Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: JBP1g7RTFybD56M+7D+8UOupJTU3d6gIBjrqZ4g36Ak=
Subject key identifier: BB:8E:7C:12:33:47:F8:66:B0:1C:55:D6:F1:6F:D6:30:01:1D:37:EC
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 01A13FDE733FB5B0A34CDCC968CAF16C3039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 120D
Signing time: Thu 15 Oct 2026 14:01:45 +0000
Manifest this update: Thu 15 Oct 2026 14:01:45 +0000
Manifest next update: Fri 16 Oct 2026 14:01:45 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: WG7zlguCsNGuoZ9KKORZo1TI8j2zkg/J2knO4VQ0sX8=)
2: b4jVpXvDDybGJ8khFBjF7U8BVH0.roa (hash: Ssw5mGkKRGt/i+elQJI+geK+/agjaWjYsjDTLxvkTiU=)
3: wVx7rtULVcYW9BDWlkXZjIZtBo8.roa (hash: LmhyElDVrU5UgStQexdVCOdGPfV7XQ8KLpCnik7DKA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:73:3f:b5:b0:a3:4c:dc:c9:68:ca:f1:6c:30:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Oct 15 14:01:45 2026 GMT
Not After : Oct 16 14:01:45 2026 GMT
Subject: CN=bb8e7c123347f866b01c55d6f16fd630011d37ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:70:10:20:af:6a:02:3b:91:2d:d1:9d:d6:
01:bf:89:0e:36:e7:68:05:f5:ac:dd:9d:b6:77:82:
ca:f4:70:d9:63:45:7a:da:11:02:7f:2a:4e:31:da:
47:16:9b:e9:13:37:2f:1b:cb:55:bb:88:ae:64:9f:
60:ef:cd:a5:db:24:21:69:af:63:9e:41:d4:c9:b8:
93:24:f1:97:97:ff:6c:42:e0:81:74:08:41:fa:aa:
d4:29:4f:ba:12:8b:1c:0e:99:cb:90:46:4b:0a:72:
69:c5:69:7e:e1:9e:4a:c8:b2:78:e0:43:6d:73:66:
11:2d:59:ea:b5:82:c9:2a:87:44:db:77:79:3c:3e:
02:6a:bb:c8:ec:a4:d9:c4:f1:3a:83:87:14:50:67:
e7:66:6d:6c:f3:01:85:14:36:b6:59:6e:7f:b4:92:
12:a5:b3:22:0d:a7:bb:67:28:59:10:52:67:87:6f:
aa:b3:41:76:14:15:a6:14:e9:ed:99:ec:48:21:33:
5f:ad:b1:d8:f6:df:71:65:41:32:50:6c:aa:ce:e5:
74:b1:7b:ac:46:e6:59:37:6f:e9:7d:e6:e9:5d:26:
83:70:34:e5:07:7b:55:1b:a2:59:35:0c:72:32:29:
e1:1f:61:e0:69:b8:4a:03:db:be:9a:d5:88:d5:6f:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:7C:12:33:47:F8:66:B0:1C:55:D6:F1:6F:D6:30:01:1D:37:EC
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:99:05:40:47:e0:18:f5:8c:02:c8:e1:bb:37:43:eb:4c:a8:
e9:d0:a7:9f:50:39:c4:66:6a:1f:7c:01:07:f6:30:06:a8:10:
e9:b8:81:b6:8d:5b:a1:c0:fd:24:cd:e4:22:32:5e:7c:0c:cf:
75:3c:26:f2:e3:42:3a:88:60:62:2f:71:1d:12:e3:b3:99:70:
ba:30:a1:2e:cf:e9:6a:53:2e:1b:95:54:33:f0:4e:17:86:e2:
0d:d4:e2:5e:dd:c0:e3:a8:01:c4:9a:27:10:b6:1a:eb:de:ec:
24:ba:84:db:0b:f9:63:1f:eb:55:3c:47:60:f3:fa:39:a4:6f:
0e:5b:71:53:8c:30:3e:f7:04:38:fb:f6:03:ec:06:00:e4:87:
76:92:5a:be:e5:cd:2f:9b:59:69:fa:e7:e7:2c:a7:26:82:87:
72:ab:3d:f2:98:20:2e:b8:27:57:fc:ba:47:36:65:ff:c1:76:
8b:45:b4:0f:ef:dd:cc:a4:6c:35:b2:45:c9:d8:71:27:9a:ef:
5d:63:da:78:60:ff:df:97:4f:39:f9:b0:09:0e:71:16:a4:07:
b3:61:c3:fc:7c:65:75:8b:49:84:dd:a6:d5:01:2f:af:38:2f:
e3:a5:98:4a:78:13:90:9b:ee:18:78:86:c4:83:b2:0a:7f:ed:
c5:bf:3e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:21:53 2026 by rpki-client