Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier: +cD5HvoG0gD5s6HMiEWAM/4crVnrZd6RiExOiTPnNEE=
Subject key identifier: FF:F7:62:A5:5B:A9:A6:27:0B:12:1E:1F:8A:50:23:DE:B5:23:4A:AD
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial: 019F946D9401F819FAEDABF6068BAAE010D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number: 04D6
Signing time: Fri 24 Jul 2026 14:00:36 +0000
Manifest this update: Fri 24 Jul 2026 14:00:36 +0000
Manifest next update: Sat 25 Jul 2026 14:00:36 +0000
Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: 2OFQct2poJvVw2cxhoPZ92Xtrukgn75u80Op//f30mc=)
2: Om8hYJFWIm8pdYISoMz7ReVcWUI.roa (hash: c7dJNXWNQCnqpXhattRk9ZyKNskwQkIBWvzcQA9kNBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:94:01:f8:19:fa:ed:ab:f6:06:8b:aa:e0:10:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Validity
Not Before: Jul 24 14:00:36 2026 GMT
Not After : Jul 25 14:00:36 2026 GMT
Subject: CN=fff762a55ba9a6270b121e1f8a5023deb5234aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:8d:65:a1:ed:7e:48:2c:dc:9a:2f:27:50:
86:ac:6f:06:e2:bd:dd:64:34:98:81:85:72:1c:da:
54:48:df:70:e5:3c:d5:90:33:b9:9e:00:67:ee:53:
ec:f7:29:e8:45:03:60:92:09:ce:f8:a6:56:74:d4:
10:e7:62:bd:78:9d:da:7e:3b:37:00:2e:45:0b:6b:
54:0c:38:13:ae:cc:6e:68:2a:8d:61:3e:da:09:d9:
ec:9e:7b:a0:95:84:76:00:bd:b2:ef:e1:e2:1c:ee:
7e:c6:c5:0c:85:7b:0a:c2:6f:bf:8f:e5:a3:78:db:
31:d3:a7:47:2d:b1:95:dd:27:b4:a4:8a:4b:8a:d5:
dc:fe:a7:0e:40:99:a7:e0:87:a1:56:c6:70:ca:e7:
9b:70:a5:8e:68:be:7f:d6:24:b2:8c:0d:15:85:d8:
90:db:62:33:30:37:ba:f1:6f:f5:d3:30:17:0c:8b:
b9:9e:c4:98:bf:2d:9e:82:cd:0a:94:c1:b8:85:8e:
23:4d:0e:cc:33:f7:4d:ac:d6:2a:c3:33:c6:8f:0c:
1b:99:9f:58:ac:88:ff:fd:2b:42:91:95:71:46:38:
e0:3f:30:47:e8:07:0b:d8:9e:3a:b7:02:ac:ff:42:
a1:61:be:36:ff:59:e1:66:89:c2:45:c9:32:a5:6d:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:62:A5:5B:A9:A6:27:0B:12:1E:1F:8A:50:23:DE:B5:23:4A:AD
X509v3 Authority Key Identifier:
keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7e:01:3a:f3:ef:66:f5:cd:d7:75:ba:83:f8:ae:1b:50:e2:
93:93:0c:16:20:04:17:af:02:ca:09:06:41:38:43:35:e6:7c:
15:b4:37:ea:a7:66:23:e7:72:b3:66:4d:66:63:9f:bd:67:bf:
06:ba:16:35:0b:99:d5:80:a3:c4:9d:eb:57:cc:b7:4e:67:92:
c8:5b:46:3f:00:97:ff:27:71:54:b2:d2:3b:a6:ff:e0:c1:55:
53:0f:c0:ea:66:0b:af:ec:6c:d2:cc:a0:76:e4:a5:93:e8:5f:
be:9d:b1:9e:2a:fd:7a:94:97:5b:f8:83:5f:f4:99:63:fe:09:
f6:f2:f8:e0:d6:ad:e8:1e:bd:57:70:5c:59:77:a8:84:61:a4:
ed:4e:82:97:a5:85:6f:a2:5f:2e:77:4f:47:d9:c6:b0:a0:0b:
a7:bf:80:b4:f6:66:f4:1d:c4:4d:9e:e0:76:64:5a:98:6c:1e:
87:5d:c1:35:44:a0:54:7f:cb:ee:b8:4b:92:5a:f8:ab:8e:02:
92:a3:6b:44:ce:dd:95:90:81:41:1b:e2:45:71:81:56:91:46:
3b:d7:a3:bd:b9:1f:49:b5:5c:53:64:ef:44:46:78:f1:30:18:
ea:11:23:76:fd:c4:25:36:0c:85:53:67:3f:83:b5:33:33:23:
46:d5:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:23:54 2026 by rpki-client