Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: 0DzkQuu5gX9IhqapX2H4tS9NCLuliBlv+73h340ACBw=
Subject key identifier: A9:C4:14:3D:4E:DD:B8:6B:28:79:E4:1B:7E:30:E9:94:5E:9A:40:3B
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019D26CD0A5AB3678FD9BBF378FBB35616B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 18AA
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: NW/cow993tK0mIahdDU80cYf6zpMDc9hROGKaCqiy5Q=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0a:5a:b3:67:8f:d9:bb:f3:78:fb:b3:56:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=a9c4143d4eddb86b2879e41b7e30e9945e9a403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:1b:d2:6b:cf:e6:62:c9:90:6e:53:52:4a:
6f:9d:5e:42:a1:84:71:73:31:ce:ba:54:90:45:90:
7a:f3:e1:53:2c:36:ac:27:08:2c:63:d9:b6:fa:4a:
2c:65:22:bf:53:a8:ff:b8:bc:cc:f4:58:44:2e:07:
40:0b:4b:91:4b:c5:9f:25:3e:f9:34:c4:92:9a:d7:
62:09:c4:dc:75:5f:43:79:52:5c:f4:f3:db:d9:26:
c9:db:af:15:33:3d:85:6e:3c:19:a5:2e:b6:d5:dd:
c5:ca:2e:87:92:87:69:38:c5:7a:42:e0:03:5c:8e:
1b:22:6a:a0:2c:e2:a7:10:2d:cc:5a:32:c2:e5:41:
87:e1:09:d8:a7:ef:72:c7:e0:41:0c:09:ee:f8:82:
cd:00:fa:56:2a:4e:33:b8:59:c3:76:83:6d:ce:88:
d9:e3:0a:d4:f3:d3:cc:b6:e4:d4:2d:dc:53:04:c2:
d7:84:82:b7:3b:b7:fb:d3:09:17:c3:f6:31:50:5e:
33:d0:d8:2f:ed:05:23:20:b4:f1:05:27:f3:de:04:
6a:17:3f:76:49:99:cc:f1:be:a2:35:8a:a9:9d:28:
62:94:1a:d4:92:9e:a1:06:c8:9e:b3:a8:1b:67:44:
54:3b:cc:67:db:60:ed:17:04:40:ae:89:8f:62:32:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C4:14:3D:4E:DD:B8:6B:28:79:E4:1B:7E:30:E9:94:5E:9A:40:3B
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:31:c9:78:51:94:52:dd:f6:41:c7:64:af:2f:a7:c1:e2:ae:
4c:0e:2c:12:d5:e5:34:e4:42:3d:b2:eb:41:1b:3f:2b:8e:54:
1d:45:bd:32:84:78:f1:12:66:3b:20:58:44:22:ec:b3:26:14:
9b:ce:cc:4f:70:50:bc:d3:ac:ed:b2:6c:10:bc:f4:7f:f0:f4:
fc:2e:aa:f1:81:0c:97:bb:70:ae:b0:ab:46:ca:45:7a:00:8a:
e8:bc:7f:d5:78:b5:db:f5:ed:1a:fd:7a:80:01:fd:a7:70:0e:
ce:ba:84:12:41:69:a2:6f:b1:9e:55:06:85:70:60:bc:96:83:
17:f0:d4:a7:d5:3c:4d:74:8d:b1:82:71:64:00:78:4e:f1:c6:
85:77:e3:1f:93:81:a3:59:51:cc:ba:34:d8:b9:b9:86:05:d8:
66:75:bc:a0:ac:68:2c:eb:94:e1:b1:43:63:a1:9b:ce:fb:4e:
c0:ee:2c:d3:c5:61:30:c6:b1:a3:7d:73:21:c1:00:15:23:1f:
39:93:05:af:50:9f:d0:e8:3f:ef:51:77:0e:42:e3:fa:92:c9:
ab:98:4e:65:9d:a5:53:91:25:92:96:e0:9b:12:66:ab:fe:5a:
99:7f:c6:ce:5f:f8:75:8d:a4:20:dc:ae:cd:0d:6f:31:69:0b:
19:d4:32:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:23:13 2026 by rpki-client