Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: Ybb23j9VaFl/RmCNwbmidXpRDQFinZjf0eJE4n6BWFs=
Subject key identifier: B1:F0:1E:B2:59:F4:5E:28:49:90:67:D9:1A:18:08:DD:29:4E:F4:79
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 01A13ECB422EC433C836DAA3A7B31F1FA4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 09:01:10 +0000
Manifest this update: Thu 15 Oct 2026 09:01:10 +0000
Manifest next update: Fri 16 Oct 2026 09:01:10 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: IB5LeDHVKcIe8rWhSx+GkL4gX9zOpyt7X07VgnfdEbA=)
2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:42:2e:c4:33:c8:36:da:a3:a7:b3:1f:1f:a4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Oct 15 09:01:10 2026 GMT
Not After : Oct 16 09:01:10 2026 GMT
Subject: CN=b1f01eb259f45e28499067d91a1808dd294ef479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:7b:2e:21:e6:26:18:57:38:88:de:69:9e:
e4:57:a3:ee:2e:6e:da:48:47:68:bd:5e:2f:8a:e7:
f7:45:ee:82:d6:8f:56:ae:35:cf:23:5b:fe:61:b1:
a0:de:c8:4b:77:69:90:a9:dc:f1:37:45:f7:e0:30:
e5:79:18:c4:b4:75:1f:7f:ea:0f:89:25:72:9b:0d:
0e:1e:7d:7d:64:79:be:4d:d8:b0:64:4b:4d:52:65:
93:72:be:2b:d3:6b:d8:36:56:b8:66:fb:ec:0a:47:
b1:ba:cb:d3:93:88:97:55:2c:6e:25:6c:f1:c6:58:
c9:34:a4:05:a5:55:03:62:6c:86:6b:c5:0d:28:b1:
c8:4e:a2:0c:a6:99:dc:f4:04:73:86:45:90:68:18:
44:3b:7a:cb:85:e5:45:04:7c:d7:c2:5d:18:44:85:
1f:c6:0a:ee:9f:27:95:2d:bf:d7:84:1a:3f:cc:1d:
98:5f:b1:20:54:0d:1c:bf:53:1e:30:0d:cc:17:13:
de:36:cf:be:af:52:03:f3:67:33:81:63:f9:bd:1e:
99:f9:5a:93:67:c7:b3:80:2f:65:51:69:fd:14:6a:
bb:bf:e2:72:4b:79:35:5f:b7:e0:36:f3:81:7c:a4:
7d:50:12:39:ec:8b:14:b2:c2:a2:b1:db:95:f4:39:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:1E:B2:59:F4:5E:28:49:90:67:D9:1A:18:08:DD:29:4E:F4:79
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d3:e7:e1:c9:48:09:11:96:61:cb:cd:9e:10:84:a7:d3:e1:
9b:34:5b:29:74:24:24:fe:ed:ab:6a:cc:69:f2:6b:53:2e:77:
6f:11:fd:1c:c7:80:19:16:20:5e:25:4e:c1:6c:c4:51:cf:85:
ba:5a:09:ed:cc:51:82:97:1f:af:20:73:80:6f:f0:dc:60:94:
24:03:b9:36:34:31:e6:67:03:7b:79:5e:f7:ee:4b:36:92:eb:
4d:4e:33:39:92:b6:2b:c5:d8:db:18:f7:9a:12:8e:01:5b:9f:
8f:a5:b0:7a:2a:b9:5b:39:d5:65:00:12:04:b1:2d:31:0c:79:
18:2f:3c:cb:8e:0b:00:63:56:39:02:8f:1b:08:3d:b5:35:d7:
eb:fe:76:31:9d:c7:e0:93:2f:21:f4:6a:e4:e5:1b:c6:d1:9a:
cd:12:45:0b:e7:24:2c:68:65:17:ec:9d:fd:61:9a:a8:07:47:
e2:f1:3c:9a:15:9b:0b:c2:6d:81:29:93:7a:94:92:ab:14:fd:
22:c0:bb:56:d4:41:cd:dc:08:42:3d:ed:55:aa:50:ef:4a:bc:
38:41:88:1f:2e:4a:c0:11:47:d6:92:6b:c9:44:7c:ff:77:e5:
b5:48:e7:0d:8d:32:87:92:e3:2a:cb:de:b3:3a:a8:2f:a2:89:
3f:fd:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:56 2026 by rpki-client