Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: /kjLtMe4hMtOcDgNakDVk2jFL9nPbCyb03tpGJKXSCI=
Subject key identifier: 5E:AB:45:F1:AE:D3:42:E8:51:4D:25:B2:AB:D9:8D:90:8C:D5:2D:33
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019D28BB8C8AC20656552F736F9E08E085BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 18AB
Signing time: Thu 26 Mar 2026 06:01:12 +0000
Manifest this update: Thu 26 Mar 2026 06:01:12 +0000
Manifest next update: Fri 27 Mar 2026 06:01:12 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: QjRVFzq1A+fkUn3Y6L3eyUKvQLGOKO3m9ESae57xC/w=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8c:8a:c2:06:56:55:2f:73:6f:9e:08:e0:85:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Mar 26 06:01:12 2026 GMT
Not After : Mar 27 06:01:12 2026 GMT
Subject: CN=5eab45f1aed342e8514d25b2abd98d908cd52d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:ef:7d:af:bb:81:d8:d6:68:37:0b:8c:95:
2e:a4:55:cb:0d:d3:2f:8c:63:14:f7:c6:f3:5b:35:
a6:ef:11:f9:53:89:1d:f9:27:d6:ca:86:3a:e4:51:
11:e1:ee:07:43:4b:5b:b3:9b:a4:a8:cd:b6:a0:30:
70:2e:45:fd:eb:85:87:da:e3:9b:13:90:9b:22:25:
0e:ba:c3:c7:df:3c:db:c6:e2:e9:0c:d1:48:e3:12:
2d:1d:ee:e6:95:da:0c:1e:75:bc:8f:ff:0d:63:d4:
b0:c4:a5:51:ca:2b:fb:94:93:cf:23:79:19:2f:22:
aa:b9:02:ab:5d:4e:9c:b5:52:d2:83:9d:6f:c4:02:
ec:0c:26:f6:74:18:b3:fa:2d:b1:33:6e:6d:c0:ca:
3c:e4:4a:e5:e5:7f:bf:93:e7:49:b5:03:36:be:fb:
ba:ad:6f:ef:dd:15:ad:71:88:1f:ba:c0:1a:cd:01:
4c:1d:30:bf:12:01:db:fe:e2:6e:b8:f6:d7:41:9f:
38:e9:bf:a3:c0:ca:e9:8a:2c:1d:f3:d5:9b:84:c6:
0c:f8:cc:49:9b:e7:7a:6f:70:6a:ac:c1:6e:81:4b:
e6:a7:c8:7a:5c:ba:4d:03:7d:ee:76:8d:c5:53:5a:
17:c5:7c:ed:2d:cf:34:46:2c:d6:e0:a6:b5:9c:db:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AB:45:F1:AE:D3:42:E8:51:4D:25:B2:AB:D9:8D:90:8C:D5:2D:33
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:30:78:7f:e3:fb:2d:3c:34:be:8a:b5:7c:1f:33:d8:de:8a:
8f:7c:03:ff:a7:a0:22:81:a8:1f:20:67:fe:4b:36:0e:c8:96:
cf:4c:ee:92:a3:d8:7f:b7:6f:d1:97:19:4e:37:97:ee:8a:06:
3b:a4:3f:1d:0f:7c:96:de:83:14:f4:c8:67:4f:44:b4:89:d4:
73:ef:20:25:d0:dd:50:0a:a7:af:7c:b5:b6:43:24:c9:62:58:
ae:e2:ec:51:64:a3:a2:5d:2f:8f:4c:c9:7b:a1:04:ce:97:2d:
ac:16:38:fc:43:a8:9d:af:07:50:18:92:d1:7a:65:90:07:f3:
2c:5b:46:c6:c5:f8:46:2a:92:48:04:14:15:ba:f7:34:1e:75:
00:ad:a8:67:bc:18:14:7f:42:fb:60:e9:24:1d:e6:cc:b3:4e:
66:4e:60:86:e2:36:4d:8c:3b:1b:b2:36:8b:84:52:af:b8:5f:
03:5f:81:d4:51:e7:5b:48:3a:39:37:22:d6:eb:f8:d9:b3:ca:
c5:d5:02:a6:91:92:59:8e:74:ac:c2:b2:d9:f0:8f:e9:c9:e3:
b2:98:81:2a:76:38:70:98:d3:dc:f4:97:26:27:5b:aa:57:d9:
30:89:5c:af:af:76:ea:7b:ac:27:1f:ed:34:76:09:b9:f9:de:
04:5b:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:36 2026 by rpki-client