Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: 0wqluFgtXpAK4b1TV+SktgWwQxlRbZBjN5ZKLETOoaE=
Subject key identifier: F8:F0:7B:9C:49:3E:BC:2A:BE:19:3C:2F:1C:1E:2A:CF:80:A2:E5:85
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019FAB9A5CDDDC5104F339420D4B6FD46C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 07A6
Signing time: Wed 29 Jul 2026 02:00:47 +0000
Manifest this update: Wed 29 Jul 2026 02:00:47 +0000
Manifest next update: Thu 30 Jul 2026 02:00:47 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: N57MVQ0XAIWS0z8Ia8HbVTfQjI9f3q/3+om+vg95LlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:5c:dd:dc:51:04:f3:39:42:0d:4b:6f:d4:6c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Jul 29 02:00:47 2026 GMT
Not After : Jul 30 02:00:47 2026 GMT
Subject: CN=f8f07b9c493ebc2abe193c2f1c1e2acf80a2e585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:d5:a5:f4:c2:be:f6:ac:82:20:e7:58:29:
2e:20:98:c2:e2:a5:1c:5b:e4:26:e8:42:37:9c:69:
88:66:90:13:12:af:c4:ba:d1:2f:f0:a9:47:12:9c:
16:81:26:61:82:89:48:bd:02:ca:18:13:46:59:95:
ce:52:f7:c8:d8:c8:f9:41:bb:6a:32:65:77:5d:2f:
c5:91:2a:9c:f2:ab:c7:5e:7c:0c:a3:67:41:55:c9:
93:a4:5c:35:01:8d:df:eb:9e:e9:e5:1e:06:5c:05:
bb:8b:07:d4:a8:ea:19:f7:0d:62:87:91:b8:4e:f4:
25:33:00:6a:d2:6f:22:13:da:37:fa:37:7f:70:d0:
b7:95:f1:ac:a5:ce:99:fc:ba:bd:66:12:52:66:01:
64:9e:05:d2:a1:34:1d:94:69:27:a1:9f:82:a4:9f:
29:27:ff:fb:a8:5f:44:77:63:4a:c1:aa:95:65:34:
c1:94:0b:4c:41:64:32:b1:1f:6a:e5:2e:1b:16:08:
a8:1c:e6:31:20:c8:58:e2:20:1e:cb:29:18:07:78:
a4:3d:fa:39:69:bc:67:88:f9:88:45:6d:1b:5d:6f:
c5:f9:41:24:bb:a7:a3:aa:80:93:3b:f7:b7:d2:0d:
1c:e1:8e:5b:5b:4e:53:90:39:71:6a:0f:00:d9:3b:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:7B:9C:49:3E:BC:2A:BE:19:3C:2F:1C:1E:2A:CF:80:A2:E5:85
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b8:87:33:a5:99:05:d7:48:a5:fc:96:13:03:27:22:47:42:
9b:ca:9f:15:61:e2:5f:38:be:66:30:72:77:07:c2:e2:a5:8c:
e3:9a:97:f1:da:2b:f2:b9:5d:b9:20:a4:85:66:9c:83:e6:a2:
00:a3:fc:3c:05:65:5c:b4:7a:03:f5:23:ba:9f:67:e5:98:a6:
ae:12:de:c9:76:85:99:32:8d:19:4e:51:55:4e:88:dc:f3:f3:
40:63:0c:13:64:0a:ca:7d:e3:de:1d:02:af:d9:ee:5a:f1:c3:
e3:1f:d6:38:b4:0f:c9:5e:31:5c:35:f7:90:82:d7:be:db:1b:
01:eb:38:b4:26:cc:80:95:8a:13:67:a8:a5:ff:86:cd:93:72:
36:34:30:85:8f:62:f7:d9:96:2e:1e:1c:49:7f:9a:01:1a:12:
93:e0:69:5c:45:db:02:6e:c7:65:fc:4a:f0:c9:22:3d:34:f6:
f3:3d:15:89:c8:5e:b6:31:a7:f2:31:8d:4f:15:20:65:b8:09:
70:c4:91:7a:43:4c:ab:ff:9e:49:90:45:5f:6b:99:56:ca:19:
21:bb:15:2f:6b:67:27:56:f7:0a:ff:d8:21:8c:12:e0:4c:82:
94:85:fd:94:1e:3e:9f:d0:34:c2:fa:64:44:58:4d:8a:ef:ab:
9c:ca:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:48 2026 by rpki-client