Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier: hOazeKx+g5Gpa4VoMGu/X/zJ8nYanBYbQLN9V8wVwRM=
Subject key identifier: C8:08:CE:64:EE:E1:43:79:CC:43:BE:E6:C3:12:69:2E:75:A2:15:8D
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial: 019F1867C5BA78AEC3554A90BF362D395586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 12:01:21 +0000
Manifest this update: Tue 30 Jun 2026 12:01:21 +0000
Manifest next update: Wed 01 Jul 2026 12:01:21 +0000
Files and hashes: 1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: CRZ0B8WJI4Zc+QDp5ICuVd+xh/oKCfV2iDyYJLFlvKQ=)
2: 4-k2BQwcooezjDVQqn3GH7FYIyg.roa (hash: u1bK1aC0Jx5hdjBp120tHkvEXpneiYzeiUJqLBrJ+rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:c5:ba:78:ae:c3:55:4a:90:bf:36:2d:39:55:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
Validity
Not Before: Jun 30 12:01:21 2026 GMT
Not After : Jul 1 12:01:21 2026 GMT
Subject: CN=c808ce64eee14379cc43bee6c312692e75a2158d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:9a:3d:03:9c:61:55:89:a6:c6:64:16:32:
79:55:e5:1b:24:c8:85:10:78:bb:4b:b4:d1:23:06:
5f:97:37:97:cb:e8:e3:60:27:e6:e0:77:ae:fd:75:
77:f2:d7:47:35:ed:46:d2:17:e6:4b:ed:67:bc:87:
60:f5:9e:80:bf:15:de:b5:ec:c4:52:11:9b:6a:af:
1c:54:99:d2:92:b6:f9:ee:a9:8a:d6:85:7e:87:16:
5d:7f:8b:da:d4:31:24:72:02:6d:e9:14:ca:91:71:
b8:ff:d7:a4:61:42:3f:9a:bc:a2:28:f7:6f:06:dd:
86:04:91:44:e4:e0:64:44:ad:8b:cd:a3:a6:0c:3e:
77:b7:3e:8f:39:ce:eb:75:71:94:ae:4e:77:ae:2b:
10:34:5f:64:af:c1:96:62:69:67:0c:7f:3d:bc:c6:
1d:ce:ed:54:d3:11:82:9b:29:f0:fc:1b:cc:d6:eb:
47:b5:16:62:f5:dd:e8:78:f8:9f:ac:82:d9:67:0e:
05:36:74:d6:6e:49:3d:6f:fc:db:46:26:ae:e9:15:
0a:a9:b2:f4:5c:4f:51:ae:80:8f:7e:86:84:db:91:
84:d9:bf:58:b6:e0:f6:22:d6:e9:72:c9:a0:29:7e:
5c:8d:0e:5a:cf:78:66:77:d5:60:6c:36:75:08:be:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:CE:64:EE:E1:43:79:CC:43:BE:E6:C3:12:69:2E:75:A2:15:8D
X509v3 Authority Key Identifier:
keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e7:79:83:7e:de:3d:2d:c3:05:b7:bf:38:40:20:14:b7:e9:
7e:c6:d3:38:2d:8a:fc:04:e4:b4:93:e8:2b:97:cb:77:5f:66:
6a:1d:1b:ab:91:ad:8b:26:bb:7b:cf:7c:c3:25:c2:62:f5:c3:
b6:7c:37:80:c5:5a:37:bc:88:f2:6f:5d:91:fc:ed:4e:61:6d:
e6:5a:42:16:81:6e:03:c9:7b:f0:3c:b0:8a:17:23:a0:bb:b6:
3a:60:db:b1:f7:b6:83:3d:93:4b:c9:74:88:c0:44:78:20:c0:
73:ce:0b:2c:5d:d3:fb:1f:db:4a:ef:e0:c6:26:eb:6c:8b:84:
d9:c9:e7:eb:e4:2b:41:9b:53:1a:b7:1b:f2:be:e2:67:70:d4:
d3:dd:57:ff:92:d6:a4:85:4c:22:87:ee:73:bd:35:b4:c7:24:
7b:67:90:82:d1:1c:bf:25:93:12:e7:d9:e7:6a:71:cc:20:e9:
7d:2e:6b:84:7c:62:2b:ff:f8:f6:c6:30:38:96:bd:13:1a:f2:
e3:bb:41:ca:88:26:29:48:fa:9a:a7:3c:c3:8c:f6:85:17:34:
b7:96:16:03:ec:f3:96:bb:d6:03:af:ac:78:ff:13:32:25:8b:
75:ed:72:be:16:dd:08:9d:42:dd:f9:f2:48:f8:18:80:e0:fc:
c8:dd:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:50 2026 by rpki-client