Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
File: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft (raw, json)
Hash identifier: ct8WAEGddIsdyOFSkzOC01TH8FKa2bJtEjywLLD/qBc=
Subject key identifier: 59:7E:85:9C:44:ED:85:06:F7:C3:53:F5:04:F1:10:75:E7:9C:9D:AF
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Certificate issuer: /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial: 019D3753295EA4382C6E8B2D0DE3A6722A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:01:30 +0000
Manifest this update: Sun 29 Mar 2026 02:01:30 +0000
Manifest next update: Mon 30 Mar 2026 02:01:30 +0000
Files and hashes: 1: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl (hash: GfeGcswAn3+sR3XqaslfKCYUWHTaO3QTzcPidW7pl1w=)
2: ixtZoNmxiG_wkXITXELK6spLLhI.roa (hash: R3WjQ04yzcChTqlhK+2BR+bykQrjNPE+INNVOK70dYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:29:5e:a4:38:2c:6e:8b:2d:0d:e3:a6:72:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Validity
Not Before: Mar 29 02:01:30 2026 GMT
Not After : Mar 30 02:01:30 2026 GMT
Subject: CN=597e859c44ed8506f7c353f504f11075e79c9daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:fa:bd:83:6c:a8:08:c3:b3:fb:9d:7d:ff:
64:52:16:c5:1e:93:2c:54:30:f1:3e:03:93:23:d7:
92:b6:61:e2:95:98:f2:96:dc:ba:6e:35:dc:2b:e7:
61:8b:d3:0b:b5:5b:e6:08:95:27:9b:e8:84:cc:8d:
86:ad:6c:78:bf:25:23:b5:4c:53:62:4f:9b:2b:00:
1b:ba:b6:6f:c2:81:ee:1b:34:02:0f:46:98:8a:38:
7e:b4:5d:0c:a2:1e:b7:b5:1d:9e:2c:e4:a2:1d:9d:
7b:55:89:37:c4:6c:ae:b9:ab:24:4d:e9:9e:8f:4a:
3d:c8:20:eb:3e:77:61:da:e2:3c:b6:1f:6a:88:ca:
b8:b0:68:0c:e3:eb:29:a3:3c:da:8b:f5:67:2c:c9:
04:82:a1:d6:b7:c0:2d:7c:6d:6a:d0:f7:31:e4:bf:
c3:22:88:28:59:6b:22:14:da:06:54:82:fd:d1:33:
47:d4:f9:91:90:3b:01:7c:bd:05:65:dd:29:d8:2b:
b2:a6:09:ad:72:ee:dd:84:59:65:1f:20:43:4d:98:
b8:4e:a7:95:42:9d:39:61:2a:6d:2e:4b:fb:0f:cd:
55:4a:48:87:1c:ca:57:c8:c5:25:1d:64:f8:2a:08:
06:6c:a2:52:1e:52:5b:ee:fa:66:91:8c:dd:e5:ff:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7E:85:9C:44:ED:85:06:F7:C3:53:F5:04:F1:10:75:E7:9C:9D:AF
X509v3 Authority Key Identifier:
keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:55:e0:db:e7:1d:48:1d:af:e7:60:44:f8:9c:9a:62:e3:3b:
4c:88:25:27:9c:21:2d:bd:93:b7:25:96:77:aa:21:c8:84:c7:
0c:59:c6:51:5f:57:d6:8c:fd:c8:b6:08:01:c2:79:69:29:f5:
2a:c1:a2:6f:e1:6c:72:67:c8:20:19:51:05:95:33:b5:28:c9:
89:fb:7c:bd:6c:6d:00:e4:05:85:fa:29:2e:eb:9e:f6:fe:ce:
e2:40:91:b6:ac:04:8c:a3:b2:86:22:1e:a6:7f:b0:69:6b:12:
b1:4c:41:34:aa:a3:aa:54:6d:f3:58:ab:e2:3d:8e:43:24:ff:
c3:b6:81:2a:06:81:68:4b:13:06:f4:7a:82:95:42:90:8e:e9:
6e:26:b1:dd:04:03:2e:ac:48:f2:9d:5e:6a:03:bb:b5:5d:5f:
e6:74:d8:b0:51:95:de:a6:7b:8b:24:55:9a:0d:75:6d:ef:ca:
26:bf:ec:49:98:e6:39:4d:e8:e1:bc:17:a2:8f:be:76:13:62:
90:16:e7:22:99:5a:69:9b:9c:ce:d5:b9:55:62:fd:0d:41:5e:
e6:20:31:9e:34:ac:ce:54:e7:8a:98:78:08:af:2b:ff:27:6b:
ec:33:79:6d:85:e0:e7:b5:43:69:a3:1e:b6:15:21:3c:d1:48:
c9:72:ca:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:27 2026 by rpki-client