Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: IQrqvJF5qXxmVpZaCH3DjtW4AsB0gzN9nYzzW9Z2E6o=
Subject key identifier: 2B:C0:C5:D0:03:E7:E1:91:AE:F8:67:0E:FD:E2:A6:71:CE:97:01:87
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 019CAA8FEED62FC03EB1000BC158BC3BA611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:25 +0000
Manifest this update: Sun 01 Mar 2026 18:01:25 +0000
Manifest next update: Mon 02 Mar 2026 18:01:25 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: GzaEM6Mdylf9ayfhnxkz3aw+1tLmVYo6veAPhpXpZ7w=)
2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ee:d6:2f:c0:3e:b1:00:0b:c1:58:bc:3b:a6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Mar 1 18:01:25 2026 GMT
Not After : Mar 2 18:01:25 2026 GMT
Subject: CN=2bc0c5d003e7e191aef8670efde2a671ce970187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:d1:37:5d:82:e7:27:94:2e:9e:90:78:dc:
41:31:f3:34:ae:63:57:08:fc:96:3d:d9:35:92:2b:
e1:33:1f:71:cb:0d:85:d4:cc:f1:16:fb:08:56:94:
b2:59:50:bd:dc:ed:b8:7d:7e:bb:b0:93:22:45:fe:
d3:e4:f8:f1:b6:69:72:a2:6f:20:9e:86:b4:66:a7:
35:20:6e:40:ba:84:cc:75:7b:a9:38:f5:48:68:80:
d5:20:62:95:34:38:02:b5:54:5e:d3:00:4a:dc:c3:
04:4e:2a:d8:4b:ad:82:1b:75:b4:23:56:32:8a:58:
00:b2:0a:54:c4:5f:d5:c6:35:3b:df:61:29:a7:d9:
04:78:28:bc:00:9c:f0:d5:a4:99:57:8f:5d:71:43:
a4:00:67:32:c9:8a:77:d2:e6:0f:c9:b3:0f:59:91:
24:7e:98:a6:83:e1:75:e4:40:91:71:f7:34:53:9e:
f9:41:d4:ff:d1:20:ad:e3:6b:f9:16:43:2f:b2:75:
13:06:12:74:2a:da:39:bf:38:56:91:c6:b0:5d:7c:
17:1c:ae:82:84:ef:bd:1c:27:27:3f:6c:d8:91:ef:
ce:6a:b3:8c:72:f8:e2:51:67:e1:d5:e5:0e:65:dd:
e6:5d:d7:ca:df:04:f1:c0:90:c5:f7:71:3b:0d:1d:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C0:C5:D0:03:E7:E1:91:AE:F8:67:0E:FD:E2:A6:71:CE:97:01:87
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c8:ff:0f:a8:72:86:5a:f4:fe:d9:14:ba:e5:d0:d8:8c:e0:
24:d8:d5:36:34:03:3a:39:2c:dc:f2:42:02:cc:4f:93:b6:d4:
4f:c5:66:f5:73:a2:78:24:a6:cc:2c:9d:13:1c:73:94:db:16:
e0:cc:80:76:45:fc:ea:63:0b:ec:55:cb:02:ac:7d:e9:ac:90:
8f:8c:8c:73:b2:c0:d9:29:bd:03:13:0c:70:df:c0:a6:92:bd:
47:d8:e7:c4:93:aa:33:fa:fd:12:5b:b5:00:0e:91:4f:d2:a5:
f8:c7:9d:fe:0e:f1:31:05:e4:c1:9d:34:e0:f3:12:01:0d:4b:
11:46:6c:68:37:b4:61:b1:b7:29:c9:ac:fa:6c:f7:e3:4e:43:
64:e2:87:0f:ca:57:4f:72:9f:e8:c1:e9:b3:4f:a2:47:9c:f1:
78:98:16:1d:45:9c:e3:0b:dd:80:e1:f5:c9:34:b9:ec:ee:42:
5b:89:c7:32:b2:34:b4:3b:29:e1:b9:c1:28:59:b2:61:4f:cc:
13:2a:b0:30:d3:07:25:84:39:70:38:a8:a2:c1:5f:85:80:02:
72:a5:f0:a6:b2:c8:fd:08:59:77:ff:c5:3e:aa:e3:7c:c2:08:
a2:a5:70:cc:79:4f:b6:3c:1e:15:4c:11:27:df:c8:06:18:c7:
47:35:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:13 2026 by rpki-client