Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: 649VPBo7QkQ3rflUXuKQXvwqPPMehmzBI7+Bx+NyjmM=
Subject key identifier: 05:72:C6:95:4A:4C:52:EA:EE:BD:01:B2:A3:6C:B7:9D:1D:6C:D9:57
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019DD0BEF5D140617CA448131DD9C0F1EAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1902
Signing time: Mon 27 Apr 2026 21:01:08 +0000
Manifest this update: Mon 27 Apr 2026 21:01:08 +0000
Manifest next update: Tue 28 Apr 2026 21:01:08 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: aUdNc3F3/qIVqcXGfdu9PVeYWyvMna7f7j7ZHLdzj7A=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:f5:d1:40:61:7c:a4:48:13:1d:d9:c0:f1:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Apr 27 21:01:08 2026 GMT
Not After : Apr 28 21:01:08 2026 GMT
Subject: CN=0572c6954a4c52eaeebd01b2a36cb79d1d6cd957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:be:85:af:6f:22:4e:88:e9:b6:5f:8e:d9:
ce:64:7f:ae:ea:51:f1:ea:c9:38:19:5b:82:7a:03:
b9:65:6a:17:a9:b9:42:71:1b:f0:d7:82:7b:bc:59:
e0:2f:65:4c:ab:f1:f4:1b:59:57:45:f8:6b:05:7b:
62:f0:fe:d2:a0:06:8b:61:5c:e0:11:f8:7c:c9:5e:
a9:1d:14:19:be:6b:70:f5:c5:09:6a:46:e9:6a:34:
7a:98:d0:c6:2b:c1:cb:14:bb:ad:22:80:02:9c:c1:
ec:16:fe:c4:e5:aa:51:8e:69:c8:87:45:5f:10:70:
90:87:5d:48:b1:5c:51:fe:ae:5c:e9:7a:87:32:e3:
5e:ac:87:2a:f7:6c:aa:ca:e7:a3:2b:ca:c4:a4:a0:
64:6f:ca:1d:03:f1:a7:12:54:14:58:bd:68:60:3c:
b8:44:d9:d9:36:ef:fa:0f:9b:86:6e:f8:f8:f5:0c:
c7:68:81:57:e6:d6:cc:f4:94:19:6a:ab:8f:48:08:
c3:41:c3:36:cc:8f:d1:1f:a9:05:83:92:62:60:73:
72:6e:54:0b:11:b1:d5:37:bb:19:aa:c2:b8:aa:5a:
a5:6a:0f:5a:5b:32:90:ab:de:ad:f1:6a:83:9e:27:
72:15:37:4e:b1:7c:11:e2:ab:f0:45:85:c5:e1:26:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:72:C6:95:4A:4C:52:EA:EE:BD:01:B2:A3:6C:B7:9D:1D:6C:D9:57
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bb:a6:4f:93:ef:91:cd:a0:f5:ad:8f:d5:05:31:1a:aa:34:
0f:85:f2:df:1f:5c:36:c8:47:73:fb:c0:2c:49:c2:78:1e:80:
f0:2d:28:2a:25:8a:49:d5:81:61:01:b9:12:5e:f2:06:2b:77:
bb:b0:ec:e3:19:4e:bc:94:6b:ee:9c:6e:db:94:ef:3a:a4:2b:
b1:25:5b:7d:1b:48:8d:59:85:a6:f3:bb:e2:f7:f7:77:41:83:
5c:68:d6:ae:99:d2:a8:43:0e:b5:33:8d:e4:48:6b:e8:1e:79:
a4:f5:da:f1:24:d6:47:a8:50:5a:5f:23:4f:67:37:cf:b5:91:
5e:83:20:0a:96:3c:77:e7:ec:ae:f4:2c:00:84:92:d9:b7:28:
cb:5f:16:ad:fb:fc:c6:12:c3:7a:09:37:c0:b4:b4:fe:cd:82:
ac:05:16:c3:3d:9e:ec:42:31:a5:83:79:1b:ca:ac:dc:1b:df:
56:57:30:7d:f6:06:2d:0d:90:64:d8:20:10:ec:c5:5d:21:75:
c4:65:d8:3c:e9:ed:ed:2a:87:19:0b:7e:45:d2:97:7b:b9:df:
5a:4d:7f:c9:05:5f:d7:e2:1c:17:4b:ec:1f:6b:f6:39:5d:47:
be:90:0c:f3:33:82:f8:54:de:46:ec:20:82:35:a7:3b:2e:43:
2e:ef:3b:37
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3QvvXRQGF8pEgTHdnA8eqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjYwNDI3MjEwMTA4WhcNMjYwNDI4MjEwMTA4WjAzMTEwLwYDVQQD
EygwNTcyYzY5NTRhNGM1MmVhZWViZDAxYjJhMzZjYjc5ZDFkNmNkOTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqi+ha9vIk6I6bZfjtnOZH+u6lHx
6sk4GVuCegO5ZWoXqblCcRvw14J7vFngL2VMq/H0G1lXRfhrBXti8P7SoAaLYVzg
Efh8yV6pHRQZvmtw9cUJakbpajR6mNDGK8HLFLutIoACnMHsFv7E5apRjmnIh0Vf
EHCQh11IsVxR/q5c6XqHMuNerIcq92yqyuejK8rEpKBkb8odA/GnElQUWL1oYDy4
RNnZNu/6D5uGbvj49QzHaIFX5tbM9JQZaquPSAjDQcM2zI/RH6kFg5JiYHNyblQL
EbHVN7sZqsK4qlqlag9aWzKQq96t8WqDnidyFTdOsXwR4qvwRYXF4Sb6dQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAVyxpVKTFLq7r0BsqNst50dbNlXMB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YzL2EzMjk0Yi1kNDc4LTRkYmQtYWFlNS1mZDE2N2FkOTJh
OWQvMS8xLXdZYU9mQ2dONUl4RTlhNHU1dGIycld5OUdZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7um
T5Pvkc2g9a2P1QUxGqo0D4Xy3x9cNshHc/vALEnCeB6A8C0oKiWKSdWBYQG5El7y
Bit3u7Ds4xlOvJRr7pxu25TvOqQrsSVbfRtIjVmFpvO74vf3d0GDXGjWrpnSqEMO
tTON5Ehr6B55pPXa8STWR6hQWl8jT2c3z7WRXoMgCpY8d+fsrvQsAISS2bcoy18W
rfv8xhLDegk3wLS0/s2CrAUWwz2e7EIxpYN5G8qs3BvfVlcwffYGLQ2QZNggEOzF
XSF1xGXYPOnt7SqHGQt+RdKXe7nfWk1/yQVf1+IcF0vsH2v2OV1HvpAM8zOC+FTe
RuwggjWnOy5DLu87Nw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:11 2026 by rpki-client