Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier: 3UI8AOABvziOp/ZeBCZvRM7wi6n3Mh8N9pLgXLY3A7E=
Subject key identifier: 35:99:BA:FC:BA:A4:BF:71:DC:02:B3:E5:14:BA:9E:61:9A:06:92:78
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer: /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial: 019D98BD9443BF0D058E11DF7C61570AFE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number: 1519
Signing time: Fri 17 Apr 2026 00:00:54 +0000
Manifest this update: Fri 17 Apr 2026 00:00:54 +0000
Manifest next update: Sat 18 Apr 2026 00:00:54 +0000
Files and hashes: 1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: DKWhfUtJtHpoFXRxOV8wkADOmafAleeaGLkI9qbtICk=)
2: ZbHKUZ4-YfRQqqQSe1r9U7B43No.roa (hash: OWTRsb1+RVyVdipSZx/PdEhXtkE4BTOxk7X0sSkLurA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:94:43:bf:0d:05:8e:11:df:7c:61:57:0a:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Validity
Not Before: Apr 17 00:00:54 2026 GMT
Not After : Apr 18 00:00:54 2026 GMT
Subject: CN=3599bafcbaa4bf71dc02b3e514ba9e619a069278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:de:b2:e0:7f:39:ec:97:c4:e2:6d:ee:4a:
79:59:75:4c:c6:20:25:f5:f5:eb:6f:7f:0e:66:e1:
1f:9c:f7:e8:a9:ca:39:03:dc:99:c0:53:61:50:d7:
da:e0:5d:28:7d:67:a1:90:53:9e:60:36:6b:af:48:
4f:4e:9f:ab:96:2d:0f:f9:4c:60:b1:5f:a6:35:51:
ab:5e:c2:4f:f3:29:8f:8a:3c:9d:0f:56:22:12:5c:
bb:cd:39:e6:c3:af:9c:e9:55:2c:87:f3:b0:27:d9:
bb:4f:38:13:ac:43:cf:e8:a5:1c:b4:10:30:93:44:
e3:56:34:2a:a6:c1:6c:e6:b4:e7:2a:33:51:a6:d0:
69:40:3b:4f:c4:ec:e5:07:65:71:90:9f:9c:67:02:
8c:07:f6:79:c7:af:fe:f6:1e:78:69:5b:3b:53:06:
d0:17:ec:70:5c:e5:a5:87:ef:95:d3:ee:a2:35:38:
e8:44:2b:2a:9b:aa:28:4c:26:1f:db:be:42:ec:00:
81:b3:10:e0:9f:c8:86:38:2f:6b:d7:95:03:dd:d9:
ab:ef:47:e9:b1:05:33:3a:fb:e9:d3:b0:6e:7f:3d:
3e:72:e0:0e:36:bf:db:b1:87:29:ad:db:7c:50:70:
d4:1d:40:d7:6b:68:a2:b5:a6:d3:cb:da:fa:59:82:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:BA:FC:BA:A4:BF:71:DC:02:B3:E5:14:BA:9E:61:9A:06:92:78
X509v3 Authority Key Identifier:
keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d3:04:99:75:cf:f3:df:ae:4e:5b:83:30:83:35:b0:0b:e7:
6f:20:fd:bf:c9:5d:5a:47:49:59:3d:cc:c6:c8:e6:22:02:02:
e8:72:ea:2b:c6:c2:44:19:d1:95:d8:1d:61:a3:06:09:f0:50:
51:2e:7a:55:bc:4f:e2:41:52:db:46:cb:4a:39:d3:a5:7f:c2:
d5:ec:e2:04:ec:ff:80:87:58:de:bd:6e:0b:6b:d0:40:e6:ad:
90:da:15:99:a3:11:d6:fd:95:49:71:85:ab:42:ab:ff:92:92:
eb:dc:5c:45:9d:83:88:72:96:bd:b1:ec:aa:fc:d4:ac:c2:72:
46:75:77:66:db:f4:f3:93:06:d2:44:3a:92:8c:3b:a3:68:f7:
e6:fd:aa:c6:ac:38:72:e5:43:0a:71:2b:f8:d0:c7:4b:3b:39:
fb:7e:86:85:ca:f4:79:88:4a:2d:0d:28:10:d0:d2:df:67:91:
79:8c:e9:2e:fc:ec:53:9d:08:dc:12:25:3e:70:29:18:a1:76:
40:af:04:78:74:01:b1:11:e7:05:a0:5c:91:b1:f5:78:10:d0:
0d:8d:6c:bc:74:82:24:6b:1c:39:cc:b8:6a:73:31:a4:69:61:
92:c5:2b:1e:e4:94:e8:46:db:57:94:3f:8f:8c:67:06:46:db:
b4:4e:c6:e2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2YvZRDvw0FjhHffGFXCv6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDJiYWM3Yjc5YTMxMDllOWJlM2RmZTRmMDZkNTg1YmI5
ZjkwNTEwHhcNMjYwNDE3MDAwMDU0WhcNMjYwNDE4MDAwMDU0WjAzMTEwLwYDVQQD
EygzNTk5YmFmY2JhYTRiZjcxZGMwMmIzZTUxNGJhOWU2MTlhMDY5Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3fesuB/OeyXxOJt7kp5WXVMxiAl
9fXrb38OZuEfnPfoqco5A9yZwFNhUNfa4F0ofWehkFOeYDZrr0hPTp+rli0P+Uxg
sV+mNVGrXsJP8ymPijydD1YiEly7zTnmw6+c6VUsh/OwJ9m7TzgTrEPP6KUctBAw
k0TjVjQqpsFs5rTnKjNRptBpQDtPxOzlB2VxkJ+cZwKMB/Z5x6/+9h54aVs7UwbQ
F+xwXOWlh++V0+6iNTjoRCsqm6ooTCYf275C7ACBsxDgn8iGOC9r15UD3dmr70fp
sQUzOvvp07Bufz0+cuAONr/bsYcprdt8UHDUHUDXa2iitabTy9r6WYLZEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDWZuvy6pL9x3AKz5RS6nmGaBpJ4MB8GA1UdIwQY
MBaAFPsCuse3mjEJ6b49/k8G1YW7n5BRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13SzZ4N2VhTVFucHZqMy1Ud2JWaGJ1ZmtGRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMjAwZTJiLWQzYTQtNDU1Ny05NzM1
LTQ5NTBmODZjYmI1Yi8xLzEtd0s2eDdlYU1RbnB2ajMtVHdiVmhidWZrRkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFkLzIwMGUyYi1kM2E0LTQ1NTctOTczNS00OTUwZjg2Y2Ji
NWIvMS8xLXdLNng3ZWFNUW5wdmozLVR3YlZoYnVma0ZFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNME
mXXP89+uTluDMIM1sAvnbyD9v8ldWkdJWT3MxsjmIgIC6HLqK8bCRBnRldgdYaMG
CfBQUS56VbxP4kFS20bLSjnTpX/C1eziBOz/gIdY3r1uC2vQQOatkNoVmaMR1v2V
SXGFq0Kr/5KS69xcRZ2DiHKWvbHsqvzUrMJyRnV3Ztv085MG0kQ6kow7o2j35v2q
xqw4cuVDCnEr+NDHSzs5+36Ghcr0eYhKLQ0oENDS32eReYzpLvzsU50I3BIlPnAp
GKF2QK8EeHQBsRHnBaBckbH1eBDQDY1svHSCJGscOcy4anMxpGlhksUrHuSU6Ebb
V5Q/j4xnBkbbtE7G4g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:35 2026 by rpki-client