Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: jAW/F24B6WpGLMB7ek8QFWiZwg2amKIQ7bFXhTKmPu8=
Subject key identifier: 1F:3C:A5:D5:7B:35:C2:93:E7:AA:C0:89:A1:7D:C5:6F:C9:76:C5:A2
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 01A1DD94AA756BD28A2A6551336647F4B918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 08C9
Signing time: Sun 15 Nov 2026 05:01:10 +0000
Manifest this update: Sun 15 Nov 2026 05:01:10 +0000
Manifest next update: Mon 16 Nov 2026 05:01:10 +0000
Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=)
2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=)
3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: 6DLkpULRVHVmgAld82r7PAEpgK04eVtyYaN5IX+FKvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:aa:75:6b:d2:8a:2a:65:51:33:66:47:f4:b9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Nov 15 05:01:10 2026 GMT
Not After : Nov 16 05:01:10 2026 GMT
Subject: CN=1f3ca5d57b35c293e7aac089a17dc56fc976c5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:55:31:96:f2:20:62:77:ac:50:fb:4a:c3:
5b:e1:89:03:e7:67:74:56:cf:99:6a:49:75:40:f6:
c2:4e:9f:52:ed:d3:c7:e6:35:2f:86:f8:8a:7d:45:
7d:ee:81:8f:27:46:97:60:27:f9:ec:76:f7:c6:ea:
e4:6c:15:55:30:5c:8c:d5:61:d6:ba:5a:62:a2:67:
99:38:df:cd:49:dc:84:bc:95:1e:42:7d:48:46:5a:
04:e4:01:ef:ae:01:d9:d8:a4:c0:c7:c8:24:d0:a8:
ce:8d:77:a4:ef:c3:51:2a:0d:14:ce:89:7d:36:fc:
4f:f0:27:70:32:96:91:fc:47:36:24:ca:7f:3e:38:
fc:58:c1:b0:40:87:0a:d4:9c:25:3c:df:de:26:4d:
c5:20:e4:75:b2:b2:81:35:4b:d3:c7:ea:df:ee:89:
40:02:ee:92:b6:09:81:50:42:4a:6b:36:93:9c:bb:
13:06:bc:ed:bb:07:1a:2e:39:ca:25:2e:27:59:4c:
ee:5c:a7:27:ca:c5:94:d3:8b:3f:f5:ea:79:56:c5:
a6:9a:89:04:1d:b7:7c:01:87:0c:48:c3:88:c5:bd:
38:33:63:ae:4c:5d:6c:fb:bd:cc:d7:e1:6c:46:ae:
1c:87:3e:bc:22:7a:00:98:5a:d5:0f:26:d1:18:8f:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3C:A5:D5:7B:35:C2:93:E7:AA:C0:89:A1:7D:C5:6F:C9:76:C5:A2
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cc:1a:68:5b:96:58:49:29:e4:f2:1d:87:23:31:a1:08:54:
a9:47:1a:69:60:f6:24:73:7f:ce:20:6e:a4:59:59:90:6a:bd:
00:b2:01:49:ac:11:2b:1a:76:50:52:11:f5:5c:86:71:0f:84:
67:bf:00:e6:ef:b0:81:40:04:3f:28:26:5e:62:34:d6:90:e2:
7a:41:63:33:7e:d7:fc:26:8f:3c:dc:42:ed:a4:a9:c1:bd:b2:
d5:1b:0f:70:ae:f3:2c:bc:5c:09:6d:68:96:4c:85:02:67:6c:
49:58:05:f0:04:21:cc:14:ce:19:10:54:d8:60:1c:a6:24:e1:
58:69:c4:9a:39:cf:20:5b:dd:ac:5c:63:0b:e4:a8:64:06:9b:
e8:2f:52:52:25:c3:2a:d5:0f:aa:d1:14:dd:b3:97:ad:5a:1c:
f4:ff:61:a5:92:b7:d0:68:37:ff:7a:54:66:bc:92:ba:ae:99:
a9:d7:2b:48:2a:67:80:90:e9:00:a9:a2:ac:94:3e:92:5c:d8:
58:7f:72:2e:73:89:c7:b9:0f:65:2c:39:40:e8:22:ea:dd:cf:
db:aa:92:83:84:80:cf:11:e9:ca:40:d5:5b:67:53:b0:cb:eb:
43:59:57:b2:aa:70:40:4a:c9:b6:9d:fc:06:a5:95:81:da:3e:
3c:13:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:29 2026 by rpki-client