Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: PVkBhlMqMR5k6GiUZr6HXgaYNB/Fe8LHtvYBljNaBH0=
Subject key identifier: 18:C9:2E:ED:5B:14:80:E6:8A:2C:7F:2F:AA:CB:78:BD:62:08:B3:8A
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019DCE2B8BD0CC28056CD7D1D7BB256E034C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0B17
Signing time: Mon 27 Apr 2026 09:00:53 +0000
Manifest this update: Mon 27 Apr 2026 09:00:53 +0000
Manifest next update: Tue 28 Apr 2026 09:00:53 +0000
Files and hashes: 1: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: FcbV3ZlLjerX7iOoYqyUjR3hbllgiwD/xH0DAmASNq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:8b:d0:cc:28:05:6c:d7:d1:d7:bb:25:6e:03:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Apr 27 09:00:53 2026 GMT
Not After : Apr 28 09:00:53 2026 GMT
Subject: CN=18c92eed5b1480e68a2c7f2faacb78bd6208b38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:ee:7b:d2:18:12:4e:0e:f7:7f:15:28:f9:
1d:38:41:2b:3f:7c:34:06:90:4a:82:d0:79:be:5f:
31:79:99:66:f1:6c:a4:4d:bb:57:4a:00:7d:ab:48:
6e:69:1f:91:fb:84:ec:3d:56:53:88:33:a2:a2:fe:
42:83:65:37:a3:64:31:85:66:53:15:ff:e0:33:e4:
ae:8b:f8:f7:9f:2b:3d:33:bc:74:fe:b3:7a:9a:42:
a9:8e:87:8c:22:b8:36:b6:63:67:19:8e:ef:36:05:
ff:ae:80:03:00:30:fb:cc:34:4b:8f:a3:14:39:72:
ca:72:66:fb:8a:4d:2d:1f:87:74:aa:1c:73:8f:d0:
97:dc:3c:7d:55:2d:e7:17:67:54:46:72:36:db:02:
2e:05:b5:4b:30:00:fd:b4:a8:58:1b:14:ee:92:52:
d5:cf:c3:26:79:59:85:56:9e:aa:d0:06:08:7e:50:
4e:5b:f4:ce:3c:03:d1:b8:97:0d:8d:ea:80:8e:47:
b7:2f:dd:31:fb:02:0c:0e:69:f9:01:49:28:eb:5a:
59:4c:c2:91:19:51:b6:56:c8:59:35:a4:04:c1:a9:
58:40:11:37:33:fc:51:4b:d5:b6:57:d6:37:10:b6:
cd:d6:dd:8f:c9:9a:72:bf:89:4b:e6:0c:54:c4:f9:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:2E:ED:5B:14:80:E6:8A:2C:7F:2F:AA:CB:78:BD:62:08:B3:8A
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ee:c9:59:a2:59:4c:6d:f7:4b:57:b4:c1:a0:93:27:04:16:
db:f5:f8:f5:57:3a:dd:7f:a5:e5:61:27:6c:96:2e:76:c3:62:
6e:79:c2:5f:84:b1:92:d4:f1:20:d9:e0:38:ac:7a:99:ec:ae:
a9:a0:cd:58:42:51:db:88:47:59:01:31:47:92:fd:01:80:22:
fb:7a:4b:d4:48:2c:57:41:ef:f1:4c:99:44:67:90:13:64:d8:
b7:f1:b5:3f:38:c3:c5:cc:1c:99:96:c4:8f:02:33:50:4d:ae:
ff:70:5f:78:2f:63:47:41:28:52:3b:d9:4a:e2:8e:9a:8e:0c:
24:b5:19:4a:98:28:2d:1f:7d:0f:ba:79:3c:19:57:80:13:5a:
72:d8:22:02:36:62:4b:10:8c:75:c1:a3:9c:01:6f:b1:89:4b:
f5:1c:17:15:0e:fc:56:1c:e9:0f:25:c7:bf:ec:79:55:0f:52:
d5:50:29:22:62:ce:8d:e0:5b:d1:a9:79:b5:28:27:c4:7d:45:
63:bd:0f:34:b6:6b:61:1b:c3:fa:61:47:d5:09:39:fb:2d:01:
ba:14:eb:11:cc:2f:5d:8c:af:d9:2a:89:ad:f0:8a:6f:aa:02:
b9:35:3a:ca:e4:df:cd:2e:68:ff:29:d1:36:01:28:c2:20:88:
7c:98:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:20 2026 by rpki-client