Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: Usy5DjQw2kxZvg91tCAqi7W00BUkm0Amf6+NiZsn0+4=
Subject key identifier: 65:BD:68:AA:79:C1:AD:6A:9A:E6:61:50:0C:E7:3D:AB:32:B6:30:F2
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 01A0D872482D084B75A81C8803E23ABE248B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 12:02:43 +0000
Manifest this update: Fri 25 Sep 2026 12:02:43 +0000
Manifest next update: Sat 26 Sep 2026 12:02:43 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: 2Mq9tY54Vj04PnqMJVR+VJBoIFrUBgZr80/J375xjM4=)
2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:48:2d:08:4b:75:a8:1c:88:03:e2:3a:be:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Sep 25 12:02:43 2026 GMT
Not After : Sep 26 12:02:43 2026 GMT
Subject: CN=65bd68aa79c1ad6a9ae661500ce73dab32b630f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:35:68:d6:42:6f:90:8f:e4:57:d7:c9:50:
ce:ef:5b:b4:d8:97:ab:4f:c4:54:37:f3:d8:2b:a1:
bc:02:f8:e9:9f:dd:fe:f1:f0:97:df:f6:a0:13:31:
3c:ee:1a:05:0d:a7:24:e1:6b:66:19:ef:3d:24:a9:
c5:f3:47:d2:ad:4a:eb:fa:89:96:d6:78:01:59:9d:
f7:64:8a:06:99:c7:39:d9:d6:d4:72:d5:7e:22:1c:
33:aa:fe:38:70:7b:8b:3d:28:4e:9a:b5:48:2a:35:
cc:a6:aa:6d:b1:ac:8b:4b:cc:1a:06:17:58:79:30:
71:46:40:c2:4f:7d:f9:da:b8:90:a6:9c:8c:28:74:
f9:59:b3:b5:cd:91:97:8d:17:fc:99:ca:8f:ba:58:
0b:b1:8f:c4:cf:f3:56:eb:5f:2a:aa:78:8e:8f:72:
08:b1:8e:e9:ba:25:14:97:51:28:a3:5a:5b:26:c1:
e0:44:0c:f4:a0:13:c2:e8:38:1d:57:75:51:d2:ac:
db:f6:55:3c:64:ef:d6:f6:d1:46:20:2a:54:18:ec:
3d:cc:22:7f:c0:52:76:04:6b:16:10:8c:a4:46:95:
fd:c6:69:4c:92:e6:61:94:54:80:41:f4:d6:35:2d:
e9:e6:74:f1:62:9b:d3:8a:1c:b1:bb:69:08:ba:41:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BD:68:AA:79:C1:AD:6A:9A:E6:61:50:0C:E7:3D:AB:32:B6:30:F2
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9b:1c:03:1d:95:ca:c3:de:fb:73:07:9e:f8:a9:8b:8f:ea:
50:98:f4:d3:92:60:ed:f6:05:19:51:95:48:40:a7:7f:ca:c1:
91:eb:10:3a:52:1d:21:92:54:51:40:78:30:27:d4:3d:03:73:
c2:95:c5:5d:15:06:27:7e:d5:47:f7:ae:2c:f0:fe:1e:fa:d3:
54:df:78:68:e8:2f:e0:a7:29:16:95:d4:a7:14:1b:86:4b:8c:
97:fb:52:30:ff:7b:0f:24:dd:77:3a:69:af:2d:54:41:3b:eb:
29:7c:55:78:10:52:7b:95:70:65:46:83:ae:5d:1c:c7:c5:db:
eb:c8:0d:e4:0e:61:7e:83:f0:46:13:2c:91:4b:12:6c:7d:3b:
c6:d9:bf:cc:e4:f7:5c:7c:a4:bd:b5:5c:ef:b7:b6:39:27:07:
3b:f3:b4:29:52:4d:61:81:b4:9c:06:1a:35:73:28:fe:61:51:
ac:f3:6c:80:b3:74:a8:20:7a:27:c8:d6:31:41:14:83:64:37:
77:01:43:29:06:fc:2d:44:70:c9:8f:ef:6c:f9:90:e6:59:84:
f2:04:13:58:eb:0f:3b:4b:8c:e2:a9:91:92:c7:2e:0b:8e:64:
13:4d:af:94:cc:ac:23:fe:5a:47:4a:58:2c:d2:fe:ab:36:e0:
81:55:32:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:15:41 2026 by rpki-client