Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: 7D2LaJEJNoPoZL4I5ul5hLVNyqOHfYgeDdSzEr+u/ME=
Subject key identifier: 45:68:F7:83:85:4D:EC:EB:FA:CC:2F:8A:02:E2:5D:38:42:FF:6F:9B
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 019D281691B7F20AF71FBB174332D0067BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: SNb6yur1F4jobJYS3Quj/ghwlXSwmD0rdaodSisekw8=)
2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:91:b7:f2:0a:f7:1f:bb:17:43:32:d0:06:7b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=4568f783854decebfacc2f8a02e25d3842ff6f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:3a:8b:69:23:65:84:ce:17:d1:8c:6a:18:
7c:bb:13:24:b3:5a:4b:6a:66:61:60:b9:6c:7a:89:
10:03:99:f7:c6:42:c1:47:e0:79:7f:fd:d6:64:2c:
62:da:c9:60:5e:48:34:ff:5b:4c:f3:35:70:c6:c7:
9b:03:10:f7:76:eb:c8:8f:fb:52:56:77:5b:47:c6:
01:eb:5d:b1:28:3e:5a:83:a1:ac:e8:bc:b8:30:20:
90:ea:a3:e5:08:8c:ef:30:5e:2c:65:b8:f4:53:b2:
21:9a:49:c3:41:3a:89:8a:a4:d6:cd:21:af:89:54:
69:66:56:69:35:2c:2a:d7:4d:73:27:6c:f2:01:ff:
83:57:b7:26:75:7a:e1:58:67:27:34:42:ec:55:2d:
06:00:48:c3:b2:cf:b0:25:24:c8:8e:53:73:de:db:
18:2e:2d:03:80:72:4c:2d:1b:1a:14:d5:98:80:f6:
90:37:22:9a:5a:52:34:4c:85:e8:7f:15:17:8a:ee:
ff:70:82:97:6a:a6:49:b2:17:e5:d6:0b:9d:79:a0:
7b:3f:17:e6:d6:65:b1:77:1f:d3:04:f5:53:69:e6:
4a:e9:55:cb:75:06:bb:51:f5:6e:ac:1a:69:de:a1:
50:40:4f:35:7f:a7:f0:5f:13:66:14:63:36:f8:d9:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:F7:83:85:4D:EC:EB:FA:CC:2F:8A:02:E2:5D:38:42:FF:6F:9B
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:21:e2:e5:c0:9a:88:0e:ef:e8:bf:e1:98:ea:90:e2:0c:d9:
66:6c:5e:29:20:63:5f:bf:31:16:92:d0:92:3d:1b:fe:45:02:
ca:dd:00:1b:ed:6f:2b:fb:82:b0:03:0f:f7:58:86:1b:7b:e3:
a1:01:1d:9d:ef:8f:90:ab:40:86:7b:c7:cc:e7:88:06:bd:a1:
54:e7:5f:4b:7d:75:7b:08:7c:73:d7:bb:ab:c8:51:ad:3c:ca:
11:0c:d4:bb:81:54:c7:6f:5a:15:28:d1:dd:6d:47:b6:87:aa:
e2:0d:87:e0:7a:04:f5:dc:66:f1:96:8f:2b:d2:11:b6:f9:e6:
0f:48:db:3e:72:8c:ad:90:01:09:39:80:af:0a:f0:92:5b:a8:
dc:73:78:bf:7f:8d:08:8b:fb:f0:10:2b:f7:67:d9:51:df:68:
64:2a:b6:db:3a:ee:bc:d1:c2:b0:aa:75:03:fc:58:a5:e2:0f:
c3:44:99:5f:2d:7c:4f:92:cd:a7:09:1b:c0:ff:d2:1b:bd:37:
7f:00:72:34:be:1c:96:54:6d:6c:ea:ad:0d:13:c4:0e:8a:44:
a5:5e:03:4b:27:b1:fb:e9:f3:df:dd:27:4c:d7:fc:66:20:28:
52:a2:18:cc:1a:2e:49:76:dc:38:e8:0d:56:3f:bc:dc:b9:26:
cd:b5:e5:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFpG38gr3H7sXQzLQBnu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MGIwNzQ1OWUyZjExNmZiNWE5N2YxMWJhZTc1YzBkYjQ5
MWMxOTYwHhcNMjYwMzI2MDMwMTAwWhcNMjYwMzI3MDMwMTAwWjAzMTEwLwYDVQQD
Eyg0NTY4Zjc4Mzg1NGRlY2ViZmFjYzJmOGEwMmUyNWQzODQyZmY2ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYM6i2kjZYTOF9GMahh8uxMks1pL
amZhYLlseokQA5n3xkLBR+B5f/3WZCxi2slgXkg0/1tM8zVwxsebAxD3duvIj/tS
VndbR8YB612xKD5ag6Gs6Ly4MCCQ6qPlCIzvMF4sZbj0U7IhmknDQTqJiqTWzSGv
iVRpZlZpNSwq101zJ2zyAf+DV7cmdXrhWGcnNELsVS0GAEjDss+wJSTIjlNz3tsY
Li0DgHJMLRsaFNWYgPaQNyKaWlI0TIXofxUXiu7/cIKXaqZJshfl1gudeaB7Pxfm
1mWxdx/TBPVTaeZK6VXLdQa7UfVurBpp3qFQQE81f6fwXxNmFGM2+Nm9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVo94OFTezr+swvigLiXThC/2+bMB8GA1UdIwQY
MBaAFNcLB0WeLxFvtal/EbrnXA20kcGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEt
YWFjZTcwYWJjNmEwLzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEtYWFjZTcwYWJjNmEw
LzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSHi5cCa
iA7v6L/hmOqQ4gzZZmxeKSBjX78xFpLQkj0b/kUCyt0AG+1vK/uCsAMP91iGG3vj
oQEdne+PkKtAhnvHzOeIBr2hVOdfS311ewh8c9e7q8hRrTzKEQzUu4FUx29aFSjR
3W1Htoeq4g2H4HoE9dxm8ZaPK9IRtvnmD0jbPnKMrZABCTmArwrwkluo3HN4v3+N
CIv78BAr92fZUd9oZCq22zruvNHCsKp1A/xYpeIPw0SZXy18T5LNpwkbwP/SG703
fwByNL4cllRtbOqtDRPEDopEpV4DSyex++nz390nTNf8ZiAoUqIYzBouSXbcOOgN
Vj+83LkmzbXljg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:29 2026 by rpki-client