Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
File: wIi1a9ngFvm8Uhr03CSebRJWsd8.mft (raw, json)
Hash identifier: ER9T0IlroLojVjqAdR9Es545G7H38vJXYh9IF5VQg/0=
Subject key identifier: 28:EA:9C:8C:A9:1D:89:FC:5C:3E:B5:F9:C9:79:23:CF:49:30:E5:59
Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
Certificate issuer: /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Certificate serial: 01A15DE86CE416E9AEE97E110309FCD90040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
Manifest number: 1AB8
Signing time: Wed 21 Oct 2026 10:01:15 +0000
Manifest this update: Wed 21 Oct 2026 10:01:15 +0000
Manifest next update: Thu 22 Oct 2026 10:01:15 +0000
Files and hashes: 1: 84LpmG68F7Kl-A8fwrFLp1ZbLKk.roa (hash: 2XJZi7mXa4opeuJIyNfWmpTnxGxuMecCcsVg8EKeWbU=)
2: kNoTU_DDr3ySeIp3kzeqTRzy7WU.roa (hash: wiygXWg117FYrb4QXRydtTU624Ret1FMbW/7q/ighUY=)
3: wIi1a9ngFvm8Uhr03CSebRJWsd8.crl (hash: MxbgCmcRIYE8nfmuwWwf/FYe5jgSh3g63PPOrL9RJok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:e8:6c:e4:16:e9:ae:e9:7e:11:03:09:fc:d9:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Validity
Not Before: Oct 21 10:01:15 2026 GMT
Not After : Oct 22 10:01:15 2026 GMT
Subject: CN=28ea9c8ca91d89fc5c3eb5f9c97923cf4930e559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:e4:a3:e7:e3:f3:da:9e:0b:70:40:01:ee:
f1:8b:9e:4d:3d:f9:1f:33:f0:d4:ab:e4:f9:45:01:
c5:29:21:a6:3f:29:e6:8a:14:a1:2e:ed:8c:e9:67:
c2:3e:8d:62:9f:bb:74:7c:70:be:0a:15:c8:db:ec:
ec:39:4f:45:8c:2f:53:fe:0d:45:44:43:f5:86:b3:
46:c1:02:96:32:3b:f0:dc:d0:92:e0:40:a9:d3:d3:
38:c2:3a:7f:29:24:03:04:99:35:84:d2:75:df:31:
25:3b:dd:56:e0:61:3c:4e:3c:7c:83:a9:c5:11:0a:
af:da:17:92:5b:ed:28:81:38:d2:58:0f:d0:1b:d8:
55:78:c4:55:72:90:a1:fe:1b:3e:82:32:a0:b8:1e:
8a:fe:17:56:eb:e5:8c:8f:ca:45:17:74:ad:c8:fa:
30:09:46:58:2b:bf:c0:4d:0a:a1:72:17:7e:40:21:
15:7f:e1:0b:12:ea:ed:c0:4a:ce:d5:fa:19:c8:78:
63:20:f9:f6:8a:74:40:70:4e:3f:05:6d:ae:fd:58:
8b:e8:51:e5:fd:38:b0:0a:ed:40:50:a3:84:af:5b:
f4:26:9f:c7:e8:d3:0a:c0:8d:9d:3b:29:52:4f:d5:
bd:2f:d9:35:00:cd:99:54:65:bf:59:7f:47:13:03:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EA:9C:8C:A9:1D:89:FC:5C:3E:B5:F9:C9:79:23:CF:49:30:E5:59
X509v3 Authority Key Identifier:
keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a7:ed:c6:5d:f1:be:25:a6:25:5f:e7:a0:f3:35:49:9f:9f:
e2:b3:2c:9e:03:14:21:b7:77:b5:c5:53:94:0d:df:6e:86:a5:
21:d9:0c:98:e4:ba:33:b1:81:5c:66:fb:15:a1:0b:1a:78:eb:
f2:87:4d:b2:eb:c7:8e:6e:14:4e:cc:df:e2:ac:70:e3:5a:7b:
d5:56:57:a4:08:01:55:46:87:99:52:41:23:76:8e:dc:a7:cb:
37:c5:84:3c:a4:f0:bb:2b:e6:d7:b2:07:5d:32:5b:92:56:9e:
a7:d7:aa:51:90:64:5b:80:d9:53:15:35:98:87:34:a6:92:90:
83:11:c4:04:c5:3f:63:17:79:74:3e:56:6d:12:ab:f7:87:90:
a2:ea:9a:34:4f:17:75:ac:db:90:69:c4:e2:f4:ff:5c:2d:f4:
27:65:47:e9:1f:b9:fa:30:2e:d5:28:de:0d:c7:96:d7:c5:49:
54:f3:26:6f:5f:18:6e:15:dc:ab:db:e4:1c:54:93:0c:b5:02:
8c:cc:96:ff:41:4e:9f:55:88:0a:65:9b:ee:c2:5f:ee:26:c8:
1f:5f:00:22:0e:36:6a:44:0b:8f:79:eb:68:be:30:57:b9:a9:
db:42:63:9e:61:a4:01:32:e3:d7:e1:20:c7:3c:44:a6:f9:95:
cb:ea:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:21:27 2026 by rpki-client