Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: rz17BjWuityHe4v9xeExF/JJOMpMselA08Szu3RXNt4=
Subject key identifier: 46:CD:89:F0:8B:39:7D:23:B1:FF:76:60:1E:58:50:C9:29:00:A3:70
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019D2816BD49614484FC26FEBB3430F7C8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 1184
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: H+bXEIh24vlq481VMUHrZMhWAZbKRW+/liBBsh5388w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bd:49:61:44:84:fc:26:fe:bb:34:30:f7:c8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=46cd89f08b397d23b1ff76601e5850c92900a370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:35:b7:81:02:70:ac:6b:81:67:96:e3:82:
46:21:17:da:e7:49:c6:bb:b7:dd:3d:09:df:8f:b4:
1f:6b:e9:cd:e7:e3:77:18:1e:35:c6:79:2c:4a:9f:
5f:71:c5:12:a8:29:9e:12:4e:2c:a0:7e:4e:15:42:
05:ce:b3:e5:4f:d0:52:f6:70:68:bf:87:7f:e7:b2:
3e:c6:cf:19:79:ca:b2:fc:71:0c:ea:ec:33:0d:61:
5c:86:48:97:fa:f4:91:c9:e3:78:c3:23:70:2f:47:
af:0f:47:ef:b9:37:82:05:9a:20:06:01:a7:13:29:
9a:58:55:e6:de:a7:f1:68:62:f6:27:e8:e2:48:ee:
99:07:81:7a:26:5f:a4:6c:c3:38:ff:d1:eb:b6:cf:
50:d2:9a:f4:65:ca:85:d3:fb:2b:12:74:13:a4:72:
9c:6f:91:46:71:05:bf:2c:b4:43:55:9f:b9:2a:21:
0c:19:4c:75:4d:ef:23:4c:d3:f8:c9:bb:64:70:69:
df:26:f1:23:c5:8c:06:dd:dd:89:fa:46:bb:13:48:
7b:4a:cd:61:5d:e0:70:29:aa:aa:6b:76:b4:0d:c7:
bc:dd:05:f5:0d:54:cf:7b:81:1f:16:b6:78:bc:2a:
12:6b:90:0c:e1:6f:6d:40:ba:73:cb:36:7e:67:f6:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:89:F0:8B:39:7D:23:B1:FF:76:60:1E:58:50:C9:29:00:A3:70
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4e:71:03:b9:bb:23:53:d9:55:f3:d2:35:cf:19:47:07:ae:
04:bb:a6:8e:2a:f1:b6:7b:a9:c8:ff:6c:c7:6e:d2:e4:08:c7:
2d:3d:f4:5a:cf:a0:48:17:15:e7:18:3f:86:24:dd:fc:47:1e:
c1:52:ee:65:88:56:cf:52:c5:0a:c0:3a:14:cf:af:eb:4b:36:
83:72:94:87:3a:ee:04:47:b7:02:2c:71:a2:84:ae:f0:9e:30:
25:e6:61:23:a4:a6:11:0b:6f:cb:86:9d:f8:33:c4:39:6c:54:
bf:3e:69:a7:6a:40:1d:f9:23:06:5d:94:0a:84:47:ef:b1:46:
d9:d9:0a:34:ed:26:fc:ac:2a:45:a1:9f:38:f8:9c:a8:08:b2:
15:6e:c7:c4:af:79:94:6f:86:26:4f:30:44:09:f3:03:9e:73:
ac:22:bf:9d:10:a0:16:53:c5:59:c5:4d:a7:2e:0d:90:37:c6:
a7:d3:f9:7e:9e:79:a4:d8:6e:34:fd:e2:5e:76:45:81:90:77:
6c:45:89:9b:97:a5:85:81:e1:2d:a3:81:67:85:ea:c6:b0:f5:
39:8a:53:80:50:43:a6:68:2c:e6:01:16:30:16:dd:72:44:b9:
6c:60:5e:d3:0f:fc:2e:53:89:d5:31:19:0a:71:24:47:79:39:
a5:f9:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:54 2026 by rpki-client