Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: Dr5hipS8nIpNj8BzVJLM9ODBcqOy8HhDYBfwFMtkbFo=
Subject key identifier: E4:B1:38:96:AE:37:11:AB:DD:13:9C:F2:FD:1F:BA:76:98:5A:A5:C4
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019FA9754580429AAB536D1AB43FA9FC3667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 097E
Signing time: Tue 28 Jul 2026 16:01:02 +0000
Manifest this update: Tue 28 Jul 2026 16:01:02 +0000
Manifest next update: Wed 29 Jul 2026 16:01:02 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: ik4ZZoDeP8ylseJjXH+7AJ/aeqovolTAlf0NAT/aVXo=)
2: rTWNDX2sh64JmJF94YkHDQivF1w.roa (hash: RWITw/Hfk3BkskMw4FRULOKsUeZ/YrSrFkhrBuQpcRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:45:80:42:9a:ab:53:6d:1a:b4:3f:a9:fc:36:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Jul 28 16:01:02 2026 GMT
Not After : Jul 29 16:01:02 2026 GMT
Subject: CN=e4b13896ae3711abdd139cf2fd1fba76985aa5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:62:91:92:00:ad:ce:e7:a0:a3:f4:c1:bb:
a3:1f:6d:aa:3e:12:5d:06:02:c1:47:23:94:a0:08:
47:d5:e7:ff:6a:66:c3:ab:56:67:0b:aa:9a:e1:ab:
31:fa:47:f6:d7:de:73:30:a1:57:98:10:21:ac:3b:
75:4e:5b:40:35:4a:1b:b0:93:b9:92:5a:d7:9d:13:
2f:df:e8:4b:e7:60:78:af:52:48:bb:2a:1d:a6:c2:
3a:43:83:ab:5d:c2:6f:af:7c:86:f2:08:d9:69:01:
3b:22:a5:e7:45:ba:f6:df:ca:09:6e:b6:45:6c:51:
4e:03:c6:24:dd:7d:af:8b:f1:d9:22:80:c7:ec:2a:
b2:f9:63:49:8b:10:e4:46:27:9a:e9:7e:aa:de:03:
27:c7:4f:b0:83:c1:f7:30:5c:c3:7b:e9:64:33:41:
6f:9b:3c:12:7d:9b:e8:a8:6c:9b:c4:be:35:7e:d9:
46:11:56:4e:43:4f:7f:bc:bd:e8:71:3d:23:86:9c:
56:4e:54:1e:6b:fb:d9:7c:60:5c:1b:73:86:c5:b9:
7b:c0:c5:1c:25:ac:5e:05:4f:1d:2a:06:95:37:98:
af:9f:00:74:60:f6:0d:0e:d2:68:e0:60:af:d8:eb:
dc:ff:0c:2a:eb:b7:a0:28:c0:0b:bf:37:2e:a7:b2:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:38:96:AE:37:11:AB:DD:13:9C:F2:FD:1F:BA:76:98:5A:A5:C4
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:89:32:4a:03:0f:59:59:94:c2:04:d0:32:eb:33:25:83:99:
91:2a:3a:03:19:7c:05:df:47:da:da:a8:63:b5:fe:4f:9e:d0:
23:22:5b:5d:a3:8d:7e:af:3c:97:55:7c:db:08:af:e5:89:da:
59:16:59:08:73:a1:67:f8:27:d0:0d:b4:8a:eb:90:19:a8:8e:
58:5b:a3:0d:69:16:54:92:7a:f0:b2:8e:de:98:33:f8:b8:5b:
0e:58:a1:d4:4b:67:4a:c0:09:b7:dd:aa:b5:72:2c:c8:d8:cf:
99:ac:3f:46:0f:5c:7f:50:da:59:64:7c:2e:a7:09:ef:1e:74:
b7:94:12:54:a6:31:e4:66:75:79:85:f3:4f:1a:89:46:60:d4:
07:8d:3d:ff:d9:84:e5:f0:58:92:9e:e2:3e:a3:67:8b:23:c6:
88:f3:af:a0:fe:b3:e7:c2:6c:62:be:d3:98:8d:4d:41:dd:0c:
64:3d:54:4b:ed:e6:6c:e8:19:f8:90:e6:22:1c:86:de:ad:6b:
ab:72:e4:66:3b:70:11:68:d7:a0:1c:38:5a:f4:75:0c:e4:aa:
56:33:9c:6b:05:af:6c:a9:49:0a:e3:c5:b3:20:10:10:a0:b9:
68:5a:a8:c4:06:a5:40:c9:79:c5:9a:e1:cf:e2:95:51:b0:33:
2e:a5:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:23 2026 by rpki-client