Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: 0UXeCRsp8wyh1zne3+OKNMkgTyL6XtfnSrg/RbRlv2Q=
Subject key identifier: 9E:C8:F7:81:6B:AE:D0:F6:4F:53:23:09:6C:0B:3D:CD:AD:37:F9:11
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019D98F45C72BC0FEC9442AC2EC6870D2ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 1026
Signing time: Fri 17 Apr 2026 01:00:44 +0000
Manifest this update: Fri 17 Apr 2026 01:00:44 +0000
Manifest next update: Sat 18 Apr 2026 01:00:44 +0000
Files and hashes: 1: 0HKg8uH6cdYkhCmod68CGVyEJVY.roa (hash: nHekJ9B0E/EBXFK9sjaa2GSBNkwPlvZK9aL2VrpgqLc=)
2: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: 0GPxvWh6dnbirYeZ1YY+Bap8sb8qlf5xNcRhA8ElSB0=)
3: ljtHnjq5j5z6450o-D-KXWoEKBw.roa (hash: k+ArXELCmMBtJaFY8pmY2yHtg7KoU0obxGCRosBcuzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:5c:72:bc:0f:ec:94:42:ac:2e:c6:87:0d:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Apr 17 01:00:44 2026 GMT
Not After : Apr 18 01:00:44 2026 GMT
Subject: CN=9ec8f7816baed0f64f5323096c0b3dcdad37f911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:65:2e:0b:ad:0d:9e:d5:a9:1c:9e:7c:b6:
e3:c1:3e:b6:5b:10:90:a2:f8:22:fe:cf:79:30:12:
f9:51:20:aa:53:24:d2:80:48:80:79:f3:64:a9:ac:
b1:c7:52:eb:96:9e:32:5d:6e:d3:5d:b6:95:64:b5:
9f:b9:c2:7c:28:f2:b8:b0:82:58:27:1a:93:55:56:
62:ba:29:0e:41:57:c7:6a:2e:f2:dd:e9:c5:67:6f:
2b:27:19:e0:c4:40:5a:93:1f:00:1f:3f:bc:28:42:
e3:f3:46:7b:70:a3:e5:f8:2f:e0:90:af:33:d4:12:
09:39:b6:de:ef:bd:88:f8:be:f4:f5:73:60:d6:93:
a5:9e:df:6b:e7:29:37:e5:70:5a:1d:b8:ae:98:b4:
98:e8:c6:60:b8:18:f0:6a:6f:7b:2a:79:8a:1c:06:
d6:7c:91:7f:86:77:71:a5:e0:6c:d2:1d:d8:de:79:
da:c6:51:7d:33:0d:13:92:e4:11:4f:24:d0:c9:1b:
4e:70:65:fd:ef:41:b8:32:fa:cb:e5:fa:c8:4a:7e:
69:77:cf:93:c6:3d:83:a5:46:f2:a5:36:73:f2:a8:
e4:99:53:34:03:04:7f:1f:1c:d8:40:0f:c2:13:b1:
c6:67:a8:c5:4a:19:c0:0f:01:6f:02:3b:1b:28:db:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:F7:81:6B:AE:D0:F6:4F:53:23:09:6C:0B:3D:CD:AD:37:F9:11
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:12:47:1e:8a:e7:b7:bc:f3:92:2f:d3:43:e3:58:cf:1f:
9d:11:c7:5e:44:7e:de:68:d0:03:9f:34:64:c7:52:12:78:71:
08:4e:30:09:c7:69:ef:e1:23:89:d2:8a:d4:bb:8b:1a:09:2e:
53:ac:42:6f:bd:bb:7b:2e:7e:10:33:de:1c:95:a2:93:69:a5:
39:34:52:f9:a4:9e:8b:01:45:db:4e:97:4a:f7:50:77:50:b9:
77:38:f1:6e:ae:c2:86:a1:f3:90:9a:eb:be:10:c5:28:e6:b1:
2b:0a:1e:f4:da:dc:91:fa:83:55:7c:fb:7e:27:71:2f:97:47:
0c:a1:8e:9c:00:51:4b:c0:30:1d:8c:de:59:66:74:79:00:dd:
d1:4f:f3:15:d4:f2:d3:13:58:40:96:76:8f:d2:57:48:96:62:
e2:06:70:b0:2e:46:6c:4c:7f:c4:9f:ed:55:16:f1:d6:2e:da:
06:3e:ce:2c:fb:67:c6:14:f3:92:c0:f0:6a:04:25:8e:cd:c2:
3e:f8:bb:d8:2b:fc:68:cb:38:80:aa:58:ef:96:9a:ab:0a:4e:
6b:e6:38:12:f8:21:80:09:73:d3:a5:bd:f1:19:25:7c:e7:f9:
68:81:d5:4a:ed:c4:0a:ec:cb:88:24:ae:3a:6e:2c:22:f4:12:
a8:0c:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:54 2026 by rpki-client