Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: NMCICCrjc/hLbHAUg8l0tD6AX64UsJk+dPFoTx3U7VM=
Subject key identifier: B3:41:B9:AF:49:74:B2:9F:E2:DD:2D:5B:0C:02:31:72:30:33:9A:06
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 01A17401F7F1FC7A29B8DF030D759BD0C3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0CFB
Signing time: Sun 25 Oct 2026 17:00:48 +0000
Manifest this update: Sun 25 Oct 2026 17:00:48 +0000
Manifest next update: Mon 26 Oct 2026 17:00:48 +0000
Files and hashes: 1: JlA25F-M7KvAsSDseKudSFRF3HA.roa (hash: gES4kDR6mhGPpQfnhqsx3vEvMQVGKlNZIuooaU01hCo=)
2: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
3: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: HpxyLnmZ3iLX+qqcpZ2Fu933mRzfA0vyXVZjP4q7LtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:01:f7:f1:fc:7a:29:b8:df:03:0d:75:9b:d0:c3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Oct 25 17:00:48 2026 GMT
Not After : Oct 26 17:00:48 2026 GMT
Subject: CN=b341b9af4974b29fe2dd2d5b0c02317230339a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:b4:25:84:d4:2c:d8:f6:c0:02:1f:f9:fd:
0c:04:b2:81:d6:8e:2a:04:2d:97:e6:49:ba:84:3d:
91:31:f6:46:c6:bd:36:f3:8e:d3:25:36:35:3a:ce:
05:7e:01:02:a7:e3:11:fd:ed:c9:7f:43:68:4d:1d:
ca:11:5d:48:4f:7b:bd:f6:57:88:6f:ed:42:6c:8c:
14:85:e7:6d:3f:ce:89:7a:30:6f:cb:10:ab:fe:d2:
86:11:a7:30:72:57:c8:c4:6e:17:0a:b9:49:87:2a:
41:16:37:5a:88:e7:fb:db:5c:bf:52:52:a9:43:c0:
7c:6e:57:5d:4f:06:9b:c6:58:e2:06:66:e3:ad:9f:
f0:84:7b:c9:6f:94:da:53:9e:34:8a:da:81:0b:7e:
f3:1e:c0:49:91:12:d8:eb:30:40:56:1f:51:68:9d:
9a:ad:c4:aa:49:24:a8:3b:58:bc:69:dc:94:57:4d:
57:e1:a7:e0:a8:8a:47:3e:8b:75:0d:28:de:d8:50:
22:ec:d9:cf:d9:e7:e8:3b:e4:0e:0e:dd:de:5f:9a:
4e:e7:a0:6c:5f:7c:04:ff:8b:1f:d9:09:92:4d:dd:
0a:2f:52:35:b2:63:c7:be:69:c9:96:26:af:bb:c8:
e1:8d:0f:08:81:08:0a:7b:71:58:0f:06:b1:7d:6c:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:B9:AF:49:74:B2:9F:E2:DD:2D:5B:0C:02:31:72:30:33:9A:06
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dd:bc:86:bc:c5:16:7f:36:d2:65:72:5f:86:eb:3d:0f:bf:
70:e9:b3:3a:84:ff:9f:53:41:f2:5c:57:0e:73:b0:07:53:17:
ff:4b:b9:ed:bc:7a:ae:8e:4e:ca:5a:06:8e:25:48:96:89:f2:
76:a8:d8:07:f6:9b:db:4e:12:77:dd:a1:33:df:e0:04:0c:60:
3c:46:a1:7a:60:fb:2a:da:a4:0a:52:2a:a7:80:8d:42:c4:1d:
81:bb:ba:e3:ed:c6:b3:59:96:f1:0f:7c:75:ea:01:1e:4d:6d:
29:f9:1a:7d:15:03:15:d6:11:8d:09:0e:b7:82:b4:82:21:c5:
4c:62:82:10:f2:53:cc:e2:64:b4:57:27:83:ea:a1:a0:3a:ee:
06:ca:b3:1b:5d:0e:85:c6:06:24:70:79:b1:73:2e:59:c2:18:
b5:0c:da:5c:37:af:aa:38:41:c6:49:b7:83:3e:3f:75:c7:0e:
69:16:93:35:18:9e:be:25:68:87:fd:80:4b:b4:78:7e:cd:65:
f8:56:1b:e9:b0:91:a9:89:47:4d:f5:86:87:96:8e:85:3b:ce:
25:dd:f7:9a:b6:25:65:d5:44:f4:cd:0d:a1:fd:77:ea:2c:95:
a4:27:23:f6:12:ce:a5:e0:10:8c:5a:de:d1:17:fb:9c:83:2b:
7c:00:8d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:09:01 2026 by rpki-client