Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: T1CV2GYjUtECkCDAEkNXJgfiFiShR+nL6bz/dLpeFb0=
Subject key identifier: 95:49:CC:1A:1E:BE:94:33:D6:4C:2E:DB:5D:1E:B4:06:17:F6:A2:8E
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019D9A06D9543BC1C2CEA21576355ECAD440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0AFC
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: O99+Wv48U7ATI3pv70ZzfWdVH0V1rp12akI+Z7s5S7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d9:54:3b:c1:c2:ce:a2:15:76:35:5e:ca:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=9549cc1a1ebe9433d64c2edb5d1eb40617f6a28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:14:cf:b5:b0:45:c9:11:71:34:44:60:d2:
46:2e:b2:85:e8:d0:91:0a:79:a8:91:65:e7:b1:be:
cb:2b:38:f6:23:f2:af:94:f8:a1:d4:98:0b:38:7b:
61:c4:44:eb:08:e2:e8:54:2b:5b:66:aa:fc:8d:78:
6e:cc:64:69:77:97:87:d3:ef:a3:fa:41:8c:6e:96:
ef:fb:35:32:eb:f8:48:ed:4c:65:08:96:6a:e2:f0:
69:20:bd:d9:14:3f:ab:a2:cc:de:a3:f7:39:e5:19:
b6:ca:e9:fb:db:85:1c:16:19:91:ea:f2:cc:5b:9e:
00:5b:e1:15:8d:0d:5d:56:3d:ae:da:90:d3:fa:00:
01:9a:cc:48:4b:fa:8d:03:e0:ae:1d:9a:87:4d:5b:
56:5b:17:f5:cc:df:d8:33:31:b0:32:f0:15:f4:ce:
fe:76:bc:4c:88:cb:86:01:68:15:31:b3:4b:69:8f:
88:5d:b4:81:bf:c9:9c:53:ff:84:72:2b:6b:d4:d7:
66:1f:84:22:01:3e:5a:15:f5:fa:35:c7:40:7c:07:
84:51:10:df:91:e8:39:17:cb:e6:d5:97:18:35:80:
76:43:87:02:ab:a9:80:3a:0f:f8:b7:78:02:57:95:
b8:23:d9:27:74:b9:08:5c:5a:c1:c3:b6:15:a0:15:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:49:CC:1A:1E:BE:94:33:D6:4C:2E:DB:5D:1E:B4:06:17:F6:A2:8E
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f1:9d:bc:d6:99:c1:cb:37:c3:27:5c:3d:7c:97:d9:3b:8c:
82:9d:53:a0:75:b4:ff:0e:73:73:df:ff:f7:52:5a:6b:1b:d7:
d8:6e:2a:21:bb:fe:13:55:a0:ba:48:7c:c7:8a:81:fd:6d:6f:
6b:ea:f7:61:43:40:1b:db:9d:7b:15:de:a2:76:50:82:7a:8a:
58:45:e1:17:a2:10:77:d2:b7:d0:3a:bc:93:68:8b:f7:2e:73:
fd:0d:b2:a8:df:e6:ba:a7:a2:11:f0:15:77:47:9e:f8:29:cc:
78:8d:ab:53:ec:ac:ff:62:50:82:45:0b:90:e8:e1:a6:61:b8:
20:a1:aa:aa:89:92:05:e7:6b:c4:6f:b6:2b:43:06:56:85:d5:
e0:b0:28:35:85:80:ef:f7:a1:1f:1d:cc:f9:d8:7f:fe:fe:7d:
e6:2d:11:3b:7a:38:e1:28:6e:dc:6f:fe:03:bc:71:ea:ed:05:
6d:ef:54:e7:71:d0:d9:aa:c5:66:a5:d3:62:5a:c4:ac:d4:14:
9a:af:c6:86:b1:46:7e:7e:08:65:cb:9a:dc:8f:25:ed:bb:29:
c2:58:87:f3:03:2c:03:51:a2:75:83:0d:6f:0a:d6:30:df:dd:
68:6f:bb:c5:12:02:9d:7a:c7:5d:01:cd:a4:ee:b1:44:3e:73:
2b:fd:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:04 2026 by rpki-client