Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: EIZ54LIjvtETAbU/BKG+gBkh4wyyNbCRKt84xGEb6/g=
Subject key identifier: 4A:D1:91:E3:2E:14:C3:53:EB:C9:1D:83:C8:2A:AE:54:76:A1:54:DF
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019FA296F3C66835197C78EA844609E2332A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0C0A
Signing time: Mon 27 Jul 2026 08:00:29 +0000
Manifest this update: Mon 27 Jul 2026 08:00:29 +0000
Manifest next update: Tue 28 Jul 2026 08:00:29 +0000
Files and hashes: 1: JlA25F-M7KvAsSDseKudSFRF3HA.roa (hash: gES4kDR6mhGPpQfnhqsx3vEvMQVGKlNZIuooaU01hCo=)
2: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
3: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: 1jLrZSN9e4PkhsLdqn2Inf67D0gCzmXrUGc7VZCkmWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:f3:c6:68:35:19:7c:78:ea:84:46:09:e2:33:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Jul 27 08:00:29 2026 GMT
Not After : Jul 28 08:00:29 2026 GMT
Subject: CN=4ad191e32e14c353ebc91d83c82aae5476a154df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:bf:50:fe:b2:3e:6b:73:bb:27:1b:17:5f:
2f:b2:ed:a9:33:2c:6d:66:65:0b:6b:fb:3f:64:cd:
1a:d0:40:68:7e:af:7a:3a:d7:3a:5b:13:a4:2b:7e:
b9:e3:78:09:ca:6c:34:0a:9d:36:0b:80:0e:bf:8b:
39:27:d6:ea:b8:27:36:d5:82:fe:b4:60:ef:78:d4:
1a:bc:8b:d2:be:11:2b:26:08:63:0f:44:c1:d5:de:
4d:4a:ff:4b:b3:31:97:cb:b1:9b:a8:58:a7:5e:4d:
75:67:69:6d:f9:05:ca:6e:56:5b:9d:e1:86:4a:c1:
89:5f:96:23:8d:3b:8e:c1:2c:30:a2:29:c8:21:e4:
fb:a1:6e:f3:87:a9:c1:0a:e2:e0:24:ed:45:22:bd:
e0:e2:76:5e:e2:18:eb:c8:7b:89:85:78:8a:d8:8e:
e3:ac:39:88:35:88:16:36:98:2c:92:6f:be:5b:05:
fd:ca:18:b5:9f:f2:3d:40:2b:fb:77:54:ad:65:6d:
ac:ab:f0:a9:21:05:ac:2a:b3:3a:d8:e0:d9:f1:07:
a5:25:7f:ba:64:c2:3a:d5:95:a7:4e:8c:7c:2f:22:
7e:78:99:39:14:79:17:50:70:6f:cf:e4:ec:fb:c6:
c0:9c:67:f5:b2:63:a9:72:d2:2c:12:88:17:bd:d8:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:91:E3:2E:14:C3:53:EB:C9:1D:83:C8:2A:AE:54:76:A1:54:DF
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:8b:25:08:20:3b:fa:fb:27:f8:46:37:6a:d6:6f:93:19:
1a:c5:dd:e0:51:0f:1b:2d:8f:6a:fd:6c:f1:9a:dc:99:ff:cd:
ee:08:b9:68:41:da:f8:1e:5a:18:dd:9a:80:b2:57:4c:5a:e7:
b3:0d:f7:2a:5c:b3:26:44:b3:c0:eb:e8:b8:9c:4f:e4:c7:d8:
1e:4c:46:01:21:c6:5c:e2:49:10:95:7d:e3:b6:77:f7:dc:98:
bc:b0:47:2b:0d:18:5f:50:d2:1d:76:a5:21:87:ff:7e:e4:a2:
93:39:5f:84:a9:61:10:8e:f5:2d:55:e4:df:ce:29:50:54:7b:
9a:3a:8c:7b:c9:e9:f8:b2:e3:b2:c5:d6:0c:61:fc:2c:ab:c2:
5f:54:b3:de:ba:45:76:db:aa:78:36:ae:9d:f5:4d:c3:cd:0b:
21:10:c4:26:18:d0:15:84:6a:16:5a:e9:0e:4e:40:a8:67:bf:
71:48:7a:86:37:eb:dc:76:e3:15:f4:95:df:4b:28:35:83:9a:
69:1f:15:0f:37:59:13:a3:33:e4:c7:49:3c:03:83:34:99:1b:
51:35:22:b4:18:d5:a1:66:86:97:50:66:b3:50:20:fe:37:97:
4f:36:73:cf:37:c7:8b:22:7b:94:72:2c:e1:a0:10:3c:b4:86:
40:c7:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:03:58 2026 by rpki-client