Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: fDRipNuPOwtr6liFqzAmJMxyCVyj7Ly6ffft6CUV0qk=
Subject key identifier: 38:E7:30:8A:67:B3:E4:57:75:0E:48:59:78:04:E7:23:B7:A2:03:22
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 01A0E4072300B6F49F37AAEAE90ED896CF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 168F
Signing time: Sun 27 Sep 2026 18:01:07 +0000
Manifest this update: Sun 27 Sep 2026 18:01:07 +0000
Manifest next update: Mon 28 Sep 2026 18:01:07 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: zLvYVsPvFsei+OslgErcx/IjMmHO2Jk2jpsKG+eiDA0=)
2: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (hash: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:23:00:b6:f4:9f:37:aa:ea:e9:0e:d8:96:cf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Sep 27 18:01:07 2026 GMT
Not After : Sep 28 18:01:07 2026 GMT
Subject: CN=38e7308a67b3e457750e48597804e723b7a20322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:0a:96:b8:b5:a3:6c:2f:d5:50:cb:32:25:
07:dc:43:f8:49:f5:0d:52:e2:fd:dd:e5:da:52:6c:
c2:5b:e3:24:e5:28:99:ec:62:63:4f:b8:24:f7:fd:
8f:01:28:16:5d:8f:c4:4c:27:71:f6:73:72:8e:7f:
5b:d9:db:91:24:0d:84:2a:39:da:d2:fe:e0:32:ce:
47:14:18:f3:62:99:3b:c9:4a:da:ef:07:fe:51:32:
58:0c:40:30:1b:c3:ce:41:8d:8d:12:43:99:c9:ec:
94:91:2a:51:30:3c:06:10:3e:0c:4b:0b:97:a1:96:
66:b2:48:68:b8:4c:b4:d2:21:63:09:a8:4d:65:f8:
81:74:73:77:6d:b4:cd:46:87:51:db:3b:d6:87:cc:
38:21:92:3e:05:01:aa:6a:61:56:72:8c:0d:ad:fd:
de:6a:18:12:de:88:62:95:e1:5b:bb:64:04:db:ba:
65:5f:ec:d7:d7:81:6e:12:6f:98:57:ab:0e:ff:6c:
6f:71:0a:a6:f6:51:1e:a6:f6:ab:08:eb:61:0c:e5:
7f:4c:e0:81:a7:a1:ad:84:a5:5a:c9:79:d6:51:fc:
b4:0d:66:d8:96:98:48:87:e9:01:85:a5:20:7f:d7:
60:b2:68:21:3c:62:96:a1:3c:36:ca:f4:60:ae:3f:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:30:8A:67:B3:E4:57:75:0E:48:59:78:04:E7:23:B7:A2:03:22
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:83:29:fd:56:5c:12:dd:14:33:6b:e8:da:59:a6:b1:3c:ba:
94:ac:b3:01:a4:4c:e4:77:07:94:d7:a2:c6:cf:25:4f:1d:a5:
0b:e3:76:70:1e:fc:8e:75:1a:5c:67:cf:66:e7:1d:8d:96:c6:
e5:93:cc:cd:aa:58:28:63:21:0a:90:4d:07:8b:f2:2f:e3:98:
ba:52:2c:55:c2:f1:3b:f6:dd:a7:6f:b1:41:8c:34:c2:ba:14:
d2:41:3d:b1:06:03:c4:3a:ba:b2:68:88:24:9c:0a:b3:e0:1e:
1e:15:67:f4:18:2c:44:f6:b8:1a:75:33:39:3a:aa:69:08:b1:
7a:84:f1:2b:3e:2e:1e:7a:42:28:9c:7e:9d:63:68:55:c4:ca:
0b:8a:35:64:f2:ab:cd:59:d4:33:a5:52:5a:9c:3e:e2:8d:4d:
6b:d1:36:2d:d9:ab:b1:a8:d7:26:14:cc:76:4a:41:96:57:e6:
b0:44:b0:c5:60:d5:49:b9:3b:d0:48:9f:58:e9:97:7b:95:b8:
01:d5:f5:0c:a2:89:77:1b:6f:0a:cd:c8:83:57:83:a3:2c:37:
e3:4c:58:a4:8d:66:45:c6:e5:ab:36:b8:7b:f6:c1:ce:2f:8a:
54:0c:3a:68:5c:25:2a:1c:4e:9a:67:6b:d6:f8:ce:da:fc:b5:
58:8a:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:44:57 2026 by rpki-client