Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: JkGV7L/2cV4IuHMIdE5IIwvZNNHtowRJcyY2ympxjmY=
Subject key identifier: 0B:82:49:46:AC:DA:28:F7:EE:71:12:E5:B8:FE:D7:DE:D1:3B:E8:86
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 01A1626A02CFD99D90FC431237AC7447379A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 1539
Signing time: Thu 22 Oct 2026 07:01:16 +0000
Manifest this update: Thu 22 Oct 2026 07:01:16 +0000
Manifest next update: Fri 23 Oct 2026 07:01:16 +0000
Files and hashes: 1: 2sXpeJGs67EM5ns-zJQBcUYxKDc.asa (hash: puRkCC1zHNpksWQuVwcp5iNFdpOsHJNyqZUYboDdAAM=)
2: 89iIC1P2vMZINfnDPEVYBrG5YNo.roa (hash: RLgR4UZD50FWkZGgPH0onW3VFJjF0TSQi+7anqzbUoQ=)
3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: gGveUlDWTQIddMBfYpKFHKzFql1IWUqGTJcipO1hsPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:6a:02:cf:d9:9d:90:fc:43:12:37:ac:74:47:37:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Oct 22 07:01:16 2026 GMT
Not After : Oct 23 07:01:16 2026 GMT
Subject: CN=0b824946acda28f7ee7112e5b8fed7ded13be886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:e3:29:02:8d:e6:53:55:7a:03:9f:f8:57:
38:c8:a6:88:63:78:29:ed:b8:6d:ce:d4:30:81:ec:
36:ca:54:0a:2f:79:e8:09:42:7a:74:2e:a7:84:9b:
4f:2e:a7:24:90:78:4a:e1:b0:8f:13:b9:9a:5b:4e:
42:3d:3b:03:ac:8b:fd:46:27:20:6c:f1:56:65:07:
c8:b4:01:e7:84:86:6d:06:ba:0e:dd:02:56:40:7e:
cc:e2:42:72:25:af:cc:a9:04:0a:cc:a6:cd:d5:49:
86:d5:87:fa:cd:bf:ec:f4:90:2a:e8:a8:08:bb:46:
3d:56:37:43:6b:aa:56:e9:23:45:de:bf:ba:61:c1:
9a:29:ee:2e:72:89:63:bb:e5:22:d4:d6:93:f9:73:
b4:44:cd:91:aa:90:a6:d8:39:0a:d2:a5:7f:38:02:
51:63:33:11:b1:73:8a:51:ce:42:12:ca:ed:4a:26:
de:9c:f5:cd:e7:66:e3:79:88:08:e6:e5:aa:d5:7e:
41:cd:a3:49:25:3e:a4:a0:e0:21:ad:74:10:cb:30:
58:3b:a7:d6:01:fa:df:88:46:45:71:46:e2:87:3b:
41:da:c6:9a:78:48:ec:8d:cb:c5:7c:75:11:22:fe:
d2:28:36:2c:a8:02:44:83:38:c2:32:a5:40:31:79:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:82:49:46:AC:DA:28:F7:EE:71:12:E5:B8:FE:D7:DE:D1:3B:E8:86
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a1:5d:28:c6:cc:29:dd:95:58:29:c0:4f:75:0f:0e:b4:aa:
24:28:7d:f8:f4:3a:3f:e5:2d:48:7a:23:e2:72:c0:0d:4c:b7:
9c:fa:46:05:be:13:c3:f8:8d:62:16:56:67:95:43:ad:c5:4c:
df:57:70:8a:32:4e:12:88:7f:35:9d:6b:4f:10:89:ca:62:34:
4f:a0:09:41:84:95:99:74:d7:34:66:b2:2f:79:47:60:e7:be:
bd:5e:7e:a7:68:67:1d:f9:3b:61:02:e9:f1:4f:4d:2d:0c:ab:
f0:7f:6b:11:a9:25:92:f4:9e:b1:4c:94:c9:9e:7b:15:ef:a5:
88:a4:e2:e5:b7:34:14:84:5b:63:78:1a:5e:10:eb:e5:d6:50:
d8:49:f1:e6:06:99:40:a4:00:d2:c5:03:ef:16:86:91:13:46:
b2:43:fa:22:38:b8:2a:88:0b:7a:d1:6e:02:4e:8d:51:3a:cd:
4c:05:a4:4c:7f:16:b7:65:ed:55:df:89:67:c0:b4:68:f4:1a:
ae:1d:44:2a:65:97:91:1c:31:c0:93:0d:69:be:b2:be:6b:5a:
c0:33:3e:47:66:cc:68:bc:03:d0:ba:81:cf:8c:03:de:b4:0e:
06:22:9e:4c:8a:cf:2b:4a:3d:67:4f:21:d7:ed:9d:02:95:50:
8b:3a:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:51:21 2026 by rpki-client