Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier: Wi6VfeMz+P2HPGyYqb8VF9UcXHAv5LArmCJ5pjS0Sro=
Subject key identifier: C7:8F:3E:10:57:64:9F:6A:59:5D:2A:BB:88:25:C7:8E:0C:98:12:57
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer: /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial: 01A040857C22FC9F63B4E55B42BA2D76E077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number: 1A20
Signing time: Thu 27 Aug 2026 00:01:24 +0000
Manifest this update: Thu 27 Aug 2026 00:01:24 +0000
Manifest next update: Fri 28 Aug 2026 00:01:24 +0000
Files and hashes: 1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: y2fY+38QAKBBoQu0IQ16nUBJGvqHgblPYkUqMHCGrks=)
2: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (hash: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:7c:22:fc:9f:63:b4:e5:5b:42:ba:2d:76:e0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Validity
Not Before: Aug 27 00:01:24 2026 GMT
Not After : Aug 28 00:01:24 2026 GMT
Subject: CN=c78f3e1057649f6a595d2abb8825c78e0c981257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:6f:14:52:60:7c:77:ef:7a:5e:d2:d3:49:
5e:ae:84:d7:ec:a4:a9:38:f4:d9:33:17:a0:5d:fc:
98:71:be:8e:c2:0c:d5:d4:6f:63:f0:9e:44:3c:d3:
6e:9b:57:d1:2e:52:40:ae:71:49:ed:bb:bd:16:d6:
be:ac:b3:b8:fb:2e:f7:bf:aa:ee:69:5e:9a:28:fa:
84:14:e3:e6:e4:b8:75:9b:29:1e:6d:48:8f:25:cf:
26:31:41:ca:dc:13:5a:3c:24:d4:f4:c6:15:84:41:
3c:e2:6c:d8:a1:9a:04:be:0b:cb:df:fa:3d:a6:89:
3e:37:4d:b8:dd:64:f9:3a:5a:f2:f5:b2:64:2e:8a:
4c:78:22:29:b0:27:7b:8b:a5:91:56:3d:90:eb:a9:
c5:28:97:3b:e0:d0:6d:23:3d:4e:ad:c3:bb:05:ec:
36:d0:e5:3b:be:e6:27:cf:e2:05:82:65:90:90:5e:
94:a8:47:98:71:ad:36:6f:f3:32:c3:a1:9c:11:74:
db:5e:19:bd:24:c8:a0:92:4f:ef:da:07:d5:90:53:
9a:c4:ed:8a:15:0f:be:16:43:ea:46:0f:c7:be:3f:
c3:b1:9d:5c:33:ea:49:21:f2:2b:2b:1a:c7:3f:c0:
cb:0d:5a:d8:f3:22:09:e7:20:9c:c9:13:64:df:e4:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8F:3E:10:57:64:9F:6A:59:5D:2A:BB:88:25:C7:8E:0C:98:12:57
X509v3 Authority Key Identifier:
keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0e:2c:f7:ca:9e:30:c9:c7:99:57:11:6b:b8:10:14:3c:b1:
f0:06:d3:94:5d:80:6d:54:c2:ef:f9:0e:5e:67:c9:c1:69:9b:
82:91:f1:8a:15:dd:14:2d:55:c3:cc:99:2c:18:fb:75:29:cf:
45:4f:e5:92:0a:af:58:d4:2b:f7:c0:da:32:b1:ec:bb:4f:fb:
3c:91:78:e8:ba:55:41:9f:6d:39:10:04:84:07:c6:78:cf:c2:
00:57:f7:bc:0a:2a:0d:23:46:d8:4e:d2:6c:38:f5:66:24:f7:
c9:b7:1d:4a:57:fc:9d:57:1a:23:9b:30:2e:b6:72:e8:ac:e9:
68:54:24:6f:7b:e0:e3:8a:a4:d2:f4:db:f0:96:1a:73:5f:17:
e5:ea:dc:33:b3:c9:ec:40:04:77:e2:51:d9:8b:5f:7d:52:2e:
f1:82:2a:8d:2e:51:34:ae:2b:72:02:a7:05:c6:88:9b:de:4c:
22:f2:e4:35:0f:e5:6b:a2:98:19:ce:08:e7:e4:06:f8:aa:7d:
5a:c6:ba:8f:73:af:4e:33:98:e5:8e:7d:b8:dc:6c:d9:63:52:
36:f7:86:57:1e:c9:b5:e5:e2:39:6a:ec:91:38:45:28:0e:70:
b0:1b:5c:28:3e:3b:9c:cf:15:85:36:fb:51:9a:47:32:95:70:
d4:49:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:52 2026 by rpki-client