Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: QRzQx03mDfKYdkYwyJLOGPQkKiNLZefXthTOag0B5TM=
Subject key identifier: E4:DB:56:28:B8:A2:BB:D6:DF:0E:6E:F1:E1:A0:D9:E8:37:34:6D:DD
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 01A00394268D6A1926F0889490314373CD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 0588
Signing time: Sat 15 Aug 2026 04:00:35 +0000
Manifest this update: Sat 15 Aug 2026 04:00:35 +0000
Manifest next update: Sun 16 Aug 2026 04:00:35 +0000
Files and hashes: 1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
2: YqUy-2uDfgXpnjgU2fM9WjwgKlk.roa (hash: pQwXSl0mgcHIVKIbRMPhoOPInhtMVGSj+x6QMvyXQK0=)
3: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: XMg8t8VOCj3Xej0IBbNUcQkm9MccKZfJ+PEz/kAZJNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:26:8d:6a:19:26:f0:88:94:90:31:43:73:cd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Aug 15 04:00:35 2026 GMT
Not After : Aug 16 04:00:35 2026 GMT
Subject: CN=e4db5628b8a2bbd6df0e6ef1e1a0d9e837346ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:3f:bf:a5:a4:2a:83:60:48:95:e9:9d:08:
90:12:aa:d6:37:0a:60:60:4d:9d:c0:f7:72:59:63:
5b:5d:d4:03:d6:e5:26:0f:cc:01:8f:81:c6:dd:b3:
e0:6a:c8:19:8e:d3:e3:bb:fa:99:6d:1e:7c:11:5d:
85:9c:2c:0e:51:f7:83:09:65:e4:60:58:71:b5:42:
db:0b:91:db:21:85:7d:7c:92:d2:f9:aa:57:09:b6:
44:04:b4:a1:12:6f:51:17:00:ec:84:2e:63:97:f4:
7e:84:13:02:24:33:f0:12:0b:ea:e7:cf:eb:2d:29:
fb:a4:1f:8a:dd:23:01:4c:22:b9:f4:da:09:92:52:
e5:85:d4:7c:ef:1e:b7:ba:b0:15:e2:78:5d:f6:86:
74:26:69:e1:e2:b2:54:92:64:33:43:8a:25:a8:09:
97:40:f4:84:41:f5:2a:b1:fa:4d:4b:eb:57:22:e1:
5c:18:1b:7b:9f:c9:fd:b3:b7:b4:48:76:8c:d5:d5:
0b:ec:83:64:1d:33:b8:b7:c6:35:9e:8b:53:a5:37:
82:c2:92:ac:e2:ff:2a:03:c1:30:f1:e4:69:fc:37:
75:13:b9:45:7c:2b:05:22:43:19:ac:5f:97:e5:db:
49:fc:81:bd:27:12:45:55:a5:f0:fe:5f:a4:3f:73:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:56:28:B8:A2:BB:D6:DF:0E:6E:F1:E1:A0:D9:E8:37:34:6D:DD
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d6:45:e6:24:27:95:ac:4b:bf:d0:29:e9:0a:e7:07:d8:15:
20:f0:39:87:51:50:07:58:25:8f:c7:98:3d:ed:3e:5a:51:2e:
90:a6:f3:d8:9a:94:86:65:1e:6d:23:22:0e:8a:f9:72:3c:ed:
0c:fc:cc:0f:ee:7d:23:51:56:20:86:cc:ac:f6:d0:75:c8:53:
4a:f8:15:a5:9a:0f:93:29:c3:38:07:e3:c5:26:c7:c4:1f:70:
fe:60:dd:87:09:79:15:26:14:76:58:16:fb:c7:d8:fe:e6:17:
2f:3e:c4:cc:81:4f:ce:b9:d1:53:eb:14:14:5f:25:5a:47:39:
db:50:82:20:59:39:4c:1b:15:10:4f:dd:c2:05:c2:71:af:06:
e8:59:5a:aa:04:ca:e7:55:8c:ab:05:6d:fe:92:37:9e:4f:6e:
be:58:3e:d4:40:6b:4f:7d:96:b6:bc:54:20:17:78:12:12:2f:
82:67:4c:9a:77:d5:ec:7f:7b:0e:eb:42:2b:ce:e6:c1:09:b4:
c3:ca:57:d5:e3:33:68:99:25:08:74:39:ed:92:5d:ef:fa:1a:
1e:9e:5c:64:5b:a0:23:f7:4d:b5:22:35:75:d8:9e:d8:5e:8d:
c0:1b:6a:2f:62:8b:d3:7f:e7:79:b0:1f:36:b7:29:38:80:e9:
76:7d:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:55:27 2026 by rpki-client