Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: 7aA3Zxe/RycqT/wNJsFiv955N4V89Y1NKdnyNGdIUYY=
Subject key identifier: C1:9E:BD:F5:5B:3B:81:E9:16:54:56:23:03:1E:2D:5D:96:63:C0:F6
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 01A1A9DE26A5ED2AA6DB80E2463E520AE7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 155E
Signing time: Thu 05 Nov 2026 04:01:10 +0000
Manifest this update: Thu 05 Nov 2026 04:01:10 +0000
Manifest next update: Fri 06 Nov 2026 04:01:10 +0000
Files and hashes: 1: 2sXpeJGs67EM5ns-zJQBcUYxKDc.asa (hash: puRkCC1zHNpksWQuVwcp5iNFdpOsHJNyqZUYboDdAAM=)
2: 89iIC1P2vMZINfnDPEVYBrG5YNo.roa (hash: RLgR4UZD50FWkZGgPH0onW3VFJjF0TSQi+7anqzbUoQ=)
3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: Ta6XwzJvjbXGxZo2Fo7vAUzATp9JPg4o/ERKoePxGYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:de:26:a5:ed:2a:a6:db:80:e2:46:3e:52:0a:e7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Nov 5 04:01:10 2026 GMT
Not After : Nov 6 04:01:10 2026 GMT
Subject: CN=c19ebdf55b3b81e916545623031e2d5d9663c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:cb:8e:99:09:bb:d4:ee:c9:a4:1c:ba:93:
98:28:4b:0e:3c:c0:e8:79:fe:a6:09:aa:c4:d0:d6:
43:1e:06:8a:ba:7e:85:ca:f8:e5:93:41:1b:e2:07:
5c:9f:18:e8:4e:d3:65:ff:56:69:7b:d6:7b:b0:d4:
9f:36:3e:81:0d:81:b2:a2:4e:21:3e:39:bf:f4:fc:
db:b9:bb:4f:40:84:13:19:50:46:c6:01:0d:0a:89:
57:1a:67:13:15:f5:9a:61:37:c8:53:68:fe:bf:9b:
6d:fb:c9:10:8b:06:f9:16:53:83:fd:f0:51:5f:8b:
c8:da:dd:8c:f6:84:86:73:19:35:5f:80:60:07:47:
53:6f:f5:73:2e:eb:2a:77:2d:be:66:07:b3:c0:48:
41:aa:f9:00:bd:49:16:57:35:08:14:78:03:15:a2:
4e:73:70:03:55:7a:e5:e5:c2:fc:6b:91:ef:80:5e:
c5:86:26:dd:07:c0:d5:43:e8:dc:f3:6f:bd:d4:2d:
b7:76:68:4d:b9:60:3b:84:cf:f7:22:ff:70:eb:4f:
6c:25:eb:77:7f:fa:23:16:03:23:dc:1d:02:fa:e2:
40:13:f5:b4:05:64:5e:a0:a4:e2:b6:6d:3f:1c:3e:
07:30:0b:4f:a5:77:62:61:7b:97:22:d9:0f:2e:34:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:BD:F5:5B:3B:81:E9:16:54:56:23:03:1E:2D:5D:96:63:C0:F6
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7d:3a:56:d9:69:41:1a:d6:c8:dd:97:54:b1:a0:cf:17:ed:
f7:2e:4c:e8:1a:4c:97:9b:b6:21:63:7d:85:30:72:d0:e2:42:
5a:56:8c:bf:f5:70:d4:0b:df:a3:b9:c6:ac:85:1f:20:5a:4c:
83:c2:f6:d7:01:ec:98:1c:b4:fb:77:82:31:a2:3a:43:2f:cd:
4e:99:40:cc:e8:c6:14:a0:7b:70:3d:dd:6d:e9:00:28:87:a1:
92:53:9d:49:b0:13:fe:6b:64:fd:1c:3e:4c:4e:0e:71:0d:d3:
8a:55:ea:17:6d:dd:d0:86:19:36:ca:5c:95:24:d4:1c:ff:04:
e0:8c:7d:e9:cf:46:ba:0c:10:62:e2:94:12:53:7a:f8:d5:26:
d7:3e:2b:5d:17:03:db:05:9c:a3:9a:97:d7:78:19:03:c5:a2:
a6:c7:90:c0:5c:c1:b7:16:06:2d:5d:d3:19:b7:a3:e9:64:54:
c7:5e:93:10:cc:c7:4e:9b:63:8c:25:f3:da:34:bc:e6:0b:8e:
55:4d:2d:d9:93:4b:09:9b:69:79:45:ae:8a:bb:9d:28:dc:fe:
41:45:0d:4d:8c:b6:15:a2:e6:6d:d1:70:88:2d:ed:bd:b4:4f:
72:2e:6e:ff:ad:b3:5e:ab:85:3e:52:f0:f6:68:5d:26:b1:a0:
d6:9d:3b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGp3ial7Sqm24DiRj5SCue6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjYxMTA1MDQwMTEwWhcNMjYxMTA2MDQwMTEwWjAzMTEwLwYDVQQD
EyhjMTllYmRmNTViM2I4MWU5MTY1NDU2MjMwMzFlMmQ1ZDk2NjNjMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ajLjpkJu9TuyaQcupOYKEsOPMDo
ef6mCarE0NZDHgaKun6Fyvjlk0Eb4gdcnxjoTtNl/1Zpe9Z7sNSfNj6BDYGyok4h
Pjm/9PzbubtPQIQTGVBGxgENColXGmcTFfWaYTfIU2j+v5tt+8kQiwb5FlOD/fBR
X4vI2t2M9oSGcxk1X4BgB0dTb/VzLusqdy2+ZgezwEhBqvkAvUkWVzUIFHgDFaJO
c3ADVXrl5cL8a5HvgF7FhibdB8DVQ+jc82+91C23dmhNuWA7hM/3Iv9w609sJet3
f/ojFgMj3B0C+uJAE/W0BWReoKTitm0/HD4HMAtPpXdiYXuXItkPLjQjEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGevfVbO4HpFlRWIwMeLV2WY8D2MB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH06Vtlp
QRrWyN2XVLGgzxft9y5M6BpMl5u2IWN9hTBy0OJCWlaMv/Vw1Avfo7nGrIUfIFpM
g8L21wHsmBy0+3eCMaI6Qy/NTplAzOjGFKB7cD3dbekAKIehklOdSbAT/mtk/Rw+
TE4OcQ3TilXqF23d0IYZNspclSTUHP8E4Ix96c9GugwQYuKUElN6+NUm1z4rXRcD
2wWco5qX13gZA8WipseQwFzBtxYGLV3TGbej6WRUx16TEMzHTptjjCXz2jS85guO
VU0t2ZNLCZtpeUWuirudKNz+QUUNTYy2FaLmbdFwiC3tvbRPci5u/62zXquFPlLw
9mhdJrGg1p07pw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:20:57 2026 by rpki-client