Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: wx4buINc7aKzzIzyz83bJfikMID7CE8L+wl45H1WxMA=
Subject key identifier: D5:4A:96:C2:73:3D:CE:2A:5A:45:69:F7:F1:61:19:D0:40:0C:50:6B
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 019D2A7251D302BA922AEA84BC3C3A8204F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 1196
Signing time: Thu 26 Mar 2026 14:00:28 +0000
Manifest this update: Thu 26 Mar 2026 14:00:28 +0000
Manifest next update: Fri 27 Mar 2026 14:00:28 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: P1wmHtxKdjwdd/4765dmV6kdCAdvp33gQsvR3/z88QA=)
2: 2yXo53nRzQ6QIXHCKqp0A_hJsyc.roa (hash: fKxrkStH/B851eW4EJrn5I1osQhbxL5xUSbhHaxEJKA=)
3: ym4tOdn059VH80jyrnfLu7BgCXc.roa (hash: Xoz30lYXVZFLAI30hxcE2+5oHIs5K4qTtgQjmduZalA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:51:d3:02:ba:92:2a:ea:84:bc:3c:3a:82:04:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Mar 26 14:00:28 2026 GMT
Not After : Mar 27 14:00:28 2026 GMT
Subject: CN=d54a96c2733dce2a5a4569f7f16119d0400c506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:f8:a5:e1:ec:99:4e:41:31:42:f5:d6:4b:
4c:15:24:de:ba:42:af:82:23:45:dd:f8:0d:6b:ba:
d7:78:a3:7d:02:74:3e:36:c2:bf:ba:5b:9d:b9:3a:
0d:0f:f6:ad:51:12:32:a1:6e:02:7a:80:47:d6:eb:
70:29:d2:60:59:52:c8:2e:53:05:a3:38:18:d8:5b:
33:69:21:75:63:b9:2f:4a:3f:53:16:2e:96:57:e5:
34:ba:d7:80:ea:8d:68:b9:b5:29:58:a8:6a:94:4f:
ab:93:0b:91:e6:88:0b:5c:16:f5:92:bd:6a:a0:32:
05:fb:7c:da:ba:33:e4:ff:ab:4f:cf:f8:aa:60:15:
68:4a:3c:ec:01:61:5d:96:3a:38:3d:65:8f:5d:19:
ef:98:69:72:a4:bc:c1:df:88:5f:43:a5:af:26:fd:
b3:fa:37:e9:aa:08:0e:3d:ba:3b:3e:72:e5:f9:b8:
81:60:d2:51:3f:9a:57:07:e2:52:8b:52:32:7d:25:
74:91:f7:c8:76:6f:c5:52:c3:1e:03:9e:43:8e:36:
77:95:44:c7:c8:1e:7e:d2:35:9c:af:e8:ba:3f:88:
5b:c2:4a:2c:82:7b:7d:fe:97:38:98:43:8f:db:6e:
32:b8:7b:e1:f9:9e:ba:4f:b2:a1:3c:ec:17:d5:69:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:96:C2:73:3D:CE:2A:5A:45:69:F7:F1:61:19:D0:40:0C:50:6B
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0e:35:ab:f9:d9:86:df:b6:fe:bd:a5:c7:39:11:1e:bd:da:
cd:5d:0f:4c:bb:36:8a:7a:2e:41:10:d4:de:ad:24:f3:e0:2d:
9c:fb:de:67:40:ed:5a:ed:d1:3c:89:bc:7a:41:58:6c:ef:6d:
7c:c0:e9:00:00:c1:84:15:ac:21:43:fe:51:ab:55:29:9c:a8:
0c:d2:c9:ce:01:e8:a2:36:98:fd:8c:09:a7:b5:2a:55:57:44:
e4:a0:69:58:8c:67:78:3a:15:53:da:c0:7a:61:d1:f6:03:71:
3d:aa:1e:33:e6:62:cb:f9:17:bf:6b:67:79:7f:03:71:64:53:
c3:c0:63:c5:86:ef:7c:0f:78:de:e0:2f:5e:4c:c4:14:d5:27:
46:55:18:40:c4:db:ee:14:6d:20:35:49:d2:61:0a:d4:85:3c:
0c:b5:9e:b7:be:5f:cf:21:4e:e1:c0:fa:90:c5:2b:83:94:cc:
3d:92:d0:ee:20:c7:04:b9:1e:5e:37:b9:ef:2e:56:18:59:97:
44:37:b5:f5:86:f0:92:74:11:04:ea:3f:40:11:78:40:68:85:
44:6e:00:55:44:4a:8b:dd:6e:12:f7:e0:23:cd:aa:31:54:db:
fc:be:7c:8c:49:54:f3:cd:40:1b:c4:4f:f2:65:54:62:4a:59:
ef:2b:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:42 2026 by rpki-client