Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
File: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft (raw, json)
Hash identifier: nJLGNfFLHKh61gwNT3yTGhH2KYvd0m36sTGV7JhjdyI=
Subject key identifier: 4D:37:40:38:99:33:D1:9D:AE:89:17:80:87:4C:24:43:45:F3:BF:22
Authority key identifier: FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
Certificate issuer: /CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Certificate serial: 01A0C9D8ED692497CDA1F0239D6AE6ED3B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
Manifest number: 03EE
Signing time: Tue 22 Sep 2026 16:00:31 +0000
Manifest this update: Tue 22 Sep 2026 16:00:31 +0000
Manifest next update: Wed 23 Sep 2026 16:00:31 +0000
Files and hashes: 1: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl (hash: G2y8nn4JxB57jXR5SUknPgvI7xEK9eWLTwb7N8PaQEw=)
2: UQ-Obiva26_mmAwhjKc3uzVQ7mM.roa (hash: a+cVa2kzi7Q/+FGH9LfCA4p6Z3qaWMrupfp1ELf+pAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:ed:69:24:97:cd:a1:f0:23:9d:6a:e6:ed:3b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Validity
Not Before: Sep 22 16:00:31 2026 GMT
Not After : Sep 23 16:00:31 2026 GMT
Subject: CN=4d3740389933d19dae891780874c244345f3bf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e5:73:e1:ad:07:43:ee:38:eb:23:1b:45:27:
4d:83:15:9f:04:7f:e4:cc:ba:d3:bf:21:9f:0f:d4:
b1:0d:19:74:c6:59:01:d1:76:c2:04:cd:28:82:e0:
77:da:6c:9f:2e:e7:a2:32:80:ed:93:ad:d7:46:6d:
ad:43:c2:56:f6:a6:58:0f:bf:27:e2:49:61:76:c8:
08:f4:b5:d3:f6:a6:36:ba:55:9e:ab:9f:13:8f:1c:
21:21:1c:45:cd:2b:4f:9e:27:81:06:00:fb:13:58:
2b:dc:a1:17:5c:78:02:06:40:40:3b:99:1b:5b:c9:
a3:8b:cf:39:09:c0:53:97:24:5e:8e:db:7a:87:bb:
19:fb:48:c7:08:20:c6:97:2e:fe:c2:f6:5a:17:b0:
9d:2f:a4:b7:53:38:ab:6c:df:94:2a:28:6a:73:15:
2e:46:8a:f1:ea:2c:bc:b9:82:d8:df:42:1b:0b:42:
88:2f:7d:31:5d:0c:17:23:63:76:e0:90:4b:ba:c7:
a6:6d:45:a3:f7:21:09:96:fa:00:45:37:95:7d:b0:
ab:d7:68:25:18:e2:1a:f9:3f:da:9c:3b:d3:1a:4a:
1d:d5:40:5d:6c:a2:b7:13:f0:f9:20:4f:f0:53:9c:
65:e4:47:15:ff:14:18:98:c9:7e:8e:6f:5d:e0:04:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:40:38:99:33:D1:9D:AE:89:17:80:87:4C:24:43:45:F3:BF:22
X509v3 Authority Key Identifier:
keyid:FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ca:df:e3:f0:ad:1d:50:66:97:a7:01:37:d0:aa:65:0e:90:
96:a3:53:7d:74:c3:58:18:60:78:e3:29:d1:c9:97:9a:ab:44:
e1:2c:e6:bd:56:19:74:02:30:4c:b1:68:38:68:a4:ed:d7:88:
59:2c:cd:4f:8f:16:a4:df:fc:36:b5:86:b4:11:52:b2:31:f3:
1e:f2:e3:f9:d5:4c:40:9a:66:7f:97:a7:2f:bd:09:2c:12:cf:
af:73:15:fa:76:ed:40:d2:5f:8e:79:0e:6f:0a:54:41:ef:be:
96:b5:f9:69:c6:58:49:1a:2e:99:6b:44:ef:40:7a:35:6d:dd:
64:2d:87:80:10:e5:c0:64:27:71:fa:7f:56:ff:93:fe:bc:e2:
d2:3e:63:71:3a:49:f6:0c:c4:07:f4:bc:9d:88:c6:8e:5b:85:
66:00:30:8c:fb:85:93:03:26:ba:86:38:c1:60:44:84:e7:6a:
01:1b:f2:9a:b8:b6:a3:cd:af:c9:42:f9:fa:8b:8d:cf:5e:c2:
ee:c6:85:79:aa:57:8a:ba:73:bc:f6:0d:61:18:77:54:d9:a1:
af:e0:be:2e:ef:81:a5:8d:2f:91:f3:84:5b:56:d1:32:ae:7d:
d1:06:c4:8c:3f:df:ef:21:b0:69:59:58:b8:f7:84:f3:3e:32:
bd:1e:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:48:43 2026 by rpki-client