Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
File: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft (raw, json)
Hash identifier: Ik9rox/rU4Ktq6UJD25WZSvIBCfKKb8XaCVIr2LM6n4=
Subject key identifier: FF:F1:CE:E9:C2:A4:6E:48:12:DF:95:B3:7C:AD:B6:32:82:67:A6:BA
Authority key identifier: FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
Certificate issuer: /CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Certificate serial: 019D3865AB3BE62316F9ACC49B8B3035CE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
Manifest number: 0215
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl (hash: mI0VKAUDssBhaEL/kAM7q/bFpTZ2e3ZXyhV7HbQuI3E=)
2: UQ-Obiva26_mmAwhjKc3uzVQ7mM.roa (hash: a+cVa2kzi7Q/+FGH9LfCA4p6Z3qaWMrupfp1ELf+pAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ab:3b:e6:23:16:f9:ac:c4:9b:8b:30:35:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=fff1cee9c2a46e4812df95b37cadb6328267a6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:53:92:8a:95:0d:c7:11:ba:27:c7:ac:65:
91:15:11:f8:c0:c6:d7:ff:7c:17:82:6f:0f:17:88:
5d:9d:b0:44:ca:8f:57:72:df:a9:be:1b:9d:f3:33:
2d:06:95:4c:86:6e:b7:89:ac:1d:a9:b8:ad:b1:ba:
c0:8e:95:89:17:ab:04:25:62:6e:2f:b8:c4:3b:c1:
94:0a:11:78:97:1b:91:b9:02:63:64:42:65:de:c8:
0c:99:76:8f:c4:a5:c5:5d:fe:ad:38:1a:5e:33:53:
f0:16:ee:69:2a:e7:2e:a2:05:e3:8d:ee:fb:0e:e6:
3b:ce:1c:cc:c5:f7:33:03:c2:47:76:09:31:b4:3f:
a1:cf:fd:1c:b7:bf:88:89:4d:d8:b1:a9:36:9f:12:
1f:88:b1:f6:38:f8:4e:86:05:78:d1:35:fd:d9:e7:
7c:9a:5e:d1:a0:c9:82:2f:f1:95:06:2d:96:c4:2d:
06:7b:10:be:17:c2:47:c0:cd:61:4e:ee:89:d2:a0:
c7:1e:89:9b:95:24:1d:d4:8a:14:e1:61:82:10:92:
02:da:e4:69:3d:34:fb:6b:c6:2d:fa:21:42:d2:02:
d1:08:58:55:5a:b2:78:f6:fb:21:ef:9d:69:fd:e4:
fa:e9:62:03:f7:0f:f8:b6:e4:e9:9a:90:86:23:b5:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:CE:E9:C2:A4:6E:48:12:DF:95:B3:7C:AD:B6:32:82:67:A6:BA
X509v3 Authority Key Identifier:
keyid:FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:43:e6:25:4f:bb:a3:4e:47:a4:ab:0b:b1:15:aa:6a:7d:5b:
d3:3d:3d:15:f8:87:c8:34:98:43:76:60:e7:1c:52:1c:6c:44:
7c:91:53:8b:f4:81:9d:a5:e4:ab:9e:17:66:23:56:74:1f:a0:
e2:7c:75:12:74:6a:49:59:c7:db:43:27:df:7f:eb:df:96:93:
3b:8f:b9:d8:2a:a8:33:39:f5:ef:64:f6:b2:63:18:e3:bb:4e:
08:08:fc:c6:80:74:c1:e6:ad:83:3a:df:ee:5c:0d:38:f0:fe:
40:7c:9a:3e:ea:2c:d8:51:34:b9:dc:c5:80:25:2f:19:8e:2f:
58:5c:bd:65:93:14:f6:de:09:0f:25:83:b3:25:62:0c:5d:2d:
de:6d:db:b4:8b:cf:23:af:da:3d:d5:ee:e2:44:41:f8:8e:cd:
90:f7:d4:ac:9e:88:91:18:18:61:7a:d5:60:7d:3e:86:94:51:
9d:0e:70:97:e4:79:a6:8f:fd:33:2b:e8:5f:41:2f:af:f1:c4:
ba:a3:94:f9:63:16:c1:a1:d1:3d:fd:08:ea:c1:90:e4:bc:fe:
82:9d:b7:bb:f3:b7:4a:37:0b:2b:04:b6:1d:89:1c:13:5a:77:
79:cb:a5:f1:8d:4d:36:81:34:81:98:86:c9:0e:31:8a:24:d2:
16:8b:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:38 2026 by rpki-client