Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
File: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft (raw, json)
Hash identifier: +tY8KilVQQEbJb4zRR3jDOdcNk6+eiea0URj3dTdCos=
Subject key identifier: 06:65:D8:98:1C:7B:71:C6:64:C0:85:66:48:1B:CA:A5:CD:21:FD:B6
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Certificate issuer: /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial: 019D25F13FC93F303394E8CC887CD6E5B4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:00 +0000
Manifest this update: Wed 25 Mar 2026 17:01:00 +0000
Manifest next update: Thu 26 Mar 2026 17:01:00 +0000
Files and hashes: 1: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl (hash: Owce0SR368nL6OfQmFRWUaerbqaDHqhuU5a2mtR00HY=)
2: ixtZoNmxiG_wkXITXELK6spLLhI.roa (hash: R3WjQ04yzcChTqlhK+2BR+bykQrjNPE+INNVOK70dYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3f:c9:3f:30:33:94:e8:cc:88:7c:d6:e5:b4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Validity
Not Before: Mar 25 17:01:00 2026 GMT
Not After : Mar 26 17:01:00 2026 GMT
Subject: CN=0665d8981c7b71c664c08566481bcaa5cd21fdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:7f:b1:09:5f:8d:37:c8:9d:33:5f:5b:ea:
dd:d1:8d:7b:87:d5:e6:76:d7:7c:77:83:d1:d7:09:
1d:9d:97:3e:b4:fb:b9:ce:45:3b:c2:63:6a:dc:95:
1b:dc:ab:0c:d7:5e:a1:3b:61:66:e1:3b:d0:f7:ba:
f7:3e:73:53:7f:4d:bf:33:b8:f1:95:38:82:f2:22:
b2:b6:92:23:84:cd:03:1e:6a:6a:47:69:73:03:0d:
c7:63:1c:b7:6a:eb:4a:f7:f0:98:8a:9e:76:a6:e4:
b4:f3:fc:93:26:1c:5d:9f:c2:0b:d1:d4:43:3d:0d:
d6:a6:84:3e:c6:86:28:0e:2e:6b:ef:8e:19:a8:72:
c5:a4:4d:4a:f1:ab:47:b7:ef:d5:dd:a5:31:23:37:
69:01:0e:64:df:55:54:ff:c8:6c:1b:19:a8:14:79:
23:8b:a2:01:9d:77:06:b9:9d:f4:2f:81:bf:29:82:
23:d2:9d:32:b9:75:83:a1:d3:87:a3:3a:7d:d3:82:
87:fb:87:34:b6:73:ae:5b:86:07:3c:e2:9c:73:44:
3a:5c:1b:c4:2a:3b:cb:a6:71:a4:e0:dd:67:d4:24:
55:b8:81:a5:bc:93:bf:01:86:89:e4:f4:f7:60:41:
3c:1b:94:9a:35:41:f4:db:08:f9:fd:97:8d:0e:c6:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:65:D8:98:1C:7B:71:C6:64:C0:85:66:48:1B:CA:A5:CD:21:FD:B6
X509v3 Authority Key Identifier:
keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4c:cf:8c:ef:cd:48:e7:35:38:59:5b:61:7b:5e:40:d3:48:
10:18:7d:ed:cb:51:65:d1:3e:68:3b:a9:2f:f4:02:a8:a2:42:
94:5d:ad:56:83:09:ca:fa:d2:0e:df:bf:ad:53:c8:de:26:bc:
ca:7d:39:e6:e3:7c:af:77:c1:14:89:d7:7d:5c:82:41:55:8c:
16:50:40:fa:f6:1d:29:3a:6d:9f:26:a8:11:9d:51:52:a1:66:
44:c7:b7:47:55:7c:82:54:96:6b:54:60:6b:40:f1:de:00:86:
37:69:90:17:01:c0:59:a2:e6:a9:57:51:6f:54:64:36:e1:cd:
f2:7b:c8:4e:b3:12:5f:b0:e4:09:88:7f:5b:7f:4b:b3:08:5b:
10:be:ac:23:15:4c:54:75:7f:49:38:1b:72:05:1c:e6:64:0f:
52:73:8e:8d:bb:e2:99:9b:c4:45:d4:97:b2:7b:90:39:41:b4:
fb:a9:bd:0e:c4:99:ce:1a:1e:12:67:61:25:1b:cc:5d:e8:e0:
1c:60:5c:b1:c0:c5:b5:6e:04:cb:03:ca:13:ec:3d:ba:65:4f:
09:ba:b3:6f:d9:6e:2c:64:34:62:4a:4d:b9:e8:e3:cb:c5:e2:
b6:03:83:e8:a9:97:3b:c3:3a:02:56:0a:98:4a:92:47:8a:78:
31:4d:6b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:39 2026 by rpki-client