:e5:9b:f6:7f:67:1c:4d:0b:dc:e0:16:2c:fb:
ba:fd:e7:54:bd:7a:e2:94:0b:45:84:ca:fd:a6:db:a4:20:46:
e5:9c:8c:49:70:66:62:64:94:8d:08:f6:7b:bc:ee:5b:7b:81:
91:4c:b6:b7:82:74:36:50:1c:f0:f4:2e:ee:5d:79:14:6f:1f:
ba:37:9c:92:cb:e0:51:28:2e:31:05:e3:e4:96:7c:0e:63:39:
af:02:1b:04:2d:8e:c9:6c:0b:8d:d5:a7:7f:d3:a6:b0:b3:5c:
d3:94:f1:73:34:9d:48:10:72:48:f2:93:ec:ff:87:e5:23:48:
58:4a:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:58 2026 by rpki-client