Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: popRMN6+9k957mZecy12CYB8HqG3d7nuvOXkskAwNKI=
Subject key identifier: BD:6B:E3:27:96:17:9A:99:4D:77:9A:D0:29:1E:18:B5:B5:59:43:32
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 019E1DC70F35660DB50044DC43D728FEC3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 1214
Signing time: Tue 12 May 2026 20:00:45 +0000
Manifest this update: Tue 12 May 2026 20:00:45 +0000
Manifest next update: Wed 13 May 2026 20:00:45 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: uta1Zop1+dQG35pfqtE86DVZuwUZ8XjBG0rna8IVJ+A=)
2: 2yXo53nRzQ6QIXHCKqp0A_hJsyc.roa (hash: fKxrkStH/B851eW4EJrn5I1osQhbxL5xUSbhHaxEJKA=)
3: ym4tOdn059VH80jyrnfLu7BgCXc.roa (hash: Xoz30lYXVZFLAI30hxcE2+5oHIs5K4qTtgQjmduZalA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:0f:35:66:0d:b5:00:44:dc:43:d7:28:fe:c3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: May 12 20:00:45 2026 GMT
Not After : May 13 20:00:45 2026 GMT
Subject: CN=bd6be32796179a994d779ad0291e18b5b5594332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ab:c4:23:cf:7c:08:2a:63:84:44:f2:24:bb:
07:2d:9a:58:65:4c:c4:68:d0:e6:16:e2:93:80:b8:
84:cc:14:3b:91:04:21:83:be:b0:e3:f5:92:6d:f5:
38:e1:0c:e8:25:1b:42:12:04:45:53:58:75:b1:dd:
08:de:fc:60:8d:bd:f7:73:bd:4b:85:8c:b6:f0:db:
ce:2f:aa:8d:82:42:9c:b7:e3:54:1a:53:98:10:8d:
64:4a:25:92:ab:88:99:2c:22:fe:cc:e1:5e:ff:3b:
e6:5a:1c:09:b5:69:64:98:33:dc:97:97:f7:e9:31:
4a:61:34:43:a9:52:d1:7d:24:a6:75:b8:d5:49:c0:
a1:4c:8e:b5:ed:16:d3:06:20:f9:92:61:94:63:47:
41:a1:82:a6:f6:8a:e3:38:39:2a:bc:be:81:34:e1:
4f:57:75:34:e5:ab:26:48:04:8a:10:7b:93:15:e3:
7d:8a:62:09:e0:36:ad:ca:95:84:5a:dc:a8:59:8c:
9c:19:49:f5:24:6a:ee:b7:90:59:d4:3c:e7:4b:ca:
d2:71:26:b5:ae:f0:30:75:91:cd:21:89:8e:07:62:
5b:4a:57:52:94:1c:33:6e:27:da:14:05:1c:b2:a6:
81:4d:ab:cb:21:29:9f:7b:64:bf:76:b3:12:46:1f:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:E3:27:96:17:9A:99:4D:77:9A:D0:29:1E:18:B5:B5:59:43:32
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a4:3a:07:76:76:d7:21:7e:86:02:15:b5:04:41:12:f0:1d:
f4:24:4e:a1:3d:f1:d6:53:d6:80:49:44:08:2f:8b:75:c2:91:
ac:b3:0c:14:70:c3:94:9d:1c:d8:67:36:e8:c2:81:79:9b:6d:
3c:0c:96:c7:1a:c5:f4:cb:f8:62:7d:67:8a:e0:b3:a1:e0:d3:
05:de:ae:97:dd:79:52:48:b7:87:cf:d3:e2:a4:c5:07:70:7e:
c8:91:16:bb:d3:53:83:0b:4f:6e:d5:fe:7e:f7:65:50:02:e5:
58:d5:c2:b8:de:ba:43:5b:00:af:04:76:41:58:2a:b9:8b:1f:
3f:ac:32:4f:ea:a6:69:ef:a5:c1:e5:80:34:0f:2a:ef:43:34:
1b:01:04:1f:f2:f7:02:3c:5c:a3:57:5a:13:d9:dd:63:d2:74:
c6:2b:95:f6:e1:75:dc:bb:55:5a:f4:26:6c:d9:71:7e:06:dc:
86:9f:b0:ee:b1:53:6c:f3:97:04:d8:8a:df:d8:af:51:04:e5:
74:a9:d3:42:80:3a:89:a5:16:f3:56:3e:03:14:8b:d2:18:70:
49:22:65:39:6f:11:f5:32:34:42:12:d9:76:47:70:76:f9:76:
e0:52:88:27:39:20:5e:ca:0d:91:68:8e:c6:3e:60:1a:72:b4:
77:e1:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:17 2026 by rpki-client