
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: m10u7FPPi/WanO6a1aO29TDIc1CBrTeA2c9fMRFRxAQ=
Subject key identifier: E3:21:CC:0B:25:5C:7A:39:5C:54:99:04:5C:55:92:6A:D8:D7:79:F6
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019CACEB895BAECE3005F50C6233F039C710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 0619
Signing time: Mon 02 Mar 2026 05:00:43 +0000
Manifest this update: Mon 02 Mar 2026 05:00:43 +0000
Manifest next update: Tue 03 Mar 2026 05:00:43 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: ApdFXKFmjluZxHZIccwrnMPmBbaFAru3CCbXyW2syjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:89:5b:ae:ce:30:05:f5:0c:62:33:f0:39:c7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Mar 2 05:00:43 2026 GMT
Not After : Mar 3 05:00:43 2026 GMT
Subject: CN=e321cc0b255c7a395c5499045c55926ad8d779f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:0c:31:95:cd:3e:be:24:5b:61:f3:79:1f:
83:4a:b3:5c:c6:74:11:a8:9f:c4:a4:f2:c9:3e:ff:
3f:2a:20:a3:7f:2e:60:90:f5:d1:85:4b:da:41:30:
c8:7f:d2:71:ab:45:c5:3c:5b:f8:13:87:07:e4:a7:
0d:6c:93:6f:73:98:fc:07:b7:3f:a7:72:33:ca:51:
d8:2e:f2:3a:c2:d7:c8:d8:3f:6e:0b:c0:24:46:83:
a3:14:be:32:f4:5d:7f:c1:2c:44:a3:3b:25:ff:db:
92:9f:d5:c3:95:cc:83:9c:1b:7a:f6:85:5b:db:7c:
f6:6d:31:9f:4f:09:0c:6e:b9:93:70:f8:e8:0d:a7:
b5:3b:53:f6:29:26:51:a3:da:cd:be:95:46:51:7b:
03:b8:48:6f:a3:1e:92:b9:e2:2b:fe:81:2b:43:d0:
86:85:c6:5d:d6:fc:46:12:a6:40:d8:ba:60:4a:76:
46:78:a4:b6:af:14:40:b8:84:f9:6a:0d:ac:b0:d5:
e1:66:43:3c:2a:93:20:cc:56:58:7f:0b:7f:35:09:
bd:2e:fb:da:d0:a2:7b:14:65:61:aa:34:c1:bf:08:
24:e2:5b:63:96:f9:d2:c3:3e:c2:88:15:4f:01:a4:
05:61:fa:f1:57:70:3b:dd:b0:6d:c3:ce:4c:4e:3a:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:CC:0B:25:5C:7A:39:5C:54:99:04:5C:55:92:6A:D8:D7:79:F6
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:13:55:0c:54:3f:b0:cc:26:92:ca:ff:55:5c:1e:1c:1a:15:
ef:b1:c6:3b:63:2e:fd:d8:52:14:3a:f5:dd:17:c4:a8:82:a3:
27:98:29:ae:f0:7f:bb:e5:de:f6:36:bb:23:8c:95:12:4d:0b:
cc:76:25:d4:6d:b5:c0:a5:7a:b4:97:ba:92:8a:74:a7:ec:25:
ce:16:95:aa:2f:8c:f2:fc:85:d8:ec:f2:aa:58:cb:9b:89:e4:
ab:2d:ce:44:d2:64:ec:4b:40:cc:4d:da:62:2e:7b:b4:24:04:
de:2c:c3:63:bc:61:22:c5:2c:d4:23:af:65:35:32:54:96:ca:
3b:7b:3d:fa:d8:90:9f:51:3c:ae:a7:1d:9f:05:31:55:d9:8c:
b9:09:2d:e7:17:fd:a7:d0:c9:e3:1c:15:18:72:67:e6:55:72:
82:b8:4c:8f:31:8f:1a:bd:88:de:cd:d2:5d:67:30:dd:99:e9:
88:45:20:00:f6:34:06:af:55:be:91:28:87:04:b6:44:0e:5f:
4d:ca:f0:e8:b9:e2:df:67:d0:f6:c3:e5:ce:31:08:9e:46:28:
ef:bb:35:15:0d:28:e1:07:63:af:02:d7:f2:2d:f1:04:92:53:
4b:54:84:39:a9:7b:72:cf:4e:04:1f:ce:6c:56:6c:d1:c8:4b:
4a:ff:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:44 2026 by rpki-client