Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: 5IBiJTjIg/9YRaFNP0y4Rv/SZmvSdUFLYc/bYbcMZqA=
Subject key identifier: C6:C2:DB:31:EB:B2:D4:1F:D9:BB:A1:BB:A0:3A:FB:85:91:E6:2E:E5
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 01A0F18B944439E586C537BDE87DEABCD4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 137A
Signing time: Wed 30 Sep 2026 09:00:51 +0000
Manifest this update: Wed 30 Sep 2026 09:00:51 +0000
Manifest next update: Thu 01 Oct 2026 09:00:51 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: ZgCKv2Sr4ys13UCrfTOWjH5sbGBaj8R0iEWQZmOTJ/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:94:44:39:e5:86:c5:37:bd:e8:7d:ea:bc:d4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Sep 30 09:00:51 2026 GMT
Not After : Oct 1 09:00:51 2026 GMT
Subject: CN=c6c2db31ebb2d41fd9bba1bba03afb8591e62ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:75:93:79:4b:3d:42:13:f0:66:35:ba:d4:
b5:dc:60:e2:37:1b:c2:fe:f5:00:1f:c7:3c:71:53:
66:15:3e:d4:97:9c:46:8f:bd:7d:e8:b2:bd:92:19:
3a:b8:7f:50:be:4c:d7:e9:bb:37:37:a9:55:e6:7d:
8a:ab:1a:74:cf:b7:e3:89:3a:f9:36:dd:62:ff:60:
34:29:d0:63:e6:0c:87:28:82:c5:20:38:0b:63:99:
16:7b:92:1d:fe:b9:c5:b5:54:33:d5:02:a6:f0:c7:
97:6c:ab:fe:7e:80:03:cc:06:a5:ae:55:00:d2:bb:
62:d8:3c:25:fb:67:a6:c1:17:dc:a5:ac:97:a1:65:
2d:2c:6d:9b:03:ee:52:bd:45:6b:bd:10:78:e8:2d:
28:5c:f2:c3:22:8b:dd:57:a0:04:f1:df:4d:14:dd:
25:66:0a:58:ae:99:b6:65:cd:6a:d6:01:ee:93:7f:
42:ad:c0:8b:51:34:73:0f:5f:41:53:f5:77:0f:08:
bc:0f:89:e5:16:65:a1:77:4e:94:9e:a3:36:2b:d9:
17:0d:2e:b6:01:ae:77:0f:e3:04:3e:94:38:00:34:
20:18:58:6e:a9:3f:43:63:51:fc:06:48:8f:6c:61:
cd:86:ee:e4:f3:72:a9:08:10:41:ac:c2:1a:b0:39:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:DB:31:EB:B2:D4:1F:D9:BB:A1:BB:A0:3A:FB:85:91:E6:2E:E5
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:77:4a:2b:ec:9c:d2:33:37:3b:ec:b2:67:aa:bb:dc:2e:7f:
b6:77:e3:0b:09:45:c0:a5:8a:7a:37:0a:1a:fa:00:33:bc:18:
61:31:ce:71:93:30:57:95:e6:0f:6f:5d:10:e4:05:9f:14:f7:
f7:71:f1:95:a0:c6:50:24:f1:98:87:1e:f8:5b:60:32:ad:a3:
f3:78:02:04:b0:f6:17:ef:68:37:9c:b7:ec:e6:7d:83:9b:ea:
2f:f7:b1:07:b9:90:62:4c:91:ea:88:77:ff:39:f2:b9:26:37:
89:4b:62:15:fe:72:7a:67:95:ae:0c:68:f1:1a:8d:d1:eb:e9:
5b:b6:08:d0:9d:83:79:3b:4b:20:46:88:2f:7e:55:f7:e5:90:
c2:f6:19:0a:a9:df:4d:8e:d0:0f:66:6b:cd:ba:92:74:a4:e0:
ce:6d:4b:9a:8d:d1:2f:ee:78:b6:81:8b:7a:6d:6d:ce:9f:10:
6a:70:08:cb:1a:7a:0b:54:49:d2:49:e8:af:ca:a6:0a:54:c1:
f3:3b:4c:9c:1c:72:9c:f4:7c:b8:9b:02:7f:08:43:47:5b:2a:
a4:ab:21:42:3c:fc:fe:27:7a:51:be:29:ed:ff:a3:a1:d4:86:
a4:42:3d:e7:5d:84:e2:a3:53:ea:6a:dd:fe:c7:c2:94:4f:1c:
2b:32:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:38:45 2026 by rpki-client