Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: HA5gRaE7wBhxnEN5Uj0lzYvslVRDlCUUwbBeERbLWis=
Subject key identifier: 8D:F5:E4:F2:3C:B2:B9:C0:F9:55:F0:D8:96:0E:A6:23:EE:F2:BB:08
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019D25F1DD140E363BB9DB850C7D907D66BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0FEA
Signing time: Wed 25 Mar 2026 17:01:40 +0000
Manifest this update: Wed 25 Mar 2026 17:01:40 +0000
Manifest next update: Thu 26 Mar 2026 17:01:40 +0000
Files and hashes: 1: 0HKg8uH6cdYkhCmod68CGVyEJVY.roa (hash: nHekJ9B0E/EBXFK9sjaa2GSBNkwPlvZK9aL2VrpgqLc=)
2: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: BA91XyXrx235CpuW2iAGvKh7xhqL8Rm7afC2D7cWKJQ=)
3: rQcEs3Af4LaLGUacDsSGTWNpXEg.roa (hash: yjLuvj/zIi87kGkUau/dqofBhr3Db1ixSQwKoxIfjdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:dd:14:0e:36:3b:b9:db:85:0c:7d:90:7d:66:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Mar 25 17:01:40 2026 GMT
Not After : Mar 26 17:01:40 2026 GMT
Subject: CN=8df5e4f23cb2b9c0f955f0d8960ea623eef2bb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:dc:59:00:db:0e:8e:2d:3b:69:23:dd:a3:
ad:77:ce:aa:36:e7:32:9a:cb:9c:18:7e:24:f1:e9:
1e:57:cf:51:4d:c1:55:a3:bb:d7:64:02:99:9d:2a:
64:7e:4c:ab:ee:2b:f8:71:91:66:d5:9b:f0:5c:ec:
5e:78:60:2c:fb:61:25:1f:9e:09:d3:4a:2b:fa:aa:
e0:ad:55:12:0d:ff:58:78:58:8e:61:54:80:ab:63:
76:95:c9:f7:c5:8a:af:10:57:d0:79:2c:2d:4b:c7:
37:30:b3:6d:8d:f8:45:ad:0b:94:95:84:a7:37:78:
6b:20:c7:0e:8b:f4:4e:95:53:35:d1:ae:bc:ca:4c:
c6:29:1f:e1:df:0d:23:ca:52:98:d9:3a:cf:bf:9a:
45:25:c5:95:22:a1:26:77:84:61:c1:df:97:26:23:
6d:ac:df:b3:cc:55:65:96:a7:e0:1d:91:9e:62:d5:
3e:30:42:5e:df:8f:66:18:28:f3:36:71:f9:65:75:
ae:59:10:37:e4:89:44:21:8b:8f:50:c1:f8:0e:b4:
39:d5:d8:4d:16:c6:7f:33:a7:34:5d:66:44:be:57:
9b:19:a3:22:20:2b:2e:f1:ce:d3:9d:5a:f1:c6:8f:
2e:d9:6b:ec:3f:6b:c5:c1:cb:34:af:cc:12:31:d1:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:E4:F2:3C:B2:B9:C0:F9:55:F0:D8:96:0E:A6:23:EE:F2:BB:08
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2e:2f:08:68:ab:21:3d:eb:e6:1f:3b:d0:43:d7:d1:bf:34:
d4:5b:e8:c3:0b:3d:cd:b9:fc:7e:8c:89:72:ff:0a:83:1f:2b:
e2:52:54:e1:da:06:e9:20:e5:ae:25:76:99:dc:4b:9d:5d:86:
04:18:92:2f:a9:7f:2c:fc:88:23:dc:63:f0:4e:a1:71:d2:1c:
71:a7:d6:4e:5c:ae:42:e8:8d:45:68:43:a0:fc:04:6e:5f:ae:
20:df:3b:46:b9:ce:c9:7b:87:03:d8:e8:cd:5d:ea:76:98:4c:
c4:ca:6d:34:e7:83:3c:9a:f1:38:03:c7:0f:f9:a0:dd:f2:32:
b9:75:82:1d:5d:e2:09:e7:d0:7d:60:a6:b9:85:48:14:ba:17:
c1:64:67:10:06:57:aa:d5:8b:33:18:76:04:91:77:9c:f7:bd:
4c:09:b9:a1:33:a3:6c:7f:91:49:37:b8:2d:d0:d9:c2:8f:75:
07:8e:23:55:89:fe:5c:2c:7e:3f:fb:5e:8a:f2:9a:86:2a:03:
08:6a:21:0c:09:db:e2:bf:e0:06:01:76:07:d4:fd:9e:02:dd:
ed:b1:4c:72:63:83:86:8f:14:a6:bf:78:f0:5e:5a:54:04:9e:
8c:6c:ed:ff:a3:59:eb:a5:19:c0:5e:fc:5e:cf:47:37:b2:47:
50:89:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:35 2026 by rpki-client