Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: ce1wKTihNtjgSO6B8u7d1mCJRde694ItuVqHrgCqJJg=
Subject key identifier: D2:3C:FD:7D:77:B9:67:27:F8:09:97:54:A6:41:E6:13:C1:25:86:1F
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 01A1163C6D25645147AD2B0E57C5BA900C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 138D
Signing time: Wed 07 Oct 2026 12:00:21 +0000
Manifest this update: Wed 07 Oct 2026 12:00:21 +0000
Manifest next update: Thu 08 Oct 2026 12:00:21 +0000
Files and hashes: 1: 24Zrc9Sa3mkmhxXcYmY4uXfmiNI.roa (hash: IiS3/lG9LXcsfTMiNGJvn3bbUJtOXlgdK2CgKQGbOYU=)
2: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (hash: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: E0MV0XGBqvQ53JaIJiZZpjUmxVn0v6MAq/HQVJKgQpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:3c:6d:25:64:51:47:ad:2b:0e:57:c5:ba:90:0c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Oct 7 12:00:21 2026 GMT
Not After : Oct 8 12:00:21 2026 GMT
Subject: CN=d23cfd7d77b96727f8099754a641e613c125861f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:8f:eb:cc:f6:cb:58:45:2d:cd:2a:71:9f:
59:37:8f:d7:10:3f:17:41:0c:ad:d7:30:75:72:7a:
20:6d:b5:98:d9:8c:25:50:5c:19:df:40:ca:da:f3:
f0:ea:c4:37:78:ed:4a:3d:3d:03:55:98:e3:49:6d:
75:51:44:d5:c0:e2:ce:73:83:a6:57:9b:bb:3b:fd:
c0:f8:8f:65:e0:77:53:88:16:aa:28:9c:15:00:c5:
73:f7:c5:ab:1b:92:1b:98:5f:7d:9f:e4:81:a8:6b:
d0:d1:32:de:5b:20:ed:a7:3a:5c:9d:ac:b9:67:1b:
53:a5:4c:2a:de:fe:e5:b9:95:dd:5e:a0:ff:f1:c4:
4d:86:3b:f2:3b:9f:bb:c8:71:b7:88:a7:35:ab:76:
4b:b1:96:9e:4d:e6:25:7d:5c:fc:7c:f4:24:36:fe:
1e:32:cb:00:0f:bf:17:e1:00:a3:bc:59:e6:0c:54:
67:c9:85:1f:ba:d3:e2:c1:6b:8e:af:c5:8b:76:41:
1d:98:ce:c0:78:bb:d0:b1:9e:84:4e:fa:85:ec:cb:
78:8e:c8:15:e3:e6:04:08:f2:16:27:6e:8e:28:0d:
5f:a4:81:81:97:17:58:54:cc:16:a0:bc:a0:e7:32:
54:90:c6:04:4b:01:8b:9f:ad:8f:ef:cd:ab:17:46:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:FD:7D:77:B9:67:27:F8:09:97:54:A6:41:E6:13:C1:25:86:1F
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d2:b4:29:15:41:4d:bb:72:e0:bb:0e:3f:ca:25:62:1c:1a:
d7:b0:7f:0e:0b:53:1c:8a:d6:33:7f:ea:19:75:0b:a8:a8:93:
b5:02:49:25:ca:77:49:32:c2:15:40:f0:17:d5:89:cd:83:65:
94:c6:09:cb:e3:c7:7a:28:94:e6:cf:94:28:85:91:93:71:02:
5b:bb:2a:a9:f7:0e:88:62:f6:13:f4:1d:ed:6c:dc:03:da:89:
d8:ca:cd:cc:26:3d:b0:94:44:80:50:02:43:80:bc:91:65:14:
1b:b8:b0:38:57:63:f3:36:14:bb:bd:e1:58:92:46:17:3b:83:
d3:d5:b4:b9:ed:72:c6:60:a5:5c:96:18:87:6e:e4:fe:b0:13:
42:96:92:2d:3c:81:91:12:93:1a:ba:15:89:b7:da:41:66:13:
f1:7f:9c:09:68:f0:c6:2c:73:b3:24:8b:e7:1b:ed:0a:f9:f9:
fa:b0:4e:4c:d3:0f:8e:3f:52:5b:60:5b:e2:cd:71:8f:79:44:
0f:7d:2d:cf:a1:d5:45:7e:1b:c8:5c:ed:43:01:64:fd:a6:0b:
20:72:55:e7:d4:29:c0:d5:21:6a:4c:e5:1d:7f:d2:c3:88:cc:
b7:5d:8e:12:09:4a:05:73:60:a2:25:46:be:a0:f9:73:43:44:
50:d8:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:01:53 2026 by rpki-client