Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: /p5hVhFJFlbRSMgsfouFTO82UwIeuEundQ4/mRZO93M=
Subject key identifier: 86:32:E4:BE:72:52:A0:F8:3B:D6:88:51:7B:8D:99:C4:7A:25:83:92
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019D9A06FFECBB61BDE442F90F1B8853E877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 11BF
Signing time: Fri 17 Apr 2026 06:00:43 +0000
Manifest this update: Fri 17 Apr 2026 06:00:43 +0000
Manifest next update: Sat 18 Apr 2026 06:00:43 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: Qt/dDrUjyV22Hb5xIdLxRhtYgFzOIF+lW7XcfhyymDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ff:ec:bb:61:bd:e4:42:f9:0f:1b:88:53:e8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Apr 17 06:00:43 2026 GMT
Not After : Apr 18 06:00:43 2026 GMT
Subject: CN=8632e4be7252a0f83bd688517b8d99c47a258392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:35:61:69:54:e1:21:14:24:b6:03:bf:7e:
0d:70:b4:13:2b:4d:5c:4e:04:ac:82:50:e8:5d:d0:
62:ec:dd:23:df:60:21:21:6b:20:a7:fa:fe:5d:bf:
b6:11:ed:78:39:d8:ea:4f:e2:07:d5:79:63:de:4b:
13:07:4b:d3:32:c9:8b:43:e4:2c:36:25:79:5a:41:
d3:71:22:ab:d0:ea:73:44:2a:14:60:79:35:4d:3a:
1f:b6:05:cf:f0:f4:7e:a8:ee:4e:46:4d:d9:6f:48:
e6:b2:a6:23:26:a7:36:76:95:94:1f:f4:5c:e3:7a:
b6:75:7b:e7:e8:f9:20:e0:72:6b:96:9d:9e:54:85:
2c:c1:9e:16:58:f0:c9:d6:23:48:90:47:e0:94:1a:
bc:39:8d:68:cb:cc:f7:0e:59:91:a8:77:0d:23:bf:
90:e8:e1:8e:d8:69:11:74:cb:6d:2f:ab:09:c3:8c:
45:09:27:ae:9e:fa:68:4d:05:f9:16:48:0c:1b:23:
6a:b0:c0:18:52:79:a0:e0:45:38:06:6b:88:0c:42:
ca:2f:8a:c2:f8:66:11:ab:f9:3a:5f:7d:28:de:b0:
05:fc:85:f9:65:bc:98:4f:06:81:8e:17:74:68:42:
25:93:3b:c4:84:23:1b:62:a4:66:3a:27:a1:82:f5:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:32:E4:BE:72:52:A0:F8:3B:D6:88:51:7B:8D:99:C4:7A:25:83:92
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1f:d2:71:91:85:5e:f7:0d:57:d8:26:a8:b5:06:ce:65:2c:
57:cf:ca:ae:d8:7e:44:fc:e9:88:79:72:ab:1f:57:cb:64:39:
7a:da:c5:50:52:82:7f:58:d6:ac:c7:b8:4f:97:60:dc:73:31:
02:fa:16:5a:41:a9:ad:98:96:b2:35:71:07:e7:92:c8:f1:73:
05:49:8c:f3:75:52:bb:30:2e:4b:30:5a:6e:69:59:17:fe:fe:
82:c5:48:d1:11:77:d1:70:90:83:28:ea:40:6a:d9:f3:81:11:
25:ad:1f:11:9b:ac:d4:e3:b7:a4:2d:2c:54:4c:95:7a:6f:6c:
7f:74:27:78:5c:b9:d3:27:75:9f:b6:98:e3:f0:3c:ea:2d:c6:
9d:f1:75:ef:bb:a9:8e:65:91:82:af:85:c7:92:f3:66:e3:b4:
a2:42:28:03:cf:83:8f:79:eb:66:56:a4:bd:65:9b:aa:df:0e:
2a:8f:0f:e3:31:19:51:69:be:e6:c7:ef:10:f3:45:31:7b:82:
f1:b5:16:a6:a1:3c:c6:6f:f3:f8:b7:ad:55:fe:81:92:b8:6d:
ad:b0:12:f3:1d:43:cb:79:8a:57:2a:47:0e:2a:47:4d:f8:fc:
e1:25:a0:33:b8:31:d2:3b:dc:6a:ea:b7:87:30:d7:fd:29:ef:
40:00:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:23 2026 by rpki-client