Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: m5bSZ3oR+t9xoYmbszdYVGul5TK6C5hY0y0FWB9fDTA=
Subject key identifier: F5:25:2C:08:9C:6E:3A:C6:E1:E2:2A:9D:D6:C4:0C:9E:D1:88:82:44
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019FAB2C13FA48535A173ED6A64B0FB16F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 12D1
Signing time: Wed 29 Jul 2026 00:00:20 +0000
Manifest this update: Wed 29 Jul 2026 00:00:20 +0000
Manifest next update: Thu 30 Jul 2026 00:00:20 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: qPSn3ephdUBS8LpFoXKE1JUNbjU6Ke+bQ/soChDzYz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:13:fa:48:53:5a:17:3e:d6:a6:4b:0f:b1:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Jul 29 00:00:20 2026 GMT
Not After : Jul 30 00:00:20 2026 GMT
Subject: CN=f5252c089c6e3ac6e1e22a9dd6c40c9ed1888244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:3a:ea:5e:34:18:2e:79:6b:b4:59:9c:cc:
20:79:08:61:88:05:9c:88:ea:8b:d5:ea:42:4f:86:
8f:db:1b:db:75:38:1a:01:08:ea:6f:44:9b:b6:68:
2d:6a:11:c5:04:26:a2:56:b5:50:ef:2e:f3:45:4f:
76:3b:9e:5f:da:e4:55:e4:f5:3e:ec:6e:22:be:dc:
59:6a:4a:d5:a7:9a:93:2c:f0:7c:52:fe:43:5a:ad:
1e:7c:35:c2:f6:3d:de:78:f6:78:8d:9c:1f:5c:34:
74:4d:c5:84:4e:ac:89:8b:31:0f:4d:08:91:c1:90:
31:d1:43:c9:81:0a:37:5f:55:60:27:d5:11:89:92:
01:f9:13:4b:02:0c:f5:44:67:b9:62:bb:8b:fe:6c:
4b:89:11:c7:f8:4c:3f:8f:e4:65:e5:11:9d:21:4a:
f8:c7:aa:b8:4f:74:f1:4b:92:52:8f:7a:27:74:67:
1c:16:bd:ca:e9:ae:28:a2:7b:d7:42:05:a4:d1:58:
30:eb:ba:d0:bb:d1:dd:22:16:d7:ec:69:44:4f:b6:
84:1b:3d:4d:e2:a3:83:e6:89:0a:22:43:94:91:70:
23:6b:54:d7:67:d7:8c:bc:58:bc:c2:4a:5b:df:d0:
08:d5:c0:c1:e1:30:74:77:9f:5e:45:10:59:c1:46:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:25:2C:08:9C:6E:3A:C6:E1:E2:2A:9D:D6:C4:0C:9E:D1:88:82:44
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1d:d7:7c:be:4d:fb:1f:db:0f:e0:1c:f6:5f:9f:a6:99:7d:
e6:bd:1d:e7:8e:27:95:3e:b1:52:3e:00:02:18:cb:f6:a4:9e:
de:92:c1:65:54:00:5c:c0:4c:fd:9d:31:f4:fa:3d:51:80:85:
bc:19:ae:63:68:0f:b2:e1:c2:cd:27:b3:f2:78:e4:9b:48:d9:
2b:5b:7b:f8:87:ed:27:de:aa:14:fe:3b:cf:1e:7a:bc:fa:25:
c1:7f:48:d5:2c:ef:f0:55:11:c9:10:c4:87:3e:da:f6:82:f0:
cf:37:02:b9:5d:d2:6b:ca:3f:c4:47:6d:12:6e:71:36:c3:3d:
57:04:6b:cc:33:9f:24:ea:cf:2e:d3:d1:68:5a:e3:14:62:fe:
b0:bf:34:4e:1c:21:ce:3c:2f:c1:85:ff:af:6d:11:b5:ef:9d:
0b:2b:d9:9b:0d:3c:19:ad:af:c8:d3:6e:2c:bd:c2:1b:dd:22:
c3:30:60:1f:82:0f:bf:23:0c:f2:11:6d:36:de:f6:2b:8c:03:
a8:fe:7b:b0:93:92:8a:d8:28:fd:3a:85:37:5d:22:c3:49:79:
17:07:69:25:3d:f7:a8:4f:e8:f9:d3:67:66:2d:9a:4e:d6:e9:
aa:ca:c3:93:f1:85:72:7c:1b:8b:09:37:de:12:8e:be:7c:6e:
ad:b3:d0:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLBP6SFNaFz7WpksPsW9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMmQ1NTNiMjhjNWQwZWE1YjFlZjYwYzliY2UzM2RmNTBi
Y2I0OTMwHhcNMjYwNzI5MDAwMDIwWhcNMjYwNzMwMDAwMDIwWjAzMTEwLwYDVQQD
EyhmNTI1MmMwODljNmUzYWM2ZTFlMjJhOWRkNmM0MGM5ZWQxODg4MjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAY66l40GC55a7RZnMwgeQhhiAWc
iOqL1epCT4aP2xvbdTgaAQjqb0SbtmgtahHFBCaiVrVQ7y7zRU92O55f2uRV5PU+
7G4ivtxZakrVp5qTLPB8Uv5DWq0efDXC9j3eePZ4jZwfXDR0TcWETqyJizEPTQiR
wZAx0UPJgQo3X1VgJ9URiZIB+RNLAgz1RGe5YruL/mxLiRHH+Ew/j+Rl5RGdIUr4
x6q4T3TxS5JSj3ondGccFr3K6a4oonvXQgWk0Vgw67rQu9HdIhbX7GlET7aEGz1N
4qOD5okKIkOUkXAja1TXZ9eMvFi8wkpb39AI1cDB4TB0d59eRRBZwUZcaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUlLAicbjrG4eIqndbEDJ7RiIJEMB8GA1UdIwQY
MBaAFMItVTsoxdDqWx72DJvOM99QvLSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUt
OTY3NTA2ODg1N2YxLzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUtOTY3NTA2ODg1N2Yx
LzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGx3XfL5N
+x/bD+Ac9l+fppl95r0d544nlT6xUj4AAhjL9qSe3pLBZVQAXMBM/Z0x9Po9UYCF
vBmuY2gPsuHCzSez8njkm0jZK1t7+IftJ96qFP47zx56vPolwX9I1Szv8FURyRDE
hz7a9oLwzzcCuV3Sa8o/xEdtEm5xNsM9VwRrzDOfJOrPLtPRaFrjFGL+sL80Thwh
zjwvwYX/r20Rte+dCyvZmw08Ga2vyNNuLL3CG90iwzBgH4IPvyMM8hFtNt72K4wD
qP57sJOSitgo/TqFN10iw0l5FwdpJT33qE/o+dNnZi2aTtbpqsrDk/GFcnwbiwk3
3hKOvnxurbPQTA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:57 2026 by rpki-client