Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: 2BT2al4oMK7fdI77iIc4utQcKdzENt0vCvEAANz7VBw=
Subject key identifier: 77:F7:09:43:2C:1A:30:1B:3B:48:51:95:5F:A3:20:C2:F5:59:5D:7E
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019D37524864BB170D8E7268F408E9057E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0FF3
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: 0HKg8uH6cdYkhCmod68CGVyEJVY.roa (hash: nHekJ9B0E/EBXFK9sjaa2GSBNkwPlvZK9aL2VrpgqLc=)
2: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: /DNg5pyz3eJ4vn8xJxflMaUy0in4HhZg2RX2YHwqtUE=)
3: rQcEs3Af4LaLGUacDsSGTWNpXEg.roa (hash: yjLuvj/zIi87kGkUau/dqofBhr3Db1ixSQwKoxIfjdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:48:64:bb:17:0d:8e:72:68:f4:08:e9:05:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=77f709432c1a301b3b4851955fa320c2f5595d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:b6:e6:02:34:cf:06:5e:02:30:fd:7b:76:
65:d3:53:cd:e8:49:6d:c0:f0:50:34:69:ff:be:9d:
f7:55:82:62:d7:4f:e6:42:90:bb:8a:c3:36:ab:52:
e4:5b:2a:0c:fe:d1:fc:d6:9c:c4:82:1a:6d:67:e7:
c2:40:77:89:35:cd:1f:f3:f3:7a:50:1c:8c:51:10:
c1:da:3a:61:cf:27:ba:d0:a9:45:d9:75:d6:c6:2e:
88:98:6b:61:da:bc:af:f1:21:8a:d8:d4:95:7e:c0:
d5:4f:51:0f:4a:22:3a:6d:f3:c9:1c:d0:b3:6d:5c:
a2:9a:04:ff:1c:9f:68:40:5f:5f:7b:5a:3d:96:90:
0d:fe:6d:e5:17:4d:bc:6b:06:b6:ac:69:5b:b6:20:
df:fd:ea:75:d0:30:04:23:d7:9f:3d:bb:31:57:8c:
cd:5b:a9:94:9f:a3:a9:d7:96:9e:0b:fe:35:45:33:
4c:d1:26:3f:35:a4:04:07:60:88:af:29:ad:3b:7f:
b9:1d:ef:3b:4e:f0:ca:8f:22:68:97:39:f4:f6:13:
4e:d7:26:3d:48:5e:fd:f7:8b:da:42:9c:d8:16:a7:
e0:6b:1b:66:02:22:e6:ee:8f:ec:b4:4c:1a:3d:6b:
9c:b9:7b:10:b3:72:02:ea:44:bb:ae:8a:db:fc:1d:
08:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F7:09:43:2C:1A:30:1B:3B:48:51:95:5F:A3:20:C2:F5:59:5D:7E
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:f1:b8:f7:64:83:8f:6c:e2:b9:1d:47:75:df:b9:56:a4:
93:43:f8:d9:b3:4c:42:40:45:66:89:07:54:99:df:ef:d3:2b:
54:f3:aa:d0:df:af:5c:0c:3c:24:cc:dc:8f:18:4a:31:ea:37:
0c:63:0a:57:be:1a:ab:d4:06:b1:bf:34:66:c3:7c:fe:01:45:
20:be:69:be:71:93:04:38:e1:e5:85:81:43:2e:09:52:26:23:
69:49:49:e0:d2:45:02:f3:a2:56:16:1b:41:3d:8c:9c:4f:d0:
a3:61:69:fe:6a:fe:da:cc:3d:51:90:66:f6:56:cf:6d:70:45:
33:25:de:59:a1:d2:04:3a:ef:6c:89:b1:48:7b:12:08:5c:06:
a4:5e:cf:48:84:72:1e:11:b1:b4:d4:05:10:bf:f2:65:69:94:
56:35:1c:65:5c:af:22:49:ec:ce:43:45:74:1e:da:f9:53:a9:
2b:03:69:75:60:b1:19:03:77:eb:3f:e4:53:aa:ea:3e:a7:9d:
f6:bf:ff:ea:78:8b:26:57:1f:5b:e4:50:37:57:1e:fb:bd:a2:
43:6c:5a:c2:10:44:35:08:25:05:cb:49:67:fe:a7:54:da:ee:
98:22:ad:c0:ba:44:e1:bc:18:6a:95:fd:a1:ad:c3:4d:cd:d6:
cb:ae:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:53 2026 by rpki-client