Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: +YeeEoZCXE73QX371A+vX5sGC0MeyIA2ifoAqEQNbYw=
Subject key identifier: 78:EA:59:BE:C0:BD:50:52:07:E1:8A:6B:8D:83:95:0D:E7:15:BD:B5
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019E1D90F95422A94926F17863E8CF22C3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 08B1
Signing time: Tue 12 May 2026 19:01:40 +0000
Manifest this update: Tue 12 May 2026 19:01:40 +0000
Manifest next update: Wed 13 May 2026 19:01:40 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: wR4apD3YUMhz67idJm/plazHQn+E+4UKVfDRncmUoeg=)
2: rTWNDX2sh64JmJF94YkHDQivF1w.roa (hash: RWITw/Hfk3BkskMw4FRULOKsUeZ/YrSrFkhrBuQpcRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:f9:54:22:a9:49:26:f1:78:63:e8:cf:22:c3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: May 12 19:01:40 2026 GMT
Not After : May 13 19:01:40 2026 GMT
Subject: CN=78ea59bec0bd505207e18a6b8d83950de715bdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:ec:a9:db:de:b7:88:89:c8:73:b8:ac:6d:
0f:15:34:9c:0d:da:c5:47:71:62:a4:3b:20:f6:8e:
f4:77:1a:7c:9b:d8:dc:d9:07:5a:27:c0:2c:80:bc:
e3:ea:2d:7c:e1:b1:89:eb:44:ea:33:10:00:06:ff:
24:7b:36:8b:ec:d3:b5:52:e8:46:3a:73:9b:3c:98:
92:3b:5c:be:6a:9b:86:39:bd:3f:7f:b4:22:59:4c:
6b:e3:5b:6c:ac:ff:df:8f:50:d4:35:1a:f8:68:e6:
76:b8:d2:e3:47:45:f3:87:01:8b:4b:bf:f8:d8:9d:
0c:f9:bc:8e:13:c7:be:4a:07:3f:1b:9a:c7:ea:f3:
89:ba:c6:21:e4:fd:b1:35:3d:27:0d:03:d3:07:d6:
d5:a4:18:36:c3:65:7f:fe:25:58:fe:e7:d2:ba:e7:
67:f3:c6:4b:75:93:f7:e9:f6:ad:a8:db:da:eb:c2:
87:f8:71:ca:51:33:06:5d:f9:1c:f3:c3:59:0d:d1:
4a:40:c7:2c:0e:19:e0:b2:cf:2c:73:fb:fc:b1:d1:
80:0e:8a:a8:34:8f:64:31:d8:5e:8a:fc:2b:09:65:
7d:e8:8c:63:96:30:94:d6:69:64:1c:a1:aa:c4:0a:
e3:42:4e:0e:4c:44:06:e3:d9:f4:98:57:d7:f1:77:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EA:59:BE:C0:BD:50:52:07:E1:8A:6B:8D:83:95:0D:E7:15:BD:B5
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:06:09:f8:aa:1a:b8:82:20:de:2d:fe:1d:95:2d:fd:ca:01:
52:8f:ab:b4:43:fb:ed:e5:e4:6e:ce:76:af:2b:fb:09:4c:3e:
5a:61:c4:8e:18:6f:37:98:67:ba:65:46:c8:f2:c4:09:0c:ff:
ea:62:94:d3:ba:f5:bc:14:68:fb:47:8b:31:4b:c8:f5:94:10:
4d:fc:8a:8f:39:64:4e:5b:af:93:2c:99:a2:39:68:ce:8c:a2:
64:b0:40:06:e1:2f:d9:07:92:4c:90:13:29:cc:c7:26:07:90:
d1:b2:3b:f3:dc:d2:9a:80:44:e6:ac:be:7d:6d:96:38:f3:15:
6b:96:42:9f:e1:bd:02:94:43:0f:b6:41:18:52:f3:df:6a:43:
b4:56:11:df:30:2b:08:37:ab:18:4d:07:cf:4a:25:2b:94:11:
9d:d0:44:bf:b8:8d:1e:30:e5:a3:6d:80:0c:08:36:df:78:9d:
cc:03:29:46:0b:10:ea:7c:c2:60:43:0e:40:26:95:cd:3b:30:
3f:7f:39:ae:19:64:e1:d5:d2:8a:24:8e:84:1d:36:b0:bb:1f:
8c:20:f3:c0:4e:84:c0:0e:ed:79:ea:33:54:7a:99:d9:f2:ec:
a0:9c:8f:85:d6:1c:01:d4:b6:49:da:7a:ec:a1:6f:49:3a:b9:
f5:51:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:40 2026 by rpki-client