Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: FGqg6fbsPqfREVVm43Yq/zZgQMT0vOHk7H+TDdSqYT0=
Subject key identifier: 20:55:FA:08:52:80:F4:97:87:D1:62:5E:B4:90:3C:7D:BB:0B:24:96
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019CAC46F152D97F7D0869D3015DEEFD05B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0FAB
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: 0HKg8uH6cdYkhCmod68CGVyEJVY.roa (hash: nHekJ9B0E/EBXFK9sjaa2GSBNkwPlvZK9aL2VrpgqLc=)
2: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: var1tnRGmcJmx2d1Bo2/bOQ1RgS18o+dqDbQ3XYdqBw=)
3: rQcEs3Af4LaLGUacDsSGTWNpXEg.roa (hash: yjLuvj/zIi87kGkUau/dqofBhr3Db1ixSQwKoxIfjdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f1:52:d9:7f:7d:08:69:d3:01:5d:ee:fd:05:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=2055fa085280f49787d1625eb4903c7dbb0b2496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:ba:33:4b:3b:ec:97:49:4a:54:9b:b6:1e:
a0:ec:b1:05:1f:1f:69:4c:fc:1a:f6:72:9e:59:e5:
67:59:26:89:1b:c4:e2:4a:3e:11:d9:e9:ed:42:3a:
bc:90:53:b7:6a:7c:03:32:a6:c9:e7:e8:0c:64:10:
78:0a:3b:62:de:dc:0f:3e:fd:13:8c:aa:35:3f:96:
3f:3c:1f:a9:b5:e6:2e:d1:1c:25:b0:70:15:fc:e0:
fd:4c:6f:ec:60:c9:23:6d:c9:20:77:a2:d5:6d:f1:
17:37:db:52:d7:9d:0a:d5:ea:39:34:2c:4e:aa:f9:
8a:ff:fc:a6:59:e8:98:64:b8:15:71:03:fb:3f:1d:
1e:86:fd:61:7f:ce:f8:36:b3:26:66:5c:f5:28:64:
bb:93:02:e1:a7:fb:85:ee:1b:bf:34:86:1b:12:90:
65:a1:c6:f7:8b:4f:6e:73:cb:da:51:92:35:82:05:
b6:fa:09:a6:75:2e:28:3d:0d:ef:62:e8:3e:95:6c:
e2:dc:71:6c:68:63:84:69:a7:77:e9:ec:64:34:17:
e3:14:16:7e:f4:5e:21:49:63:9c:69:ce:23:86:24:
fa:9d:28:1c:e9:ff:8b:63:84:dc:c4:3b:b0:d3:a2:
de:88:c6:99:6e:ed:58:14:a9:f1:dd:81:a4:4e:7a:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:55:FA:08:52:80:F4:97:87:D1:62:5E:B4:90:3C:7D:BB:0B:24:96
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:12:63:cb:ac:df:1a:93:93:4f:1f:61:14:c4:8f:e8:26:2d:
14:a0:34:d0:67:de:5a:a0:01:3a:db:95:00:82:63:47:75:9d:
9d:39:ea:23:ee:ca:3d:74:fe:cc:9f:92:f5:9b:1e:60:fd:0a:
03:90:3c:82:0f:73:67:b7:65:05:4a:41:cc:eb:27:6a:0d:57:
76:60:22:3a:5a:44:01:e1:b3:97:2a:c5:30:c2:66:42:c7:30:
c4:96:58:97:79:0b:70:99:2e:08:7f:66:29:5a:d4:55:52:a9:
7c:61:e4:f2:1f:77:99:36:76:c6:99:7e:50:7c:f7:c5:6a:5a:
99:47:9b:59:ae:85:1f:4d:f7:04:1b:e2:69:50:19:8c:ed:4a:
47:b8:8a:43:7e:09:ad:8f:14:ac:a1:57:ae:86:db:0b:ba:57:
8f:09:ac:aa:4d:3c:7b:90:8a:b5:04:6e:8d:a5:79:98:8f:2d:
c8:83:08:03:bd:97:7d:46:f2:ed:f0:96:b1:d5:4f:df:d2:ee:
f5:93:c3:93:5b:a3:9d:fd:3b:0b:25:02:d3:8a:80:93:db:06:
f0:8e:ce:d3:d7:81:ff:d4:a6:ab:ea:8a:4e:85:2c:f3:ae:0d:
6c:54:51:e3:00:86:8c:2a:c9:e6:1d:46:bc:4d:b1:42:ef:35:
99:a9:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:22 2026 by rpki-client