
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: 7JFigEQbZK9GfXuJj3/iWORG47xXSc3bSNiMX+LQDW0=
Subject key identifier: DA:1A:2D:F6:E9:0D:80:9B:6C:C3:A5:A3:29:37:D0:1B:AC:22:00:F1
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 01A0B809D3B4772C987A8B4304EC73659CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 0831
Signing time: Sat 19 Sep 2026 05:00:46 +0000
Manifest this update: Sat 19 Sep 2026 05:00:46 +0000
Manifest next update: Sun 20 Sep 2026 05:00:46 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: nLc5uItjyAcH126XyvhBM0NbWB03+2IYbMBv5js/Jqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:09:d3:b4:77:2c:98:7a:8b:43:04:ec:73:65:9c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Sep 19 05:00:46 2026 GMT
Not After : Sep 20 05:00:46 2026 GMT
Subject: CN=da1a2df6e90d809b6cc3a5a32937d01bac2200f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:9f:b4:30:b6:45:c0:03:c3:34:15:55:97:
1a:23:74:e3:a2:53:0f:5c:1c:97:ff:b3:ab:27:71:
cd:f0:76:19:c7:0c:11:1e:5c:10:82:9b:82:af:a1:
85:1b:53:23:68:8d:4b:9e:32:0e:f1:db:64:8e:d0:
ca:71:24:78:5d:5e:77:44:ca:ae:de:dc:ee:bf:7b:
51:71:cd:41:6a:33:43:be:61:ed:1b:53:ca:6b:0a:
60:c5:36:bb:79:13:c0:61:d2:30:2c:d7:b5:47:c7:
a6:d3:23:bf:8f:2b:4b:ef:03:ae:09:33:43:95:b5:
42:b3:cd:9c:15:59:1d:be:cd:01:6c:81:f3:bf:a8:
0d:d2:0a:36:a8:45:d6:9a:c0:9a:79:bc:02:82:97:
5d:59:16:cc:f6:85:33:ae:5d:04:19:ea:c5:38:b3:
ff:34:8d:0b:c8:50:de:62:3a:86:e5:cd:2b:7c:6f:
e7:3a:83:b7:3f:31:79:26:e1:c5:a4:53:20:03:a0:
42:71:4e:ed:b6:ae:d1:b5:62:95:9f:89:06:03:75:
85:fd:58:df:ad:d4:56:cf:72:29:08:70:be:dc:c2:
50:88:49:e8:f5:30:16:8e:b6:24:3f:ed:e5:0d:10:
63:40:f4:d5:da:02:be:50:28:4b:93:66:36:70:76:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:2D:F6:E9:0D:80:9B:6C:C3:A5:A3:29:37:D0:1B:AC:22:00:F1
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:af:a0:8d:4e:fd:97:06:89:e7:05:24:68:bb:4f:1c:80:9f:
9e:a2:02:e2:17:82:aa:19:4b:56:7a:52:e8:c4:59:3f:c0:4e:
3a:07:62:bd:95:b1:a1:e4:47:c3:8e:37:cc:7e:a2:a7:f6:b4:
41:41:2c:8e:1c:c0:c4:e4:ca:a0:d3:57:66:8c:d9:65:f1:e0:
b3:ec:bd:4c:b8:a1:d5:a9:32:46:1a:76:e1:96:80:4e:75:f2:
c5:2b:89:df:b8:9e:e2:a8:96:d0:24:96:9c:b2:5b:4c:06:17:
ec:42:03:5e:14:10:6b:52:d3:f0:da:ac:80:e9:46:b3:3d:ad:
46:e6:f7:fc:4b:e8:bf:88:8b:8a:c3:79:1e:32:ad:0c:bc:dc:
a6:79:c9:36:03:22:98:d3:fd:56:dd:70:95:20:bd:b1:31:99:
ae:34:53:06:a4:4c:7f:ab:97:fa:5a:44:02:62:92:8a:a5:41:
bd:ad:e7:df:d8:06:d7:ad:f7:ef:c4:9c:95:56:95:fc:b1:aa:
70:f7:fa:c1:78:cc:98:7b:ab:e9:e4:25:a1:23:39:79:8e:a4:
71:49:99:3e:23:0b:07:82:bd:39:69:ac:98:52:f0:2a:8b:47:
ee:9f:8e:6d:a3:72:3e:52:19:37:54:b7:97:74:4f:f4:a5:f5:
76:bf:55:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC4CdO0dyyYeotDBOxzZZzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh
N2IyODgwHhcNMjYwOTE5MDUwMDQ2WhcNMjYwOTIwMDUwMDQ2WjAzMTEwLwYDVQQD
EyhkYTFhMmRmNmU5MGQ4MDliNmNjM2E1YTMyOTM3ZDAxYmFjMjIwMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJiftDC2RcADwzQVVZcaI3TjolMP
XByX/7OrJ3HN8HYZxwwRHlwQgpuCr6GFG1MjaI1LnjIO8dtkjtDKcSR4XV53RMqu
3tzuv3tRcc1BajNDvmHtG1PKawpgxTa7eRPAYdIwLNe1R8em0yO/jytL7wOuCTND
lbVCs82cFVkdvs0BbIHzv6gN0go2qEXWmsCaebwCgpddWRbM9oUzrl0EGerFOLP/
NI0LyFDeYjqG5c0rfG/nOoO3PzF5JuHFpFMgA6BCcU7ttq7RtWKVn4kGA3WF/Vjf
rdRWz3IpCHC+3MJQiEno9TAWjrYkP+3lDRBjQPTV2gK+UChLk2Y2cHZNDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoaLfbpDYCbbMOloyk30BusIgDxMB8GA1UdIwQY
MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It
MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy
LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6+gjU79
lwaJ5wUkaLtPHICfnqIC4heCqhlLVnpS6MRZP8BOOgdivZWxoeRHw443zH6ip/a0
QUEsjhzAxOTKoNNXZozZZfHgs+y9TLih1akyRhp24ZaATnXyxSuJ37ie4qiW0CSW
nLJbTAYX7EIDXhQQa1LT8NqsgOlGsz2tRub3/Evov4iLisN5HjKtDLzcpnnJNgMi
mNP9Vt1wlSC9sTGZrjRTBqRMf6uX+lpEAmKSiqVBva3n39gG163378SclVaV/LGq
cPf6wXjMmHur6eQloSM5eY6kcUmZPiMLB4K9OWmsmFLwKotH7p+ObaNyPlIZN1S3
l3RP9KX1dr9Vrg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 07:38:08 2026 by rpki-client