Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: eAf/L/pI8OaoMDW5IF1NHdR8K/YuVH+G+4uw23WYOP8=
Subject key identifier: 00:C8:4B:07:BF:79:51:71:88:6E:E9:E9:A6:AF:1A:80:F5:68:9D:C3
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 019D9BF54A1FE9D5A3C5D2E36B8ACB9DF0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 14DC
Signing time: Fri 17 Apr 2026 15:00:36 +0000
Manifest this update: Fri 17 Apr 2026 15:00:36 +0000
Manifest next update: Sat 18 Apr 2026 15:00:36 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: EqFzb69M9OiGgKG+V308OSYu4XO3mSwGeTzclHCS5J8=)
2: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (hash: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:4a:1f:e9:d5:a3:c5:d2:e3:6b:8a:cb:9d:f0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Apr 17 15:00:36 2026 GMT
Not After : Apr 18 15:00:36 2026 GMT
Subject: CN=00c84b07bf795171886ee9e9a6af1a80f5689dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:2f:b5:21:93:79:ac:c2:68:4b:a4:5d:a2:
79:7f:c4:ae:c9:ab:99:9b:05:ff:4b:68:28:0b:41:
c4:37:83:ab:44:f7:99:2a:d9:f4:35:d3:cd:ec:28:
4f:41:e6:1c:52:91:91:c1:85:11:84:9d:02:74:9c:
64:25:f9:d7:98:e0:03:d9:8e:dc:7f:2d:68:8a:8c:
09:4e:a3:41:42:3e:81:9b:af:45:42:fb:8e:b8:c1:
64:2c:27:82:4f:0d:42:6a:de:a5:4b:22:d9:6c:df:
3b:09:01:9e:94:2a:9b:c2:0c:bf:e0:1d:37:33:50:
e9:83:12:94:00:f7:b7:78:e7:5b:6e:93:a1:c0:15:
5a:0f:ce:6c:97:e7:e7:c2:81:24:48:4f:c4:c1:42:
eb:f4:74:53:6f:d6:c9:e9:6c:34:7b:f5:38:b5:42:
ec:58:5e:60:74:b8:f4:7a:4d:d3:57:f2:30:6a:7c:
4d:53:5d:8f:0f:e0:5e:44:03:ed:c2:77:d4:59:34:
62:b9:01:f6:c7:0e:26:d4:d0:77:8a:0a:d5:79:0b:
89:0b:e0:24:ac:4d:75:51:22:dd:a7:97:4f:2b:85:
a6:08:40:75:bb:24:83:51:54:70:22:a0:f5:a7:79:
b4:d7:9e:fa:fd:5d:64:7b:56:f1:6c:33:a5:49:b0:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:4B:07:BF:79:51:71:88:6E:E9:E9:A6:AF:1A:80:F5:68:9D:C3
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4b:27:2c:7e:02:ee:aa:d6:c8:0d:0a:41:50:70:5e:e5:ff:
5f:a6:77:e0:cb:a1:f9:03:5a:e3:c5:99:f8:66:b9:2b:62:48:
1b:58:7c:22:5e:af:63:f6:34:c7:2a:31:e3:92:fb:43:1b:70:
af:ec:8a:ce:f9:6a:01:17:94:68:93:87:5e:97:c3:97:2b:7e:
da:6c:c9:b8:77:85:d4:c2:94:a1:f6:eb:52:aa:bc:cd:33:64:
d7:51:53:fd:74:63:f5:2b:6f:94:bb:f5:cb:14:23:fe:0f:5f:
f5:59:52:46:bc:39:12:2f:38:5e:ed:58:2f:7d:c2:3e:7f:30:
ba:b5:a9:07:55:e4:5b:3b:15:fb:f8:a8:d1:d2:8e:ce:94:76:
78:e5:22:0f:c6:dd:5a:a5:b1:ec:33:fd:83:a2:fa:9f:a1:60:
2f:5e:59:a2:98:31:09:f4:8d:d3:91:51:13:81:15:9d:15:8a:
6d:24:fb:e0:61:4d:d0:24:b3:b8:76:ef:29:e8:ee:96:b8:fb:
82:f0:1b:a2:19:20:17:ee:00:11:35:a1:ff:9f:6e:de:e2:06:
af:20:ba:dd:45:f4:d3:12:92:73:9c:84:44:84:75:b3:a6:df:
7b:26:f6:26:b9:19:0b:59:08:14:f2:90:aa:ba:bc:4e:db:d2:
a8:c0:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:02 2026 by rpki-client