Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: fNmcwppI+Kkbon2n/V+Crulv0TvA0xZZVqQUyktS8Ps=
Subject key identifier: F0:DD:B9:8E:2D:DF:6B:29:9E:25:46:D9:B3:15:B7:E3:65:95:A2:E4
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 01A0BC54E26FE445C6E35CBFFB6D032FE899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 14E3
Signing time: Sun 20 Sep 2026 01:01:14 +0000
Manifest this update: Sun 20 Sep 2026 01:01:14 +0000
Manifest next update: Mon 21 Sep 2026 01:01:14 +0000
Files and hashes: 1: 2sXpeJGs67EM5ns-zJQBcUYxKDc.asa (hash: puRkCC1zHNpksWQuVwcp5iNFdpOsHJNyqZUYboDdAAM=)
2: 89iIC1P2vMZINfnDPEVYBrG5YNo.roa (hash: RLgR4UZD50FWkZGgPH0onW3VFJjF0TSQi+7anqzbUoQ=)
3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: E17lEb3KETQWMQxJJu/0NfhnKJtkPDWYkvPthdc55YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:54:e2:6f:e4:45:c6:e3:5c:bf:fb:6d:03:2f:e8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Sep 20 01:01:14 2026 GMT
Not After : Sep 21 01:01:14 2026 GMT
Subject: CN=f0ddb98e2ddf6b299e2546d9b315b7e36595a2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:4e:fc:0c:55:46:cb:ca:66:57:77:a3:4a:
7c:6d:2b:c3:e9:5c:97:6a:f1:23:4a:55:dc:78:25:
ae:1b:b5:49:f1:e1:59:b3:77:ae:b2:b3:d5:4d:96:
1e:ef:59:55:93:06:6d:72:06:fb:5a:07:0c:d2:47:
12:b4:d3:c8:a2:0a:85:66:b5:93:9a:31:98:2d:f6:
68:cb:89:60:3b:f6:69:d0:26:00:d5:ef:49:25:44:
3b:93:59:71:b6:bb:bc:00:01:74:58:30:27:72:54:
26:a1:a0:22:fb:87:ae:e5:49:f1:2a:80:1f:83:bf:
0d:f7:d3:6c:18:2e:32:66:19:53:b7:b9:3a:15:9d:
2a:84:4c:11:21:3e:8c:ac:98:16:ff:76:f2:70:44:
f0:9c:90:21:72:e2:34:c7:37:a5:a1:d6:73:c2:4f:
54:13:a5:e3:9c:e0:e4:f9:24:4a:1f:68:e5:18:26:
81:3e:da:9d:87:8c:bf:c1:94:63:64:3d:68:36:a8:
64:3e:38:0b:01:31:7d:20:7f:a9:e8:b4:1a:91:15:
00:7a:ec:56:8c:d2:19:7d:ed:f0:a5:ec:ac:a9:18:
da:c6:7f:3b:92:f8:0a:83:a5:6c:40:ae:02:00:c0:
d5:75:67:99:99:34:99:88:b0:8e:e6:6f:38:f1:f3:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DD:B9:8E:2D:DF:6B:29:9E:25:46:D9:B3:15:B7:E3:65:95:A2:E4
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:44:ca:7b:3b:a8:86:66:0f:c1:0d:52:18:45:5a:91:e5:59:
c1:5f:f4:a4:e4:50:5b:4d:a0:75:20:a8:fe:d8:de:cb:c1:e6:
6c:80:e5:8b:b0:aa:bc:df:92:d8:2d:9f:68:a2:bc:61:37:a0:
3f:89:9f:af:0e:9b:38:f8:13:56:1f:2c:2e:4c:63:fe:69:32:
04:b6:c5:57:6a:b6:eb:16:9c:2d:24:b8:b1:00:f3:d6:1f:28:
7b:06:c9:a5:d5:1d:fe:56:a9:e1:5d:01:0b:b2:7d:fe:bf:b3:
c6:a1:a4:e1:93:d9:4f:d7:17:10:7d:c8:0c:73:36:5d:03:ef:
fe:07:bc:44:a1:d0:82:7d:3c:d5:0e:d6:33:cf:29:ef:c6:18:
b8:d6:2a:8e:7a:8b:08:4b:12:7e:4a:24:f5:c4:80:8a:9b:65:
39:b9:86:0a:8e:af:54:0f:ce:83:9a:ca:f3:50:0e:48:d9:16:
65:3c:c0:68:e1:26:00:11:97:50:bf:b6:52:4b:4a:5e:22:cc:
01:a9:79:cc:16:f5:ee:6e:be:fb:f5:0b:2a:81:e5:c1:e3:89:
78:e4:60:4c:c3:26:43:19:71:6c:0d:09:50:49:2e:00:26:8c:
75:88:4d:41:e8:32:c4:68:05:09:88:d3:e0:c5:54:d1:b8:38:
8c:3b:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:47:09 2026 by rpki-client