Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: j+ed5BMUffgOf+h7ylXkMmovrxggkXxJvjPyDSQHETA=
Subject key identifier: 3D:BB:52:D2:31:0C:D3:F3:75:43:09:2B:B6:B9:AB:42:37:04:59:2A
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 019DA3AF31763FEE271E7C3A303299EC3E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 03:01:00 +0000
Manifest this update: Sun 19 Apr 2026 03:01:00 +0000
Manifest next update: Mon 20 Apr 2026 03:01:00 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: cD59YoR3fvtkWHs4x8ruuWQHLt7P+q3v/+Khw/l/Q8Y=)
2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:31:76:3f:ee:27:1e:7c:3a:30:32:99:ec:3e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Apr 19 03:01:00 2026 GMT
Not After : Apr 20 03:01:00 2026 GMT
Subject: CN=3dbb52d2310cd3f37543092bb6b9ab423704592a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:9f:dc:d1:1b:da:06:4e:fb:47:bf:dc:7f:
95:76:3e:9a:40:fa:8e:e6:46:f4:2a:31:99:98:76:
90:26:f4:bb:ad:89:5b:6b:94:4b:2c:f9:11:c7:96:
e4:1e:b4:7e:cf:a3:38:58:ab:02:b3:b8:77:21:75:
ec:53:c6:e3:98:c7:3b:90:b2:04:b3:4b:65:db:ea:
d4:c9:a7:c5:a2:94:9e:75:77:d1:6c:f6:1a:08:5e:
19:e6:c6:68:18:e7:31:f6:2c:f0:c0:97:c0:ef:82:
e1:c0:85:ee:be:31:a1:6a:4d:d1:27:a4:df:c1:a3:
75:3e:e1:5d:a1:ed:cc:d2:7a:ba:ba:c0:2c:ef:0c:
e1:3c:97:c8:0a:ca:17:36:2d:b6:cc:0e:70:43:08:
d3:c7:81:03:de:d6:1d:3d:da:89:cf:99:03:90:c2:
fd:e0:3b:a0:c9:dc:82:ec:cb:af:d1:4f:29:25:1e:
33:32:20:39:6b:de:3d:a2:9e:6a:ae:c5:03:a5:81:
cd:7b:3d:2e:6a:74:42:98:4d:f5:51:48:f6:e1:40:
3b:7a:ba:36:f7:2e:9c:09:6f:ec:5f:d3:50:e2:64:
0f:38:c6:e3:87:bb:35:e5:34:53:98:3e:92:5a:3f:
f3:fd:9a:31:bb:f2:12:52:66:7e:f5:c3:ac:20:4a:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:52:D2:31:0C:D3:F3:75:43:09:2B:B6:B9:AB:42:37:04:59:2A
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:aa:9b:b6:d5:18:7f:34:e1:e1:d7:27:1d:cf:cb:51:52:
af:aa:3e:16:d0:5f:23:da:8f:28:4e:c3:d1:64:bb:cd:c4:78:
0c:a8:12:74:71:36:ee:93:84:64:8c:99:96:f6:49:03:ea:e7:
96:79:b8:bd:6f:14:69:e9:0d:a2:dc:b4:40:99:9a:f6:73:b9:
dc:6f:78:66:08:7f:d4:ff:12:25:58:18:4c:e9:6f:86:a2:c4:
e7:85:e9:d2:2d:1e:2a:85:90:3e:78:6c:49:f5:b2:1b:6a:82:
5b:6e:98:8f:ca:1b:16:0e:b8:fc:39:7e:1c:41:bb:fe:b9:b3:
84:b2:1b:c1:12:78:bd:eb:3a:e5:2d:e8:79:ac:7d:bb:26:b0:
47:06:b9:d4:14:1d:16:cb:86:25:34:83:1d:76:12:29:50:77:
7a:37:7c:4f:8e:87:d0:ef:f8:b3:91:0a:93:a9:18:22:f0:ac:
a9:1a:df:0d:3d:cc:61:70:b9:cb:74:a4:b3:7c:4f:3a:6c:b3:
bc:26:55:ae:9a:97:de:e1:6e:23:45:6d:0f:08:a1:ee:08:0d:
52:7c:11:4a:95:47:36:82:59:24:b2:48:81:05:50:ba:da:75:
a0:c4:74:74:40:48:42:58:0e:fd:3d:8f:52:7e:6c:4e:37:fc:
8f:89:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:20 2026 by rpki-client