Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: O1YIudgT5pGEsl9wjhzMv6HwRR3APN0Ni5oDmv54Cw4=
Subject key identifier: 61:C9:22:EB:42:C2:45:D7:04:CA:D6:0F:BA:B1:0E:3A:9A:E3:0F:ED
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019D9A750500047921D8922A5F1EDC125740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 0694
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: rkEXpbaSaGwu4NNzP2VDQD46RkYNN8BvhiKvVoMGyLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:05:00:04:79:21:d8:92:2a:5f:1e:dc:12:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=61c922eb42c245d704cad60fbab10e3a9ae30fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:b2:78:02:0c:a6:2f:69:8e:34:7f:b6:56:
c9:c0:f5:39:54:e7:ee:ca:fe:30:f4:a3:f3:81:a8:
72:5c:7c:9b:58:b5:0d:1b:35:79:f3:6d:88:76:7f:
8e:34:30:cf:c1:24:f8:a9:5d:95:7b:e6:96:29:1b:
63:3f:03:d7:c0:2e:54:3b:be:bd:50:63:26:da:4d:
7e:90:d5:41:92:e6:23:87:cb:3e:12:60:7f:a7:58:
4f:58:02:a4:04:70:08:62:a9:24:a4:12:ae:9f:7a:
12:7c:1e:dd:ca:5d:e8:d5:75:72:42:6f:33:21:47:
27:43:52:39:46:ef:98:18:89:03:c4:d6:fe:61:e1:
f9:20:92:04:04:9c:7b:e2:a0:22:f6:07:21:d1:06:
a7:cc:c3:31:a5:bf:53:a2:7c:58:24:98:ee:9b:36:
e9:0a:16:7d:f7:ed:24:bb:55:a3:0a:e3:d3:a7:ba:
b3:1d:c7:b4:a4:a4:79:0c:83:41:40:52:4a:3b:ad:
4e:94:81:21:90:9e:ec:53:3b:14:37:2a:63:1f:5c:
42:06:27:c9:81:8c:70:4d:8e:7f:95:2e:bf:b4:be:
72:f2:28:6b:3b:26:db:26:2e:37:a5:e6:54:d7:57:
05:fd:5b:47:4b:50:55:e1:a0:10:50:92:df:ac:90:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:22:EB:42:C2:45:D7:04:CA:D6:0F:BA:B1:0E:3A:9A:E3:0F:ED
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:93:eb:41:a2:5a:85:fb:b3:d3:b1:b6:57:ad:8c:00:c9:2d:
37:d1:b9:ce:bb:41:ac:c6:6f:be:27:62:ed:23:10:09:76:e0:
de:df:cf:24:a8:ad:86:23:01:ce:35:b8:ec:8e:27:53:99:a0:
ba:8f:f9:88:36:c5:44:11:dd:f6:48:38:c0:8f:f7:9b:d8:27:
02:8e:8e:45:ce:c1:1c:62:e8:b8:d9:c4:a4:75:4c:6c:cf:d1:
53:a3:62:a5:4f:d7:46:2b:cb:ab:39:b6:26:24:14:e2:25:31:
38:e1:59:49:fa:0f:e9:93:4b:82:5c:1e:e6:27:3f:f3:49:c6:
d8:5d:16:ac:d9:a7:33:8e:3b:02:12:65:42:2b:cb:e6:79:0b:
93:75:3c:2b:92:bf:f6:be:64:f1:37:49:22:29:83:15:42:40:
16:82:df:98:66:27:d1:99:50:58:ae:bf:55:aa:98:79:a6:9d:
55:10:9c:59:c3:e3:4f:94:9c:9e:aa:24:4d:5e:02:e4:0d:39:
16:1b:35:c9:c0:ad:b6:48:98:8d:d2:9c:6b:60:70:2f:a1:b1:
f3:07:58:1c:85:42:d9:a2:04:2f:8d:0d:09:13:ee:30:0b:18:
3d:ea:d5:ce:84:aa:1b:b0:be:e2:c5:ad:88:da:f2:b1:65:2b:
30:f7:b3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:47 2026 by rpki-client