Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: ujaHlL39yIdy8hAbYvZvvrMbT/MHPzwj02inl8auGTA=
Subject key identifier: 6F:A3:4F:3D:1D:B3:B7:CA:4A:FA:50:71:B7:68:06:27:94:56:AB:86
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019F3C74045D61B5DA5ECA77F988ECC404BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 0403
Signing time: Tue 07 Jul 2026 12:01:03 +0000
Manifest this update: Tue 07 Jul 2026 12:01:03 +0000
Manifest next update: Wed 08 Jul 2026 12:01:03 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: 7DZ8IgXa4i10PN4dS1jCAWD045sC9mOzPgkg30K/+OA=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:74:04:5d:61:b5:da:5e:ca:77:f9:88:ec:c4:04:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Jul 7 12:01:03 2026 GMT
Not After : Jul 8 12:01:03 2026 GMT
Subject: CN=6fa34f3d1db3b7ca4afa5071b76806279456ab86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:5a:68:3d:5b:16:6d:a4:0e:6f:39:a0:a1:
b5:e2:09:be:65:7a:52:e4:f7:e0:e4:a5:8f:6c:b6:
84:1d:ac:3c:2c:5c:ba:56:c7:0f:c3:ca:f7:ab:51:
45:68:c0:fc:7e:8c:43:2c:66:f1:9d:6e:b2:ea:23:
9e:cb:07:3f:51:68:21:02:4d:4b:02:cd:4b:0c:57:
51:9c:94:8b:17:fd:9e:74:ae:bf:fe:b8:0f:ea:9b:
24:d6:c0:28:01:6d:43:40:02:8d:b5:a0:b7:a7:3a:
23:32:f2:eb:b9:64:b9:c5:2f:07:60:2c:e6:54:cf:
89:7d:f4:d2:4a:a8:27:ad:f5:0d:b0:e9:0a:4d:b1:
a5:49:20:c5:fe:8a:d2:7a:fd:24:e8:db:bf:5f:1f:
e6:ae:fc:8d:42:ba:b8:02:5f:b7:f2:99:9c:99:ff:
d8:e4:fe:1e:53:16:76:fa:95:55:c3:e3:0a:23:23:
4d:8c:3d:5a:a8:b2:d1:b1:2a:7e:24:3c:9a:7d:e0:
18:4b:c9:a4:0c:bb:2c:7d:af:a6:1c:be:f9:e8:fc:
ba:17:4c:0c:3b:aa:c6:11:95:bb:94:30:ec:92:3a:
66:df:4b:f8:d5:01:47:af:0c:ad:bb:76:a2:1d:31:
fa:7d:42:a6:5f:0f:fc:bc:09:87:a0:33:1e:52:c5:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:4F:3D:1D:B3:B7:CA:4A:FA:50:71:B7:68:06:27:94:56:AB:86
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:96:f7:57:46:ee:7c:7e:a8:80:50:f0:cb:0b:49:51:4a:50:
12:92:39:1d:34:64:ab:44:4b:96:85:62:ad:ed:93:72:77:0b:
d3:cc:da:85:32:bd:90:ce:16:27:9e:7e:24:d9:10:04:5a:08:
be:13:d1:7f:a4:5e:3d:22:7c:af:5c:b9:b7:e7:49:99:91:41:
e1:dd:91:94:f1:2b:db:12:71:c6:3d:c0:f0:de:97:f8:e2:0b:
48:6f:0a:23:36:e0:f4:30:13:cd:2f:d2:83:3f:46:4e:3c:c3:
28:1d:3c:be:d0:3a:f5:64:8a:8b:97:d9:ea:71:17:a5:73:6b:
77:a6:92:86:f2:dd:74:92:dd:71:21:01:9e:37:8b:6e:c7:db:
27:74:d5:44:1b:08:07:8f:31:dd:3d:07:17:67:d7:5e:41:2a:
d8:e1:dc:52:82:21:71:c5:1f:d9:c5:cb:09:b7:03:25:46:ed:
90:82:46:d5:ac:87:9e:b1:6c:73:e1:d5:bb:1f:8f:c9:f6:4b:
03:d3:4c:f3:76:c5:83:77:12:09:30:b9:9d:2f:a0:cc:9d:47:
c4:d1:70:bd:f3:8c:62:72:f9:b8:22:e7:c7:45:98:b8:b8:a5:
5f:86:91:9a:8d:61:b0:75:eb:17:4b:40:55:03:f9:5d:15:16:
68:3e:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:48:30 2026 by rpki-client