Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json)
Hash identifier: mhZ8cX6HSrEHhJus2YWGh46Hit8l38Kvw2UZ0x0A5dE=
Subject key identifier: 06:C8:72:DD:2B:55:B0:8B:2E:29:1D:1C:04:F1:61:51:26:6C:B9:84
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 019CABA1C51ED47B826AA9DA01FDD411CA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: BTRlfNc3g0EUPeFDNlyGbAhung/C21LMtVFf3SjYLvQ=)
2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=)
3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=)
4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=)
5: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=)
6: sX1Br24qCtbNCJL4I_c1pDchwkc.roa (hash: VEqEzFdjyTuor8EJZXXTMl1wEKD0Q9Jesc0bkdw7VYg=)
7: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=)
8: zJoT4iPL7bGeeqxblvQwWjwRGtE.roa (hash: 52rRN9qQv8q8ND4jnZa+4/MKa8fwhT42vyeHiOKQTko=)
9: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c5:1e:d4:7b:82:6a:a9:da:01:fd:d4:11:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=06c872dd2b55b08b2e291d1c04f16151266cb984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:1a:4e:08:9b:c0:b0:e7:db:36:a0:1d:8e:
e3:61:47:c8:6d:a8:05:08:8d:0c:3a:da:a2:a8:5f:
ea:7d:8e:7b:b6:6b:43:e9:b9:d0:21:62:47:ea:c4:
88:c9:b8:03:16:1e:ee:e2:22:ed:2c:ee:28:62:51:
78:85:f7:42:b2:6e:f2:62:71:da:4c:53:71:2a:0e:
dd:11:c6:89:ea:81:4f:b5:b6:2e:f4:54:dd:4e:a6:
cd:47:2b:de:c6:2e:b7:ff:a0:80:9e:a3:19:9a:10:
43:6e:6e:6f:0c:7a:7d:6e:79:7d:a1:e1:84:a3:d8:
b5:a5:a2:f5:2f:8c:d1:c0:4b:93:a9:f7:3a:cc:9a:
6f:ea:29:98:08:6b:9d:8c:22:f3:9e:72:25:e0:20:
40:79:32:f7:4e:da:fe:68:9d:55:54:0a:69:6e:fa:
48:34:c5:78:fa:fb:6e:5d:44:9b:c9:86:2c:39:88:
d8:d7:14:9c:02:46:0b:3e:cb:e0:5c:de:41:9e:46:
eb:ba:19:3e:2d:f2:63:77:56:f8:05:a6:53:ee:6c:
cb:82:11:2d:ed:45:37:b3:f4:00:ff:cf:43:14:98:
a2:41:d6:42:d9:2f:d7:2a:29:4e:60:73:83:88:45:
20:c4:b7:f7:ac:d4:c3:7b:74:b8:00:8f:53:90:44:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:72:DD:2B:55:B0:8B:2E:29:1D:1C:04:F1:61:51:26:6C:B9:84
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3c:da:f4:8b:1d:68:51:c7:3d:1c:eb:4e:16:8e:30:00:eb:
91:33:88:0d:99:6d:87:07:8b:6d:b4:30:33:bc:27:d2:0e:7a:
51:31:f5:57:6a:0c:01:04:9a:e5:81:1a:43:08:8c:85:b4:fe:
b6:56:43:fe:a6:6f:21:f6:83:0e:83:5c:97:02:fa:26:b5:f6:
34:67:fa:10:ae:88:da:6b:01:08:63:4c:59:1e:a8:03:80:ed:
6d:8c:15:dc:46:8e:e2:23:33:4b:be:ad:a9:d0:7c:02:47:99:
6a:34:a6:54:e2:45:18:68:79:78:a0:a9:cb:7f:f1:c9:71:63:
3d:4f:4c:15:b4:ca:8b:60:a5:b5:81:9b:8d:fc:3e:c1:dc:e1:
a2:41:9e:48:da:71:dc:4f:84:f8:01:09:94:4c:11:9c:27:8f:
84:c6:9d:41:e6:e9:18:52:b2:4f:5c:7f:5a:9f:27:99:6d:5d:
82:84:50:3f:eb:65:cd:83:3f:b7:17:0b:db:ac:2c:fb:46:88:
58:87:a4:b2:e7:42:15:ac:b0:91:ca:fe:f2:d7:96:55:36:72:
ed:99:b1:c5:83:59:88:eb:ec:fc:0b:a3:40:9f:87:b9:11:0b:
17:94:e0:f5:8e:07:f6:3a:55:4f:96:33:b9:30:25:cc:ee:b0:
fb:20:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:17 2026 by rpki-client