Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: /aWxzosPvuv/wTqNY1UiY4uu0x6fewBoRRWVmDuYwo0=
Subject key identifier: 14:E8:0F:FC:D4:4C:05:E9:BE:2E:A9:43:F8:4D:45:86:F7:6F:3E:12
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019E28EF7F021D4D3F1D1DF8062422B90ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 1209
Signing time: Fri 15 May 2026 00:00:44 +0000
Manifest this update: Fri 15 May 2026 00:00:44 +0000
Manifest next update: Sat 16 May 2026 00:00:44 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: 3uboBDSAWbyoaE3Rbm4tidZ0ezE6nUdiNvN5pWbevEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:7f:02:1d:4d:3f:1d:1d:f8:06:24:22:b9:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: May 15 00:00:44 2026 GMT
Not After : May 16 00:00:44 2026 GMT
Subject: CN=14e80ffcd44c05e9be2ea943f84d4586f76f3e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:40:37:f8:57:76:b4:23:a8:a7:7f:65:f7:
35:ba:cf:0a:aa:be:17:13:72:04:5e:33:4b:3a:77:
79:45:b7:0b:f8:2e:dc:7d:98:85:3a:b4:27:e2:44:
23:ba:06:00:24:57:54:9e:fe:93:e9:e3:68:80:81:
7b:fa:df:b2:ea:de:41:74:ae:b4:2b:08:5a:25:b5:
92:44:59:fc:e9:4f:f0:93:d2:7c:e0:56:c9:9a:59:
c9:44:1f:43:b4:e0:18:98:ab:e4:37:cd:b5:9d:d5:
bb:13:ef:39:a3:32:e7:fb:f8:e3:7b:41:93:44:52:
67:86:fe:0f:3a:a7:df:ac:d0:1f:97:ee:ba:30:87:
fc:bd:b1:a1:8b:a2:18:2a:75:9b:50:95:66:af:a6:
5d:68:5c:27:b7:3b:88:92:1a:b7:e1:29:b4:20:d1:
0d:c2:1e:b5:fe:6e:39:87:3d:d0:12:c9:89:c9:a2:
1c:bd:89:9d:06:cb:e7:2b:81:46:bf:3c:69:6f:4a:
be:31:fe:fb:e2:7f:6e:8f:21:41:40:50:97:84:55:
72:a1:7d:d2:b9:39:c7:3f:10:4c:46:b6:dd:5d:0e:
b6:f8:1b:47:e0:51:dc:b8:a2:2a:30:7c:fc:9f:47:
13:c6:8b:d0:2d:83:ea:13:94:9d:7e:58:15:dd:dc:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:0F:FC:D4:4C:05:E9:BE:2E:A9:43:F8:4D:45:86:F7:6F:3E:12
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:89:2a:e5:0b:a0:24:61:ca:e1:c8:a8:5f:a6:41:8b:2d:e0:
9c:2a:e8:db:7c:ba:32:6b:f5:53:7e:18:b0:2f:fa:88:c2:ff:
0d:12:2e:03:0b:3e:dc:cb:da:95:7e:fc:24:1f:a5:41:f0:46:
a5:3c:8d:0a:b4:c6:6c:0f:00:b2:b2:64:c6:75:c2:40:bb:37:
00:aa:c5:ef:74:1c:29:ef:d2:c8:da:47:7d:a9:99:6a:d4:75:
ac:4f:28:c8:7f:49:7f:6a:7f:76:5a:6d:49:d0:e9:d3:82:82:
99:e7:15:93:58:58:3e:ae:96:8b:4c:bf:34:47:3a:72:b4:a5:
e4:66:69:81:ff:e5:35:1f:d2:b3:3c:fe:a1:a4:e4:1e:89:4d:
e1:d9:73:38:54:76:65:06:9d:45:5b:05:7d:6e:e4:16:70:bf:
59:20:6f:6b:67:29:ae:4b:9d:c9:3c:c4:3c:0d:80:ee:f3:7c:
7b:27:39:ba:e3:6e:37:92:ae:1a:52:de:4b:fe:9f:43:e6:45:
18:fd:d7:2e:82:17:a3:d5:c7:7f:f9:1d:d8:91:78:53:6f:97:
39:ef:b4:fa:5d:db:71:5d:83:26:be:1f:e7:14:55:5f:1c:ba:
34:bf:55:b4:ac:ca:0f:6b:ab:dc:e3:2e:c7:33:c7:8f:fd:d6:
97:12:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:35:53 2026 by rpki-client