Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: KJgf3iNxgLBRFPA365pQy+KX7XlYk2DW0j8jkFP2dic=
Subject key identifier: 52:A9:7F:C0:2E:3B:65:74:62:FD:D0:20:D1:1D:05:60:B1:61:44:4E
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019D98506D0B97983A753AD4737171702533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 1342
Signing time: Thu 16 Apr 2026 22:01:40 +0000
Manifest this update: Thu 16 Apr 2026 22:01:40 +0000
Manifest next update: Fri 17 Apr 2026 22:01:40 +0000
Files and hashes: 1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: Di1zHpmGkXKAKRKtCyM2nKy3RfwCPhrVrNqQzfrY7nc=)
2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=)
3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:6d:0b:97:98:3a:75:3a:d4:73:71:71:70:25:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Apr 16 22:01:40 2026 GMT
Not After : Apr 17 22:01:40 2026 GMT
Subject: CN=52a97fc02e3b657462fdd020d11d0560b161444e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:7f:72:fd:b0:8c:c4:0b:95:1a:e0:88:3a:
06:57:c2:a3:9d:41:5b:a6:63:18:88:09:e2:d1:8f:
97:07:d4:08:81:a3:5e:a1:8c:be:53:53:e3:d8:ea:
b3:94:24:86:4e:31:f2:00:28:84:8d:2c:a3:39:86:
9e:38:61:7e:a7:46:e1:81:ce:13:3e:bc:52:67:ff:
35:23:62:ba:57:97:7f:a2:b9:42:8d:54:69:8a:ef:
a4:ba:3f:f7:32:6f:a4:90:f9:9e:7a:f8:c5:f5:84:
f3:08:a0:4a:e3:4a:83:73:9d:89:2e:ee:48:9f:53:
b7:98:30:92:2f:24:8a:0b:01:ef:3b:07:1e:40:15:
7d:c7:bc:50:a7:70:91:24:3f:47:1f:9c:53:7b:de:
35:35:3c:ae:16:1e:41:17:63:5d:9f:80:dd:e2:76:
bd:59:ed:97:10:1e:2d:d7:50:30:de:fb:4d:11:44:
ab:b3:5d:c1:ce:92:e1:cb:3f:38:1d:1b:6e:48:cf:
f4:0e:6f:a0:40:d7:ce:ea:b1:47:32:f6:f2:a1:db:
e3:72:66:d8:3b:f2:26:98:b7:e2:7e:80:57:0c:3a:
79:89:65:99:44:31:1f:a8:16:92:14:fb:a1:27:31:
93:7d:71:38:3c:e9:c3:b4:0f:38:1c:1b:57:b8:2e:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:7F:C0:2E:3B:65:74:62:FD:D0:20:D1:1D:05:60:B1:61:44:4E
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:70:7e:b3:51:b8:7f:c4:11:ee:73:bd:6c:8b:28:1d:ca:
53:83:05:5d:6c:10:eb:e4:6e:c5:10:e6:d7:2a:aa:90:2a:56:
04:4a:fd:de:a5:eb:eb:4f:ac:e5:41:79:f6:c1:52:f3:79:48:
74:e5:b3:f0:50:cb:26:a7:7a:85:7a:67:14:71:af:21:28:f9:
44:93:be:c2:ad:de:d9:ed:5f:4b:09:34:d4:6a:ab:5d:52:c7:
54:83:8a:b5:e3:05:b2:0d:19:65:f5:55:bc:ec:59:84:8f:59:
a0:0d:5e:e1:13:4d:a2:d4:d8:aa:35:50:74:8e:cd:82:f3:fc:
78:3d:f7:96:77:48:2d:84:4b:68:09:cc:4c:1b:a0:fa:3d:85:
67:d8:21:ed:e4:da:e6:4e:67:99:c6:bb:7d:51:89:bc:41:e0:
8e:e5:f5:a3:cc:c4:b2:54:ae:20:cf:70:01:e2:45:a6:0e:d4:
3c:7d:7f:a2:eb:42:3a:e3:c3:7f:df:c9:99:96:6b:0a:2a:6b:
87:83:5b:2a:eb:0d:65:7e:e3:22:89:81:7b:7a:42:7b:98:c4:
ff:de:7e:81:1a:32:23:ff:42:ac:73:80:7f:8d:84:ca:25:a5:
d9:d7:9f:a8:55:e7:45:a9:e1:5b:e7:f7:be:5d:76:a9:cf:19:
47:db:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:45 2026 by rpki-client