Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: HxO1Dyo+rvx7Lzs2O2RJnxA16gIF2kYsZnXo4X5Semo=
Subject key identifier: 87:8D:11:21:6F:26:F2:B5:E8:FA:05:32:51:00:43:00:48:22:BD:B3
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 01A125AFB8E03380B854767BE0A6AE971C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 1395
Signing time: Sat 10 Oct 2026 12:00:35 +0000
Manifest this update: Sat 10 Oct 2026 12:00:35 +0000
Manifest next update: Sun 11 Oct 2026 12:00:35 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: npDGRJNQKxSV4JjrR8O9vrmwzHVr7PoPqivzMWyR/jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:b8:e0:33:80:b8:54:76:7b:e0:a6:ae:97:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Oct 10 12:00:35 2026 GMT
Not After : Oct 11 12:00:35 2026 GMT
Subject: CN=878d11216f26f2b5e8fa0532510043004822bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:b5:67:4a:c8:d4:52:fa:3d:99:1e:2a:fa:
34:b5:ef:9e:1d:07:80:14:8d:33:80:ca:9d:a8:a8:
7a:86:fe:29:bd:04:1d:59:e6:a2:88:02:d6:56:b7:
6c:1a:7b:2d:62:68:46:58:e3:62:8c:66:b1:5b:ff:
0f:99:8e:58:40:86:88:49:56:d7:41:f8:d5:d0:23:
2e:25:b6:e1:fe:8b:c8:91:89:55:d0:a0:ee:71:cc:
7a:d0:61:a8:ef:7d:a2:e5:79:70:0c:07:b1:35:ae:
8b:17:6f:83:30:cc:d8:31:88:d8:37:0a:fe:3e:18:
40:b1:1e:8c:d6:4d:2e:e6:b9:03:1a:db:cd:b4:08:
d8:bf:76:ac:1c:be:e6:c5:a0:b6:d1:de:33:65:29:
8c:21:f8:08:1f:8e:7e:29:5f:40:93:e7:be:21:01:
13:44:9d:a5:69:ce:24:5d:96:22:8d:b3:73:72:2f:
bf:87:5f:18:e0:39:18:e1:d4:71:f0:2e:7e:67:24:
a6:21:70:97:6a:16:d2:be:c8:d4:27:0e:a7:a0:79:
11:15:fc:42:46:bc:6c:a3:2b:8a:5f:62:cd:5d:d5:
90:9c:e7:d7:35:0f:58:cf:ba:f3:18:2e:99:d5:3e:
3d:88:a1:ee:65:9c:2d:a4:d0:b3:fb:42:40:c7:b8:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8D:11:21:6F:26:F2:B5:E8:FA:05:32:51:00:43:00:48:22:BD:B3
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2d:b3:41:a0:7f:3d:75:8b:aa:84:d5:15:97:cd:82:97:33:
c8:a4:3c:6c:57:ac:6c:66:9e:e9:8f:ee:6e:18:ae:5b:cb:f1:
9b:eb:cf:f4:5f:77:bc:8e:62:aa:c0:58:6e:b6:69:6f:9a:10:
ed:65:bb:23:d6:ae:69:b3:30:f7:4e:2f:de:cb:6a:8b:25:03:
90:cc:b3:42:b2:7a:6d:09:9a:02:43:be:46:21:a7:0a:0c:b2:
2d:ff:c4:67:09:1f:14:44:db:bb:35:b6:f5:15:62:7b:d6:7a:
e8:e8:8f:4e:50:a5:39:bd:05:fe:4d:26:35:02:c4:29:9c:ff:
a6:a2:95:a0:e0:36:23:be:aa:66:3d:9c:47:8b:f7:5a:2a:5d:
50:ed:a6:94:e5:7b:21:c5:a8:7e:eb:5d:86:69:e0:bd:e1:63:
a0:6d:81:5f:0e:82:46:0f:e5:5a:aa:74:bd:da:04:82:61:98:
f5:7a:cf:ba:bb:5d:df:9f:b4:50:6d:8a:61:9d:8a:fe:29:50:
f6:13:68:05:16:f8:ae:9b:0b:bc:19:85:67:6b:8d:ee:fc:66:
ca:87:03:95:87:da:6c:34:c7:dd:a7:53:0f:a0:5e:e6:c5:52:
da:36:57:d1:fd:c6:38:3e:82:5e:3f:fb:6c:80:f7:99:0b:76:
e4:e2:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:49:35 2026 by rpki-client