Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: +0TjLoalh2Noia6iIkEEuGlpVkjFA2xcjY6R6Xaqzgk=
Subject key identifier: 8F:47:8A:FF:9A:5B:EB:C3:5E:9F:DE:62:47:D9:F8:AC:49:D2:05:9F
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 019D3977B463850702F40452DD70DB3D8EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 14A9
Signing time: Sun 29 Mar 2026 12:00:39 +0000
Manifest this update: Sun 29 Mar 2026 12:00:39 +0000
Manifest next update: Mon 30 Mar 2026 12:00:39 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: 9Jt1cXMYQuRwGLChdlWq8TYn5NaxMdjHooka+whUsXU=)
2: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (hash: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b4:63:85:07:02:f4:04:52:dd:70:db:3d:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Mar 29 12:00:39 2026 GMT
Not After : Mar 30 12:00:39 2026 GMT
Subject: CN=8f478aff9a5bebc35e9fde6247d9f8ac49d2059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:bc:13:1b:83:6c:32:5e:8f:d7:59:61:2a:
1d:03:3c:36:1d:27:8c:1d:fd:e0:43:6c:a3:8d:72:
95:7b:05:5f:a9:25:ff:e8:19:3f:f9:ff:ee:7c:70:
61:88:b2:de:74:c8:68:13:03:f0:a8:81:26:93:14:
5d:86:78:e6:29:c1:59:71:43:89:be:1a:ca:45:04:
4a:66:e0:e6:ad:1f:d6:ac:6e:ce:a9:0e:56:45:4a:
b1:b5:8d:a0:b5:79:7c:f6:3f:d4:e2:a5:c9:1a:fb:
96:6e:92:3e:42:29:08:69:e5:b3:f7:be:9f:49:24:
35:f9:ad:fd:1c:ee:4e:70:8b:6d:d8:84:42:f0:8e:
8e:2d:04:82:8e:c7:9c:95:54:c0:53:35:eb:3a:d7:
85:44:f5:c0:58:9d:c3:5f:13:40:23:40:4c:7c:4b:
49:72:4d:93:bc:08:30:ab:50:3c:8f:ff:09:3c:b8:
42:c1:76:26:b6:d9:86:7e:94:4f:26:70:14:02:a2:
4c:e4:01:d5:8f:32:91:ac:c0:e3:f0:14:9b:1c:d6:
c0:7c:cf:60:b9:70:35:51:10:eb:fb:27:f5:6f:cd:
ad:2a:21:0e:21:94:61:cd:09:81:b9:48:6c:93:41:
d6:a7:c6:87:85:f3:fc:63:cb:9c:2b:51:b2:bd:56:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:8A:FF:9A:5B:EB:C3:5E:9F:DE:62:47:D9:F8:AC:49:D2:05:9F
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:45:7a:e7:62:00:e0:09:ad:01:ad:09:46:b6:9b:0c:d3:b2:
6c:c8:c6:be:c0:1a:f5:1b:71:5f:b5:06:25:33:e4:4d:67:54:
cd:23:32:40:78:f6:05:b1:c7:7d:36:2a:93:d8:16:18:74:67:
c8:12:8c:9c:45:40:14:74:f3:5e:cd:9f:9e:75:30:cb:93:91:
f0:46:bd:ec:4a:5a:e9:0d:be:86:ed:87:9b:e9:3d:e0:c8:53:
7c:e2:4c:d5:42:6c:31:c1:e1:62:dd:ff:76:51:5d:90:6d:99:
4d:88:f4:de:4a:b4:5c:f2:31:4b:7d:93:53:0e:29:3a:f5:67:
39:5b:10:3c:8f:11:6f:05:2b:18:c3:8a:0f:2c:33:0b:d1:8c:
57:f1:3b:b8:ed:b7:d0:76:3b:9a:5b:cf:4f:28:0d:91:a0:67:
c7:8c:36:ec:90:29:84:ae:fc:5a:b7:c7:33:b7:6b:6e:97:cf:
da:a2:3c:de:a3:5b:95:fc:b6:cf:68:71:da:84:bc:a3:d7:d3:
e3:cf:0e:8b:89:76:d3:59:1b:a1:4e:9d:87:1b:bf:ff:d8:92:
87:5a:88:33:f2:4d:7f:2d:d3:4b:8b:c5:0c:ea:e0:26:57:d7:
c6:05:95:72:44:91:d2:73:58:e4:9d:c5:de:0c:3b:da:85:f4:
1e:7a:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:03 2026 by rpki-client