Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: OF+EXjiDUHN8PgverEY0fie5E8bG6YXdLQUrnFe3BCc=
Subject key identifier: 9C:D7:EA:79:CB:F2:AF:96:5D:1B:11:5E:BF:A8:95:D7:48:52:24:D4
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019D265F11EB7049FDDF62BF79AF14BDF86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 0831
Signing time: Wed 25 Mar 2026 19:00:57 +0000
Manifest this update: Wed 25 Mar 2026 19:00:57 +0000
Manifest next update: Thu 26 Mar 2026 19:00:57 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: eustZBT6WJi1gldHufKqeYoZerA3CJfbv0+ZuK2pIy4=)
2: rTWNDX2sh64JmJF94YkHDQivF1w.roa (hash: RWITw/Hfk3BkskMw4FRULOKsUeZ/YrSrFkhrBuQpcRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:11:eb:70:49:fd:df:62:bf:79:af:14:bd:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Mar 25 19:00:57 2026 GMT
Not After : Mar 26 19:00:57 2026 GMT
Subject: CN=9cd7ea79cbf2af965d1b115ebfa895d7485224d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:51:be:8f:15:7a:85:d7:0e:40:01:59:8d:
e7:1e:50:c4:da:20:c0:14:5c:4e:2a:c5:74:4a:ed:
0e:d0:5b:04:30:a1:9c:04:f2:38:f7:e1:15:31:fd:
43:85:61:0f:2c:c9:ed:8c:e1:7b:b6:e7:d1:bd:6a:
ec:64:70:8f:f8:b1:f2:c4:94:88:79:7b:b1:3a:0b:
f2:85:01:3e:d4:23:d5:5c:f8:29:54:76:b9:dc:fc:
ea:ef:3a:70:77:a0:b2:83:e1:77:58:74:88:48:67:
78:c4:2c:cd:db:95:0c:c8:c1:09:4e:8b:e1:3b:33:
98:45:c9:e3:d0:c1:0f:22:75:d7:cc:67:e6:6a:96:
38:39:ee:92:3b:19:19:2c:42:4f:68:44:39:c7:ee:
63:44:a9:0c:08:f4:9e:0c:ff:0a:31:a6:27:e4:91:
95:c7:74:4b:bd:0e:22:3d:b4:c4:32:ba:f8:c9:a6:
8f:c2:23:df:ac:8f:72:3b:3c:44:47:c0:1f:8c:ba:
13:14:d0:95:89:40:6c:78:65:7c:b6:c4:44:c6:d5:
f6:d4:00:5e:1f:49:01:19:2e:67:55:09:5f:11:60:
80:26:88:47:0e:c5:3b:de:27:4b:1e:06:5f:44:ac:
ec:10:14:0d:c7:cf:af:fd:0f:e3:a5:53:6e:c8:bf:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:EA:79:CB:F2:AF:96:5D:1B:11:5E:BF:A8:95:D7:48:52:24:D4
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e6:9f:28:9e:40:71:26:9a:3f:28:a2:2b:ff:61:ac:da:c1:
f7:03:d9:b9:7d:08:77:4f:03:ce:66:64:f5:a4:ff:0d:1e:65:
40:ac:50:7f:57:8f:2a:75:28:5c:76:bb:43:b1:16:f0:4e:6a:
55:c1:d2:24:b3:be:30:89:6f:b6:55:39:28:ae:61:39:27:e8:
2c:0f:23:90:c8:6d:59:00:52:71:57:30:8d:44:34:d2:05:40:
8d:70:02:a6:26:85:13:81:0a:b7:1f:dc:85:2b:36:0c:d1:62:
92:b4:f4:d4:76:44:e6:94:c0:57:00:0e:50:73:48:6e:db:28:
17:cf:e9:d7:42:a6:3c:c3:96:cf:1b:c4:9e:41:30:39:85:e7:
c5:c2:ef:5a:15:a8:6c:ec:f6:c2:6d:30:23:2a:f1:3d:2e:f9:
d9:ca:67:cb:7a:45:94:42:36:3e:23:bf:62:82:4d:35:21:8f:
22:06:ad:8d:fb:00:cd:4b:29:c8:12:2e:e0:e0:ca:7d:bd:dd:
e7:70:f6:57:9c:d8:c3:08:70:d8:0f:41:2e:31:c4:4f:f2:42:
85:7c:fa:0b:46:b9:2a:bf:3c:38:9b:86:22:e0:00:d8:06:93:
f2:82:6b:bb:cd:99:5c:8f:83:80:7d:72:12:53:a0:d0:2f:d0:
02:93:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:46 2026 by rpki-client