Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: U4Iskd892HrM6YJ/h1Lh11L91NVD6Nwa3IAuNSoVFYA=
Subject key identifier: C3:29:16:EF:CE:4B:C7:D2:48:DD:1A:11:3E:AA:0C:09:8C:5D:57:2F
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019DFB048A2F626909D2017EB72696A7D756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 06C6
Signing time: Wed 06 May 2026 02:01:11 +0000
Manifest this update: Wed 06 May 2026 02:01:11 +0000
Manifest next update: Thu 07 May 2026 02:01:11 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: vhVjpKEAY9sMSy0CIZHynCP8j0nbZb6GMXvONAbwC5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:04:8a:2f:62:69:09:d2:01:7e:b7:26:96:a7:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: May 6 02:01:11 2026 GMT
Not After : May 7 02:01:11 2026 GMT
Subject: CN=c32916efce4bc7d248dd1a113eaa0c098c5d572f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:fa:bd:4d:ec:0c:0e:06:69:cc:8e:5c:ec:
27:a7:ab:3b:e8:b0:7b:23:a5:b7:ab:25:43:bd:ae:
3d:5d:a8:29:3d:2f:3c:8a:e1:22:13:bb:c8:ae:f9:
00:ab:61:5a:ab:a0:3e:e3:69:0f:8b:5c:8a:98:63:
a7:3b:23:36:84:73:29:c1:50:8d:44:9d:23:38:32:
7f:73:6b:76:df:cb:06:88:6c:18:94:87:ef:da:1b:
66:26:9c:dd:fc:29:07:8b:4d:29:99:04:b8:9e:6c:
4a:0a:a5:6b:7a:34:f7:1e:25:ad:f5:a2:88:75:d4:
a0:01:83:e5:d4:e4:10:55:8a:e9:26:72:9f:77:34:
84:75:44:6c:62:98:6f:01:ec:37:a8:ea:ce:ca:e8:
5f:2a:5c:ba:72:6e:ee:ea:0d:bc:25:02:5f:3f:db:
84:d8:6b:1a:a1:44:13:b0:d8:04:55:76:b6:5b:a9:
62:6b:93:8b:5c:02:fa:8e:5e:af:78:c8:a5:64:ac:
10:3e:2b:ab:cb:53:10:3f:40:c6:3c:27:ef:f8:17:
45:d2:a3:e2:e5:87:dd:83:6d:f4:15:51:ac:5e:57:
3b:d6:11:8f:e2:22:9f:e3:fb:b3:3a:e9:5f:30:ab:
83:4e:cb:fb:09:47:d8:1a:5e:68:23:09:d6:be:cd:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:29:16:EF:CE:4B:C7:D2:48:DD:1A:11:3E:AA:0C:09:8C:5D:57:2F
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:af:9a:0e:34:94:35:a5:d9:70:b0:d7:40:5d:a4:d2:7c:eb:
aa:95:60:f0:0e:00:c9:78:60:9e:4f:2e:cd:56:b2:62:3b:93:
2c:86:ef:ff:42:ff:42:b7:0d:03:ea:c5:54:8b:df:28:5e:e6:
3d:f6:43:74:9c:c5:11:0f:0f:b4:b9:b4:69:2b:38:75:63:46:
1d:30:9e:2d:55:9d:b2:db:15:b2:8d:96:fa:fc:5b:34:76:90:
8e:95:51:1c:77:68:6f:42:58:c3:29:94:5b:0a:a6:91:9a:a2:
62:20:cc:dc:37:af:82:8d:45:60:64:90:76:8c:98:4d:96:e4:
25:5e:a7:6e:3b:e8:92:72:68:92:63:b0:a7:38:21:d1:cb:34:
ae:18:a5:56:e5:bb:fe:94:9c:5f:eb:d3:1f:5b:0b:8f:69:f2:
02:59:3f:78:ae:b7:fc:6e:b8:db:30:6d:3b:1e:91:02:1b:31:
f5:f2:5a:67:dc:b9:4c:8f:f2:7f:d8:3c:c5:9f:20:3f:26:fb:
54:ab:54:e0:83:30:1c:b7:84:ce:41:fc:9e:63:05:dd:69:fc:
cd:0c:57:c6:dc:b0:ea:bb:a2:81:cb:eb:fa:ba:6e:41:ca:cb:
96:c7:91:b8:c8:39:3d:d0:5c:e7:94:92:13:d6:e8:69:b7:ee:
e5:9e:99:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 06:29:34 2026 by rpki-client