Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier: SNl4EjVjZzb5xhQ31JW3qnIzAT0m4CIocfYuLZWQrZE=
Subject key identifier: 42:CD:B6:5F:E8:FD:74:31:AF:1A:A6:1D:81:C8:1D:69:03:7B:B0:FE
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer: /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial: 019D2696077AB3CF58EFAC81D1647B06A21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number: 185A
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: /1EMQU1FLGWjvVhv+bsnd6A/IJm1/3uBE3Rle8anCZc=)
2: tXmcrXd1NSzKbyThyNVtW7ErlI4.roa (hash: Nfqw9jIsfvO/CcG3bEmL8y0/YqElSRYvepE+1sSTOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:07:7a:b3:cf:58:ef:ac:81:d1:64:7b:06:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=42cdb65fe8fd7431af1aa61d81c81d69037bb0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:1e:e1:38:67:e7:ef:13:41:a5:cb:09:ed:
76:f5:7f:5b:30:88:e7:4a:5b:2d:8f:f3:41:42:93:
ab:b7:6a:45:db:24:6f:e1:80:91:2a:e8:ff:86:f7:
1d:c7:b3:02:e6:2c:9f:03:a7:90:3f:4f:c1:99:03:
b6:76:49:60:1d:09:39:da:c6:4b:4d:65:b5:6a:2c:
3f:80:3c:16:da:6b:ef:dd:d5:c3:2d:75:17:4d:0c:
87:0f:2d:87:fd:34:6a:e8:4b:a8:03:42:11:84:02:
48:68:81:2d:bd:0d:55:c5:d4:d9:b1:e8:80:4d:f6:
f9:b5:7b:7c:a6:1b:c0:92:7a:9c:2f:b8:04:1c:4d:
0d:76:93:83:f7:81:74:97:7a:8a:9e:13:ff:44:0d:
dc:16:d1:b1:9b:00:73:2e:fe:b3:89:1c:83:7f:82:
e9:aa:88:a8:8c:32:ad:ba:7e:a8:55:de:72:fd:a0:
97:27:6d:c0:92:b9:69:37:b2:86:f6:eb:e9:17:23:
01:85:73:d2:74:18:12:4e:a2:6a:eb:20:6f:4b:19:
eb:ec:cd:79:13:7d:40:4e:13:f5:03:5d:86:61:c4:
5f:2a:1a:6e:9a:6f:8e:0c:6f:76:c0:4c:7b:d2:42:
fd:a9:7a:6f:60:07:b0:0d:e3:28:d7:85:8e:7e:34:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:B6:5F:E8:FD:74:31:AF:1A:A6:1D:81:C8:1D:69:03:7B:B0:FE
X509v3 Authority Key Identifier:
keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ac:4e:9e:dd:41:49:50:c9:ff:7b:af:f8:01:79:b6:ec:1c:
0e:43:e8:75:a5:2f:bc:d7:6d:ee:e2:89:69:f5:dd:50:c7:12:
1c:ec:ca:44:ae:f9:7f:42:3f:3d:1a:12:83:f0:b0:ed:1b:c9:
d6:8c:8e:9c:15:e1:e8:7f:14:cb:00:4c:e3:b8:db:78:ed:c3:
8b:4d:99:70:94:fa:6b:30:0a:93:98:b2:70:72:a3:4d:ae:c8:
c2:c1:da:2c:41:0e:43:67:cd:fa:7a:96:92:fd:e4:ec:1d:d5:
60:a3:4a:23:eb:83:70:e2:fc:95:76:9e:8e:15:1f:f4:18:b3:
e4:01:ce:f7:5d:8d:d8:d4:4b:67:a3:d4:34:02:4e:a1:da:11:
8d:b8:d3:07:85:13:81:78:32:1c:08:8d:99:e2:d8:fc:dd:8d:
b4:12:a4:8d:e7:2b:bc:61:af:a2:0d:b1:7d:01:f9:68:46:b8:
ff:0d:37:81:df:47:bf:a1:54:cb:89:36:3c:49:79:38:f4:cf:
55:a5:7d:83:49:8d:93:93:74:64:ae:da:ea:04:8d:ae:4e:c0:
65:e5:60:06:4d:56:41:4f:ef:fc:32:0d:01:e0:72:b5:61:30:
29:17:cf:f2:ef:80:eb:c6:46:7d:3c:6f:a2:89:19:68:46:b4:
68:ff:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:13 2026 by rpki-client