
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: /pd6QxoS9+GBnXFo8HXp+l4h+3ct401hJPXI02UMQXY=
Subject key identifier: 8C:21:4B:D8:9C:DA:90:4E:A8:60:90:62:11:FC:26:31:AE:6B:DC:87
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019EBFFF5E0159D63CE860666A6FC215E388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 10C0
Signing time: Sat 13 Jun 2026 08:00:44 +0000
Manifest this update: Sat 13 Jun 2026 08:00:44 +0000
Manifest next update: Sun 14 Jun 2026 08:00:44 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: 1SmvC+10VDeQ5LtAcyuoacHD57uPD7idn3LN6WcAWIw=)
2: CrC859iwura8utiNXwAp9XhCbZk.roa (hash: 4wQ2Q51abo9j82n9d/B6laPcF67YY85HaISdSCDeXwE=)
3: luAw2jYVmpn9eurnz1BnIFvtfYU.roa (hash: 7Nl0RPUrfN0RNCIg9WSPabqce+Xmja79+3jCEvDNrUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:5e:01:59:d6:3c:e8:60:66:6a:6f:c2:15:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 13 08:00:44 2026 GMT
Not After : Jun 14 08:00:44 2026 GMT
Subject: CN=8c214bd89cda904ea860906211fc2631ae6bdc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:0c:d2:86:c3:75:98:ed:b3:15:59:50:a5:
19:79:33:c4:11:9c:b5:2b:1a:4b:44:ab:b6:51:e1:
e6:0f:69:09:c1:f1:ee:b4:3a:35:8a:60:51:86:72:
86:8c:45:3e:09:f8:79:d1:51:2f:f7:26:f6:3c:a5:
0a:ef:40:8e:4a:57:b2:24:9f:8d:db:8a:b2:24:c6:
f0:e0:a1:52:a5:ca:43:38:f0:f2:78:83:7a:37:7d:
55:5e:57:ab:72:ce:44:be:b6:e9:3c:96:71:d7:bd:
e3:31:de:ef:1c:b2:cf:cd:35:a7:54:de:ee:2a:09:
51:5f:c6:1a:f2:55:98:00:e7:7b:81:3c:94:3f:dd:
cc:ff:9a:0d:7d:a4:28:80:57:98:60:45:83:7c:83:
63:44:f3:25:fa:2a:f6:aa:69:a9:48:13:f8:4e:49:
e9:ec:46:7d:f4:39:42:98:7a:b7:e0:9c:5d:c1:02:
a0:bc:1a:30:a9:15:70:ed:7e:0c:4c:e7:43:d2:7c:
17:65:61:b0:cf:73:1c:d2:8c:de:03:f1:dd:ce:4d:
ac:01:e8:a9:0c:8e:34:e4:92:26:32:3d:11:e6:c2:
ff:34:ce:d8:e4:6d:8d:e3:06:f4:70:92:8f:39:09:
a7:cb:94:3e:18:a5:22:3c:18:53:44:df:b4:7a:1e:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:4B:D8:9C:DA:90:4E:A8:60:90:62:11:FC:26:31:AE:6B:DC:87
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a2:8e:47:21:88:c0:c3:aa:ba:f8:57:c1:43:37:f0:ae:16:
42:da:cf:e0:5a:33:51:99:5a:0f:80:26:fe:60:c1:9d:9d:ab:
df:f7:13:e2:08:23:4e:3a:bb:af:97:98:19:27:61:ef:c3:1c:
1f:5e:9c:42:cd:47:76:6f:3e:7b:e9:92:a9:e7:90:01:b7:dc:
f4:f0:0a:89:80:d2:88:da:77:b7:7a:e2:ab:80:fe:df:41:e2:
a8:4b:55:c1:83:d3:7f:e7:8e:10:df:2d:60:95:87:30:f0:23:
4c:2f:27:30:c7:6a:83:07:3b:15:62:2e:cd:2c:0e:ea:42:c6:
78:c0:d0:f4:18:fb:13:f9:40:fb:22:db:cc:04:ca:ac:05:f5:
a1:54:6c:c3:b7:84:01:fa:40:8e:dc:00:84:e6:91:36:d0:46:
81:0b:f5:20:aa:17:b5:ba:20:35:a9:64:26:94:24:1a:c3:09:
a0:13:c4:b9:f0:74:af:ec:65:cb:b0:70:b3:2b:28:e9:1a:37:
98:23:9a:ec:b3:95:66:9d:15:42:ad:09:10:2a:80:8b:69:32:
5b:16:36:a3:71:28:08:5a:b8:2a:15:10:c6:4b:28:07:5b:64:
8f:48:b9:53:bc:cd:77:f2:56:8a:b4:20:a6:e6:77:4c:7a:86:
77:7e:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:47 2026 by rpki-client