Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: c3oJPnN5LXWw6MSrS1cjDrYj4utORYPDXnTP9doKcfY=
Subject key identifier: DF:99:F1:E7:2C:95:4F:8C:DA:E8:4E:FF:F7:62:64:F8:F5:3F:10:44
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019F93FF98BEBF54CC57E273FF76BFC80604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 12C5
Signing time: Fri 24 Jul 2026 12:00:29 +0000
Manifest this update: Fri 24 Jul 2026 12:00:29 +0000
Manifest next update: Sat 25 Jul 2026 12:00:29 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: dEJHFUm5S0TbqaS53vv7pijOQwkM4SDvnWjwaonVyC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:98:be:bf:54:cc:57:e2:73:ff:76:bf:c8:06:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Jul 24 12:00:29 2026 GMT
Not After : Jul 25 12:00:29 2026 GMT
Subject: CN=df99f1e72c954f8cdae84efff76264f8f53f1044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4c:72:b1:53:de:1f:61:2a:8e:a2:7c:88:02:
d4:ef:d8:99:77:d4:28:7d:83:d9:bb:88:53:94:fb:
27:fa:df:a7:4d:99:8a:87:77:ac:ac:7b:24:c8:9f:
56:65:83:cd:09:42:24:08:a3:c0:45:21:73:17:70:
e1:42:e6:97:aa:d5:f7:93:d7:4b:5b:ea:ff:d2:6e:
86:8e:49:a3:34:e9:2c:bf:03:74:31:70:1f:d8:03:
d7:ba:f8:7b:84:d1:b7:43:14:a9:d3:4a:05:7e:af:
65:0f:77:f1:02:94:59:98:6d:49:73:12:5e:21:6d:
fa:18:99:49:cc:65:b5:fe:27:b5:8e:37:9c:9f:5f:
a2:07:0d:11:63:5b:91:56:8d:17:eb:37:5e:83:54:
8a:ae:78:4d:4e:32:21:4a:1e:f5:72:de:7a:be:b7:
7a:cc:c4:6e:a4:a7:e8:cb:b5:eb:02:6d:74:29:22:
61:28:80:de:c0:fc:85:04:0a:4e:4a:30:32:da:27:
c4:9d:d5:b8:6e:3a:30:b9:20:a8:88:5d:b2:8d:55:
23:37:88:57:e9:9b:33:44:f8:ce:7b:d3:ff:e4:3f:
13:f3:0d:fc:77:a0:52:e0:13:b7:d9:dd:ec:db:81:
e5:45:a2:02:8c:46:9a:ec:fb:26:9c:33:e4:3a:be:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:99:F1:E7:2C:95:4F:8C:DA:E8:4E:FF:F7:62:64:F8:F5:3F:10:44
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f3:ae:6a:65:34:eb:80:c8:b4:a0:d3:f8:98:48:3e:3c:ca:
83:da:09:a1:8d:2c:a9:f3:4e:16:97:fe:a7:24:90:9a:25:70:
83:93:12:58:d2:5d:be:f8:88:f7:fc:0b:5b:c9:a3:39:a7:dd:
a7:67:27:e7:e1:64:0c:fd:59:99:b9:91:5a:44:aa:b2:0a:c4:
78:30:8a:42:0d:e1:36:25:30:07:9a:db:76:91:d2:04:db:2a:
01:21:ee:f4:b3:31:42:ac:8b:9d:5f:f6:b9:3e:e5:b4:a2:2e:
53:07:51:87:0c:23:a4:da:1d:c8:3d:ff:f9:e8:f3:db:62:e0:
47:0b:3b:22:8f:85:5b:b0:26:67:1b:85:d1:48:25:94:fa:ff:
8c:19:57:d9:d2:49:17:da:c6:61:5f:f8:d5:ef:17:16:4a:82:
b6:93:e9:99:24:3b:07:df:da:a1:a7:4d:17:48:71:6b:13:7c:
90:a6:de:05:e2:0f:ee:56:ba:60:98:9a:c8:e6:5e:98:98:1a:
ab:8b:c1:b5:bc:c0:82:97:1d:13:c6:9c:97:d5:96:6e:b6:59:
f2:4e:75:cb:d1:69:b8:b2:3a:1a:5d:52:2d:27:8a:9f:8e:d8:
3b:98:88:0c:9d:8e:95:89:94:64:d2:75:eb:26:b8:c4:8c:67:
9d:77:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:04 2026 by rpki-client