Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: QvUaAdKfs+mxzyQfrtGMm+Q6M1K636WDQixHjsOZrYc=
Subject key identifier: D3:DA:67:48:1C:0E:CE:C1:71:87:21:E7:8A:22:22:08:F8:18:D5:61
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019CAA8F609A17E7A26E72B4062DEB130A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 1143
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: Ol3/ggJiNWEzqkEkDBv0+L4p63Z6Gf3qEg62gsuF0b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:60:9a:17:e7:a2:6e:72:b4:06:2d:eb:13:0a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=d3da67481c0ecec1718721e78a222208f818d561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:e5:5c:d7:4f:4f:9e:83:4a:06:99:4a:7b:
4f:cc:35:3a:ba:23:e1:2d:a8:97:02:c4:a9:0d:21:
2c:a3:66:42:1d:b1:0a:79:f1:81:25:8f:3e:5d:99:
17:09:65:21:35:e4:b0:ff:65:cc:e4:dc:f1:d3:92:
a0:f3:50:86:16:be:27:d4:0b:85:31:bf:ff:15:ed:
54:6b:fd:49:13:58:57:ab:d1:4a:c1:f2:18:f5:7a:
f8:80:6e:f7:90:79:05:cc:3c:a2:e0:2e:b6:f4:b2:
51:f4:4b:4f:82:07:fc:88:cd:42:06:74:41:ad:be:
e2:d7:d2:80:87:8f:42:ba:42:05:82:f4:87:95:64:
69:9d:26:3e:cf:70:b8:82:49:1e:01:dc:7d:ec:4b:
fb:e5:aa:91:83:9b:8d:9d:88:92:3e:87:6b:e8:25:
eb:bd:d3:34:8c:4f:17:1d:32:55:c4:37:64:63:4d:
1d:a7:b3:82:59:44:41:ce:5e:63:7d:4e:96:5f:2e:
1f:46:9d:c9:dc:5e:6a:d3:a7:19:1f:9f:71:35:20:
5d:6a:25:ee:e5:29:b3:5a:f3:0e:03:ef:02:e4:f5:
ac:c9:c7:cf:2c:b2:3c:be:f3:e4:1b:f8:f6:15:3a:
07:83:27:91:56:f9:da:f1:51:ba:44:c2:57:9b:1c:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DA:67:48:1C:0E:CE:C1:71:87:21:E7:8A:22:22:08:F8:18:D5:61
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:16:0a:4d:84:14:61:72:87:c0:29:7e:c8:f6:09:a5:1d:
7e:a7:7b:60:80:30:76:2d:88:7b:9c:cf:2d:1c:25:9d:da:cf:
8e:28:f0:06:b8:b3:d2:00:43:12:76:f7:fc:a1:f1:d1:63:ac:
e9:1f:85:65:58:1b:9b:63:a5:c5:42:a0:05:a9:8a:47:b3:8f:
ee:b5:89:f9:0c:be:11:5e:64:bf:55:0e:b8:f7:b2:bd:8f:6f:
91:d5:c0:a6:de:47:18:83:94:2b:27:a8:8c:ea:0b:63:6e:96:
78:70:00:37:2f:96:c8:5e:5c:ab:8c:36:ce:43:62:b2:f5:35:
30:71:f8:be:3d:8c:6f:99:00:26:24:8c:40:b5:6f:42:78:8c:
81:a4:fa:10:bb:9d:e3:cb:fa:2b:b0:86:1c:b8:0c:b3:97:a0:
e0:eb:d3:ad:a8:59:79:0b:36:77:3a:a9:8d:e9:d6:aa:3c:57:
77:d9:5d:42:9e:08:6c:7d:e5:4c:6b:1f:c1:b1:d5:54:64:12:
99:5a:dd:24:4d:d0:43:b7:71:a5:b3:6c:1b:93:4b:82:74:4b:
c2:4a:4e:29:a6:78:8d:f2:08:e9:a0:59:0a:6a:b9:e8:53:ae:
87:44:19:10:2e:1c:7f:86:11:5c:59:e9:ea:cb:0c:2c:46:cc:
cb:58:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:43 2026 by rpki-client