Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: PeBu5ktYlrYoJ+X6u7LRMqhxTc6ySgqNO+NYLDau+/E=
Subject key identifier: 4E:7F:16:D6:69:38:F3:89:CE:48:3B:5C:C8:BD:73:97:D3:1B:35:3B
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 01A0E51A5B32B16C0447066368179D60C54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0CB1
Signing time: Sun 27 Sep 2026 23:01:44 +0000
Manifest this update: Sun 27 Sep 2026 23:01:44 +0000
Manifest next update: Mon 28 Sep 2026 23:01:44 +0000
Files and hashes: 1: JlA25F-M7KvAsSDseKudSFRF3HA.roa (hash: gES4kDR6mhGPpQfnhqsx3vEvMQVGKlNZIuooaU01hCo=)
2: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
3: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: QdnBDTHJUEWHbfH1rM+turRq7VNlzeP1ABppzEXj0ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:1a:5b:32:b1:6c:04:47:06:63:68:17:9d:60:c5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Sep 27 23:01:44 2026 GMT
Not After : Sep 28 23:01:44 2026 GMT
Subject: CN=4e7f16d66938f389ce483b5cc8bd7397d31b353b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:49:19:20:e6:e8:f1:4b:a2:c2:90:6b:1f:
1d:33:d2:97:ca:a1:6d:d2:d3:31:0c:ee:33:f9:54:
c3:ad:31:61:e0:3c:30:c3:8b:5c:bc:19:7b:6c:98:
23:fa:31:6d:b6:6b:0b:1d:6b:cb:97:4b:82:bf:4d:
ee:92:8d:8c:45:ad:16:3c:dc:e5:f8:f5:81:09:50:
48:39:aa:37:95:34:96:5e:b0:73:8c:f5:29:71:3b:
b8:f1:a6:cf:0f:d4:50:35:ac:33:4e:ba:2e:3d:44:
66:bd:fb:14:5a:c6:d1:29:87:81:26:8c:8a:3f:16:
2e:22:44:2e:2e:2f:f3:5f:5f:b7:65:37:af:42:8d:
70:ab:86:3f:e2:33:99:2c:b2:35:f0:a9:65:2a:11:
b7:ef:32:2a:7c:a0:1c:cf:b5:04:f8:b1:df:48:1d:
c3:17:25:6f:c1:c5:da:d6:83:0c:a8:30:98:ba:ee:
54:01:24:75:16:d1:5f:a5:04:be:9a:59:5a:1c:4d:
64:79:19:e2:03:ea:7b:9b:d8:fc:4b:5d:59:50:42:
b0:e1:08:4d:41:dc:7c:85:13:d7:c2:aa:5d:a9:28:
9d:6b:4b:99:1d:c9:3c:96:fc:f8:00:22:71:44:cd:
12:f7:66:c3:97:9b:d1:81:fc:55:3d:cd:56:1c:72:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:16:D6:69:38:F3:89:CE:48:3B:5C:C8:BD:73:97:D3:1B:35:3B
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8c:92:82:d0:45:ad:ee:04:45:e6:28:30:01:f1:f8:ba:78:
48:f6:6b:07:48:56:49:a9:1a:c8:f4:45:f3:2f:8e:04:3d:9f:
06:2c:5a:86:0b:0c:2e:84:6a:1b:09:aa:64:6b:2f:fd:d8:16:
d9:ec:e6:36:22:51:89:25:17:fc:ac:c4:a7:e7:19:33:9f:48:
95:ff:91:1a:8d:fc:f6:a7:3d:18:38:16:20:90:c3:55:2c:e1:
66:60:c9:ba:12:3f:85:f0:e2:5d:e9:df:65:c5:28:55:e3:99:
c7:5e:66:a3:47:03:82:91:52:9c:cf:ef:ae:e6:e2:f7:d3:e6:
46:cc:a2:ec:14:59:5b:74:43:82:30:36:6f:b6:0b:0d:0b:cf:
24:3c:9b:36:90:41:76:4b:8c:4b:a7:2c:a2:c1:3f:ae:23:10:
b6:4b:aa:bc:88:3f:af:93:c5:dc:4a:d6:86:c3:7a:4c:1f:b4:
4e:35:68:68:d4:1f:06:e4:e2:9f:87:b1:12:fd:0b:ff:51:70:
7f:e7:2a:e7:dd:1e:9f:fc:5d:a3:94:19:7a:db:a2:af:b7:31:
f4:99:c9:69:90:d8:0a:29:22:c4:21:b6:2b:8f:01:6f:00:89:
ab:e7:d8:17:99:44:b9:f7:22:ed:63:5c:0b:61:85:8f:e1:41:
59:b7:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:00:12 2026 by rpki-client