Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: 5TS3H1FT3AQeIuOS5W78VrQXYxvgmuO8T/3tr4Kcn+o=
Subject key identifier: BB:63:B0:AA:72:7B:A0:1A:46:40:59:6F:37:2C:BB:F2:08:3B:11:68
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019FAA506038F6D654F687F1AE761453A9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0C0E
Signing time: Tue 28 Jul 2026 20:00:21 +0000
Manifest this update: Tue 28 Jul 2026 20:00:21 +0000
Manifest next update: Wed 29 Jul 2026 20:00:21 +0000
Files and hashes: 1: JlA25F-M7KvAsSDseKudSFRF3HA.roa (hash: gES4kDR6mhGPpQfnhqsx3vEvMQVGKlNZIuooaU01hCo=)
2: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
3: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: 6Av/5EDgxZ+alDcR/bA4g2VAaEYf9kOk57PpunhF898=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:60:38:f6:d6:54:f6:87:f1:ae:76:14:53:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Jul 28 20:00:21 2026 GMT
Not After : Jul 29 20:00:21 2026 GMT
Subject: CN=bb63b0aa727ba01a4640596f372cbbf2083b1168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:8f:3b:20:9a:75:58:ca:6e:8e:52:db:05:
40:a9:fc:46:e1:a6:e3:4e:87:a7:f6:1f:2a:4e:03:
41:0e:3d:cf:10:c0:9a:7d:59:20:01:91:91:29:39:
62:95:51:09:77:d5:39:d6:a0:ee:0c:50:cb:ec:9c:
71:5b:f8:68:9f:49:fb:15:a8:04:07:57:17:a4:04:
75:37:94:cd:90:67:4f:77:e8:25:d4:b8:ea:df:4a:
67:bb:ce:af:94:8d:5b:85:42:58:9a:68:d1:c6:4a:
ba:74:ff:3a:1c:57:d2:9c:c6:ff:6f:0e:6e:4e:3c:
6a:62:0b:00:ec:d4:a4:b7:13:1f:ab:1a:f0:4a:df:
83:ee:1e:aa:6d:f2:45:3d:6b:18:0a:3a:81:7d:01:
e2:07:29:5e:52:bb:32:77:cb:3d:8b:49:60:a9:8e:
a9:62:e8:ab:a7:34:2d:82:53:88:a0:48:21:cf:26:
68:05:df:07:6c:6a:14:c8:de:28:3a:e9:17:b1:92:
80:a3:f0:71:8b:68:03:aa:b4:f8:ae:fa:30:41:4a:
6a:09:d6:d5:78:01:9b:16:fe:99:d1:fb:5e:2f:98:
7c:6f:76:73:18:f6:29:15:0c:ef:de:35:7d:7c:b8:
a6:1c:e3:63:30:1a:75:e0:66:4d:93:05:9d:7e:7a:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:B0:AA:72:7B:A0:1A:46:40:59:6F:37:2C:BB:F2:08:3B:11:68
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:82:86:67:38:d1:bf:d7:94:fd:b0:ce:ef:66:54:08:69:9e:
b2:f8:4e:05:ea:9b:82:72:8c:0f:65:8f:50:5d:bb:95:f2:b6:
50:a8:ec:25:4d:ce:34:b7:a8:31:88:41:13:df:37:9d:6d:ed:
42:16:1e:e8:75:8f:8b:bb:d3:dc:cb:8b:71:74:c0:51:79:5a:
50:10:16:75:5c:50:ed:18:0c:50:d5:1c:6c:46:ec:92:28:78:
4d:5c:fd:c4:b1:19:28:88:ef:e9:0d:b8:28:8d:39:2d:ae:f5:
ec:83:67:40:b4:ce:87:b4:fa:5a:3a:f1:12:ce:69:68:c5:99:
7d:a4:02:c2:8f:f7:27:86:1e:45:74:56:81:fd:44:1c:5d:44:
b6:0c:51:e7:15:ce:b0:5b:53:27:ea:0c:8b:1b:49:65:e5:0b:
85:86:a0:7f:84:91:53:9d:68:63:eb:7c:9f:b5:6b:ba:79:88:
54:c7:12:b5:d5:bd:d1:b9:db:40:ef:f9:f4:31:6e:55:b2:68:
5d:20:ec:0c:c1:18:d2:bf:99:f9:28:18:8d:36:09:61:76:8b:
ab:59:c2:ac:40:31:e2:a8:64:96:6b:ca:9b:91:89:c8:52:07:
5b:a6:79:40:99:eb:1d:5b:57:c3:fe:f9:91:e0:cf:5f:4e:54:
b1:e7:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:39 2026 by rpki-client