Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: r3kDFNgBExT4+kwVR50pPe893H3XJs3AVWYx66b5bsg=
Subject key identifier: AD:07:72:D1:FD:33:D6:CA:4C:4C:7E:8C:D0:72:F4:4B:88:E6:D6:DE
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 019F927FC1239AA8DA88F9440551804AFC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 12D5
Signing time: Fri 24 Jul 2026 05:01:13 +0000
Manifest this update: Fri 24 Jul 2026 05:01:13 +0000
Manifest next update: Sat 25 Jul 2026 05:01:13 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: +uRG6Bkeu3y5uewg3HgvrSkmVsX9QcoJMLrIL7EILQQ=)
2: 2yXo53nRzQ6QIXHCKqp0A_hJsyc.roa (hash: fKxrkStH/B851eW4EJrn5I1osQhbxL5xUSbhHaxEJKA=)
3: ym4tOdn059VH80jyrnfLu7BgCXc.roa (hash: Xoz30lYXVZFLAI30hxcE2+5oHIs5K4qTtgQjmduZalA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:c1:23:9a:a8:da:88:f9:44:05:51:80:4a:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Jul 24 05:01:13 2026 GMT
Not After : Jul 25 05:01:13 2026 GMT
Subject: CN=ad0772d1fd33d6ca4c4c7e8cd072f44b88e6d6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:24:cc:dc:33:85:9d:06:ed:d3:1f:4a:ae:
9e:bb:f0:89:d0:c2:4c:a7:d3:5a:98:57:29:78:0f:
68:5d:96:97:81:f1:94:c1:e0:6c:48:47:68:2a:10:
aa:db:d1:28:77:d9:44:da:0e:fb:e6:c7:c3:6b:49:
1f:ff:83:26:cd:6c:d9:90:50:de:39:b5:1c:8d:2f:
68:2c:d0:1b:c4:c6:a9:0b:53:19:7b:be:aa:0a:04:
82:a5:18:e5:f0:a1:c0:d2:28:1b:5c:a4:28:63:21:
30:4a:25:d4:c9:41:59:8a:f3:50:ce:c5:6b:c0:58:
ca:a5:1d:93:81:51:ae:0d:c6:0c:04:cc:c4:03:57:
d8:79:33:84:fe:4d:26:db:3c:56:ee:b5:c3:ba:5a:
3d:0b:f1:97:c1:9f:48:ea:90:88:4b:7c:c7:a6:eb:
cb:12:8b:be:01:1d:37:60:37:b6:2a:f3:7c:ed:08:
dc:d3:9a:20:22:d9:bc:69:f5:bf:39:c3:16:54:d1:
d6:8c:40:99:36:a9:d5:72:8c:7f:8e:7c:fa:70:47:
f8:aa:4e:cb:49:8e:75:67:15:a4:17:90:5f:1c:db:
3b:2f:59:d6:08:d3:cd:10:e9:5d:25:83:76:7f:39:
90:ad:28:d6:3e:3e:54:f9:94:53:2d:36:c3:9e:1d:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:72:D1:FD:33:D6:CA:4C:4C:7E:8C:D0:72:F4:4B:88:E6:D6:DE
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:f5:64:60:79:b4:8f:62:2e:d3:ed:ad:e7:16:01:d5:ac:
0c:6f:35:2b:a2:fb:29:a3:a7:e9:44:bd:02:22:4c:9a:61:43:
bd:19:68:47:5e:99:17:11:a7:e4:b6:3f:85:f4:b4:4b:41:f7:
ce:29:f9:ab:97:3f:b3:7f:59:84:87:65:2f:ff:db:dc:48:bb:
de:23:87:ee:2e:8d:2a:a6:4c:70:ef:14:99:59:05:a9:6a:74:
ba:29:3d:f3:28:fc:60:ee:40:38:71:f1:f3:45:5a:d5:ba:b1:
9e:07:33:bb:fd:4e:f6:d5:3a:1b:ed:b2:c5:54:a5:3b:1e:0c:
57:1d:75:6f:24:76:e6:cc:4e:4c:e8:32:91:95:a3:19:5b:5a:
a8:2f:6b:38:2f:00:26:15:ec:e3:2c:67:de:3e:97:02:6c:5a:
36:5e:3c:9a:24:42:57:46:a5:34:d8:1b:ea:80:81:d8:c9:25:
12:e7:99:9e:26:29:5e:ee:f0:10:55:d4:09:91:c5:75:40:37:
94:f6:97:9f:27:c9:69:a5:4c:78:7d:13:38:0f:d9:07:f2:0c:
a2:6d:f1:7d:9d:a6:d2:1d:d4:bd:91:45:f7:12:dd:aa:6f:36:
2d:f5:69:ee:72:7f:4b:e2:82:0f:95:17:dd:8b:fe:b1:90:3b:
22:cd:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:12 2026 by rpki-client