Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: rf8AezcJ+BJSEHbYpo1gtIm7lEVM2Kz8WXDDkbysY48=
Subject key identifier: A3:6C:23:35:90:64:71:EB:27:D8:4E:1B:A9:89:AA:00:DE:C4:F1:5C
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 01A172138CC08D9E85A4168F1EB8236DF071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0CFA
Signing time: Sun 25 Oct 2026 08:00:45 +0000
Manifest this update: Sun 25 Oct 2026 08:00:45 +0000
Manifest next update: Mon 26 Oct 2026 08:00:45 +0000
Files and hashes: 1: JlA25F-M7KvAsSDseKudSFRF3HA.roa (hash: gES4kDR6mhGPpQfnhqsx3vEvMQVGKlNZIuooaU01hCo=)
2: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=)
3: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: Fy+ZbKxr582zHFT70vKSXBL3rXrCQYAtvflvRFvvsjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:13:8c:c0:8d:9e:85:a4:16:8f:1e:b8:23:6d:f0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Oct 25 08:00:45 2026 GMT
Not After : Oct 26 08:00:45 2026 GMT
Subject: CN=a36c2335906471eb27d84e1ba989aa00dec4f15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:6c:cd:21:fe:02:64:79:fb:24:e2:35:3b:
a8:35:73:93:11:1b:b2:11:00:ef:cc:b0:e1:83:37:
7c:e2:1e:20:f1:ee:b7:4a:6d:3a:27:a6:6a:d0:cc:
62:00:56:7c:43:04:ae:c4:87:52:b2:4a:f4:28:68:
f7:85:eb:ec:2b:5d:24:0e:f9:63:6c:af:bc:04:b3:
63:80:f8:71:77:5c:8c:c6:6a:38:72:8c:8c:64:55:
b9:bc:0e:58:1e:a2:c9:b7:a0:a0:6d:2f:37:9d:0a:
1e:9f:9d:ae:a4:92:62:45:b0:e0:fb:40:70:35:44:
9c:83:ce:62:e0:66:3e:83:26:19:95:32:8b:de:6e:
b0:01:76:c0:6f:42:b2:ca:fc:ad:fe:91:3f:ae:99:
48:b8:ae:71:30:22:3f:cc:67:92:7e:9a:6c:36:9c:
62:d7:48:b2:a1:f8:c9:55:33:30:df:03:d2:d6:62:
8f:41:56:62:bf:36:6e:e1:b3:96:1c:c0:8d:04:af:
2d:7f:65:0a:59:c4:79:6c:17:50:04:66:a2:80:78:
a1:1a:be:b8:a2:be:3c:31:85:bb:65:ef:b0:85:72:
b8:bf:a7:75:f4:a5:70:3a:86:ba:57:1d:5c:ac:89:
c9:78:0a:2b:f4:b7:c8:c7:bf:43:02:c5:cd:57:b3:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6C:23:35:90:64:71:EB:27:D8:4E:1B:A9:89:AA:00:DE:C4:F1:5C
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4b:65:9a:42:7b:32:61:09:9d:75:69:65:f1:55:2e:5e:75:
f2:e7:5f:6f:34:f3:b4:14:63:5e:b2:d0:2b:8b:aa:59:cb:2b:
f5:68:0b:02:d8:68:ef:df:87:de:a0:f5:2c:eb:48:5e:83:f3:
1a:a1:ed:15:4b:0a:1a:fb:cf:40:9a:a5:1f:04:03:1e:94:83:
ea:e0:4c:85:8e:40:dd:e6:6b:19:ca:cd:55:bd:61:9d:61:4d:
8d:fb:da:8a:e1:ae:9a:e5:e6:86:8e:0e:b8:12:f0:bc:99:91:
c3:99:13:12:b4:01:24:d5:e5:6d:eb:24:a3:91:05:52:fd:14:
59:ca:7e:d3:af:2c:a4:35:b0:54:cc:cf:63:54:a1:fc:f3:74:
3a:d6:61:78:70:35:5b:1e:e3:de:91:ed:03:18:eb:86:ca:cc:
c0:17:16:13:c9:ec:05:1a:e4:2c:cc:4c:2e:5e:73:e2:a0:4d:
29:41:86:e7:f6:9c:05:81:2e:2c:a9:3b:e6:6c:04:4e:c9:1a:
c1:8f:6d:7e:5d:f5:78:4b:4d:44:7b:e2:d5:6a:da:1b:70:04:
fb:34:11:17:5f:c2:c3:4e:a6:4d:f5:b7:ee:eb:51:87:e5:64:
1c:2a:47:e0:5a:28:33:48:b4:dd:61:e6:a9:e2:de:10:2e:f1:
01:b6:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:55:31 2026 by rpki-client