Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: WUQBo3yLPeGEJH4iAnOnjobu7DiiDkqRNLYsBOrU3T4=
Subject key identifier: 2B:C9:9D:EF:D9:EA:DE:5F:75:F4:0F:34:FA:93:11:E3:71:1C:0A:7A
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 01A1DD26D927B262B8E1FAB39F50DC0863B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 03:01:13 +0000
Manifest this update: Sun 15 Nov 2026 03:01:13 +0000
Manifest next update: Mon 16 Nov 2026 03:01:13 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: ozL29RyJkRmGyF88AtMAjPojtf/tYZMWV0o0/uYLL90=)
2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:d9:27:b2:62:b8:e1:fa:b3:9f:50:dc:08:63:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Nov 15 03:01:13 2026 GMT
Not After : Nov 16 03:01:13 2026 GMT
Subject: CN=2bc99defd9eade5f75f40f34fa9311e3711c0a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:ad:4e:8b:4c:41:03:0e:da:65:c0:8f:d8:
2f:6e:77:ff:af:1b:74:db:7c:7e:43:47:69:73:09:
57:b1:1b:87:ef:e8:7f:aa:c2:f8:46:29:dd:34:cd:
ac:32:9e:f9:76:7f:bf:26:56:17:1f:57:18:7e:ca:
f7:fd:b9:b1:c3:0e:fe:66:f0:2b:82:4c:73:5d:6e:
68:45:b6:ad:ee:4d:4e:ba:aa:fc:6b:5d:8f:96:7e:
21:f7:28:d3:a7:7a:56:74:47:11:eb:ad:95:3f:74:
db:b4:6e:ec:fe:21:1f:18:72:cf:00:28:2a:bc:ad:
f4:a8:b4:b6:7b:3f:82:06:41:f8:70:da:ac:43:3e:
e8:23:e1:f8:69:44:ac:0f:d3:a2:13:6c:ef:a2:bf:
a9:6d:e7:6a:d3:c4:f6:17:ab:20:b5:76:cd:3e:da:
65:cf:1d:f6:33:a0:19:5b:ea:6a:cd:d7:2b:08:c9:
a4:97:a5:2a:6d:22:77:8a:a9:6a:f6:98:ab:8c:9c:
3d:66:80:9a:a5:6e:bf:f7:28:75:90:39:b4:a8:14:
02:e1:bf:5e:00:cb:d1:cd:ff:b4:93:69:10:21:48:
ad:9f:97:54:a2:c1:b3:29:d0:6d:e1:ef:e1:81:10:
de:82:04:2c:9f:a5:30:9c:dd:e0:62:1b:63:d7:4a:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:9D:EF:D9:EA:DE:5F:75:F4:0F:34:FA:93:11:E3:71:1C:0A:7A
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2e:4d:99:e4:d5:09:36:d9:fa:f5:87:ad:df:32:b7:73:ad:
11:2e:3c:59:d3:70:f1:bb:e6:dc:92:e3:99:c8:43:05:c9:86:
e4:16:53:9b:93:21:68:e1:82:fa:d9:32:04:5a:8e:70:b4:fc:
33:57:43:cb:5d:ff:0e:aa:c8:e8:cf:86:51:84:8f:ff:3b:dd:
7d:44:5d:cc:50:56:b4:a5:c7:91:25:17:e5:7c:57:ed:69:e6:
8f:89:ff:0b:18:09:72:4a:09:ba:c0:44:75:c1:93:a9:95:16:
fe:53:11:2f:7b:a4:26:82:53:de:26:cc:16:0b:10:82:c5:e3:
83:48:b3:36:1c:a0:de:51:74:9a:91:bf:d0:1b:60:49:02:06:
61:ff:31:96:1f:af:3e:da:16:a1:fc:05:19:7b:59:af:e4:f7:
9f:0b:39:ef:04:6c:8e:3b:8b:d3:89:0f:72:16:fd:e3:ff:f7:
d7:c4:f3:d4:d1:12:b4:7d:3b:5d:5c:77:89:13:7f:93:d3:e7:
38:f8:a8:7c:7c:f0:c6:64:49:cf:21:37:cd:94:42:df:5c:4b:
94:01:1a:fd:f1:37:32:cc:cb:ef:00:1f:c5:05:0a:22:6e:05:
79:4b:b0:44:87:11:1a:20:f3:b0:4c:bb:3f:22:2f:3e:55:24:
dc:bd:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:14:21 2026 by rpki-client