Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: gMNp/7YWTfqQWjHG/ZnAoFTO+zM4kK7cTAy9Al4JF3E=
Subject key identifier: F5:7E:13:AA:01:FB:A2:C8:02:C2:0C:64:C4:BE:62:23:46:7F:21:48
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019F18678BC0C11A4AEDFC2F27D2DA9BACC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 10EE
Signing time: Tue 30 Jun 2026 12:01:06 +0000
Manifest this update: Tue 30 Jun 2026 12:01:06 +0000
Manifest next update: Wed 01 Jul 2026 12:01:06 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: Nrq47M1u9Mj1ky9ygebqKEqfXm7g+muukOau0WxBbjE=)
2: YgOY2vQ8eYiICTd6YcdmoJM_Ut0.roa (hash: OH/oiPNXGds13W380cavjGRazrPRsf1bjbxs0HeBpNI=)
3: undnEge0qeA9q4RyIyBahaa9u-E.roa (hash: fAF0a35Tv+WeS0uNHyWQe9WUupVmmjemyKo868JNT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:8b:c0:c1:1a:4a:ed:fc:2f:27:d2:da:9b:ac:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 30 12:01:06 2026 GMT
Not After : Jul 1 12:01:06 2026 GMT
Subject: CN=f57e13aa01fba2c802c20c64c4be6223467f2148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:2b:ab:58:62:22:c8:bb:95:16:a4:39:fb:
dd:ec:86:a9:10:33:30:45:b2:fe:f6:f4:69:65:27:
c5:41:86:02:14:c5:8f:14:57:e8:b5:db:48:1a:52:
63:88:2f:f4:6d:dc:7f:48:14:50:5c:fa:2c:64:90:
48:c8:71:78:ea:b5:53:39:df:43:5e:fb:61:43:db:
3c:99:7a:44:f2:d5:f9:8d:a7:7b:b0:16:33:3e:b3:
5e:a6:13:70:51:19:29:72:f7:33:2c:d2:6f:97:9a:
ec:2d:92:2f:6f:6d:aa:a7:31:bb:84:b3:aa:af:63:
ae:db:23:df:48:e5:d8:b8:7a:3e:94:68:68:42:8e:
18:ed:20:ef:2a:67:97:07:9a:50:e3:c1:b8:d8:86:
00:cb:35:aa:ce:54:7c:22:a1:5e:3b:3d:27:43:6f:
d7:71:76:01:c1:ba:fc:5d:3c:2d:da:fa:05:c8:c0:
9b:66:71:9d:64:1c:f4:10:01:16:99:41:bf:52:43:
cf:db:87:b6:4f:f6:cd:ee:0a:1c:16:b7:46:2e:58:
4f:03:80:80:b6:11:79:cd:84:1b:ff:45:32:6e:93:
a2:64:75:ab:fe:6d:47:48:b6:ea:4e:34:f0:f8:7b:
69:bc:af:fd:4e:ed:51:14:4e:01:b3:0b:f2:40:88:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:13:AA:01:FB:A2:C8:02:C2:0C:64:C4:BE:62:23:46:7F:21:48
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:95:55:0d:b6:0a:b3:3a:42:d8:3b:ed:98:89:a5:17:b0:44:
45:5b:95:76:b6:b0:97:37:2c:c8:e8:75:29:a4:52:49:e7:27:
31:41:0a:af:69:34:ca:9e:6b:02:54:3f:93:99:c5:21:c4:50:
67:0a:42:ea:08:f5:35:bc:cf:12:86:59:d3:96:23:45:8b:75:
a2:d7:26:f4:b2:7c:ec:11:12:e3:36:2f:db:99:ba:5a:e5:87:
88:b9:4e:5c:88:c6:c7:ee:44:9f:c9:b4:0e:39:a5:a4:d3:96:
7c:40:d5:55:35:ca:fb:ca:2f:cc:6f:0c:67:8c:38:0e:0a:03:
e4:bd:3f:62:fd:51:eb:bf:ad:6f:16:5a:35:9e:c5:73:9b:34:
70:f8:d0:5f:26:e2:e7:dd:a8:82:c1:9d:c8:ec:5f:8c:49:3a:
3c:00:76:b7:c4:62:15:3f:db:88:89:ff:16:0a:2a:29:08:8e:
e3:10:9b:14:a3:b9:04:c9:6e:12:8c:78:df:49:c3:b4:4a:35:
24:ca:18:e1:05:40:67:a7:b8:5b:4a:59:a8:38:ee:96:ce:46:
48:b3:c7:ee:f1:9b:29:fb:e4:94:b5:36:27:a4:10:3c:0c:b9:
9e:c7:75:bb:e3:ce:71:ee:0a:92:ee:11:47:b8:ae:7f:29:1d:
95:04:30:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ4vAwRpK7fwvJ9Lam6zDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjIwY2VjNzA5NzRkMDM3ZDc3Njk3NThjNzQ2NjgzMDVi
MzJjZjIwHhcNMjYwNjMwMTIwMTA2WhcNMjYwNzAxMTIwMTA2WjAzMTEwLwYDVQQD
EyhmNTdlMTNhYTAxZmJhMmM4MDJjMjBjNjRjNGJlNjIyMzQ2N2YyMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQQrq1hiIsi7lRakOfvd7IapEDMw
RbL+9vRpZSfFQYYCFMWPFFfotdtIGlJjiC/0bdx/SBRQXPosZJBIyHF46rVTOd9D
XvthQ9s8mXpE8tX5jad7sBYzPrNephNwURkpcvczLNJvl5rsLZIvb22qpzG7hLOq
r2Ou2yPfSOXYuHo+lGhoQo4Y7SDvKmeXB5pQ48G42IYAyzWqzlR8IqFeOz0nQ2/X
cXYBwbr8XTwt2voFyMCbZnGdZBz0EAEWmUG/UkPP24e2T/bN7gocFrdGLlhPA4CA
thF5zYQb/0UybpOiZHWr/m1HSLbqTjTw+HtpvK/9Tu1RFE4BswvyQIiv/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPV+E6oB+6LIAsIMZMS+YiNGfyFIMB8GA1UdIwQY
MBaAFNViDOxwl00DfXdpdYx0ZoMFsyzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTkt
YmU0MzRjYjlmOGY4LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTktYmU0MzRjYjlmOGY4
LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZVVDbYK
szpC2DvtmImlF7BERVuVdrawlzcsyOh1KaRSSecnMUEKr2k0yp5rAlQ/k5nFIcRQ
ZwpC6gj1NbzPEoZZ05YjRYt1otcm9LJ87BES4zYv25m6WuWHiLlOXIjGx+5En8m0
DjmlpNOWfEDVVTXK+8ovzG8MZ4w4DgoD5L0/Yv1R67+tbxZaNZ7Fc5s0cPjQXybi
592ogsGdyOxfjEk6PAB2t8RiFT/biIn/FgoqKQiO4xCbFKO5BMluEox430nDtEo1
JMoY4QVAZ6e4W0pZqDjuls5GSLPH7vGbKfvklLU2J6QQPAy5nsd1u+POce4Kku4R
R7iufykdlQQwTQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:14 2026 by rpki-client