Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: 1EDBxPM5FSaxWCWH7Eml1RxgXM8iws2pinzhZS++5rY=
Subject key identifier: 7E:8E:E7:22:48:72:43:D6:C7:84:BB:84:D0:74:F8:55:6A:70:D9:A2
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 01A0C70EB62CC7368E856FC350D62AEDF57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 03:00:25 +0000
Manifest this update: Tue 22 Sep 2026 03:00:25 +0000
Manifest next update: Wed 23 Sep 2026 03:00:25 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: PH4LRbwloGtx7e5Awkzw+N23K489VtyWYzzS5Sg2vaY=)
2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:b6:2c:c7:36:8e:85:6f:c3:50:d6:2a:ed:f5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Sep 22 03:00:25 2026 GMT
Not After : Sep 23 03:00:25 2026 GMT
Subject: CN=7e8ee722487243d6c784bb84d074f8556a70d9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:6c:62:ae:a3:3a:f9:9a:01:ca:e2:08:12:
b1:bd:bd:14:e4:eb:46:cc:74:16:d0:55:0d:5b:53:
db:42:fe:d7:40:19:aa:63:1b:fb:05:99:72:77:e6:
bd:fd:4b:74:ac:2d:27:f0:44:cf:66:51:7d:fa:bc:
c8:e5:92:dd:71:e4:25:0e:5a:d0:62:bc:9c:46:1f:
2e:8e:97:dc:71:fe:3b:6a:3b:8c:cd:fb:fd:71:49:
50:27:bb:34:0f:5d:5d:66:1b:06:1f:25:64:3f:0d:
ed:91:87:2d:50:a6:45:cf:c6:73:34:5a:59:24:2b:
7e:22:78:5a:1a:4e:09:2e:63:68:b1:ea:85:42:24:
2d:18:84:dd:13:45:7a:7f:04:c9:89:e4:29:a8:28:
c4:84:14:2e:28:ae:69:04:74:66:84:70:e5:26:70:
d1:cd:e3:75:37:84:f6:59:02:d4:2c:9c:1f:2d:88:
17:e7:29:82:f8:c0:4e:07:52:97:02:f4:04:48:b4:
14:13:0a:e2:43:63:1f:fb:a4:0a:97:8a:f9:3d:a9:
a0:96:6b:6a:b6:a5:25:db:6a:af:b6:cf:bb:52:cb:
d8:3e:ef:aa:40:8a:6b:47:f3:24:75:2e:8c:72:8e:
de:f2:29:5e:65:20:82:a5:65:2a:10:81:d4:b7:ea:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:E7:22:48:72:43:D6:C7:84:BB:84:D0:74:F8:55:6A:70:D9:A2
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5f:2e:a5:85:32:1c:68:4c:18:fa:af:4c:db:8d:17:26:08:
e5:0f:5f:b9:1a:51:cd:4a:04:16:b6:7b:1f:3f:71:0b:6f:b0:
38:b0:0b:cf:a0:44:af:33:89:b2:77:cc:bd:ba:15:42:2f:03:
cd:a2:bb:4f:c6:ea:4a:d6:da:98:a0:66:af:24:99:13:86:58:
d6:95:7a:ed:2b:57:6f:1d:78:d2:b2:55:b2:f8:07:fb:7a:56:
f1:e7:9e:eb:ed:bd:72:d7:10:85:12:ea:4b:f1:43:32:08:a8:
d4:69:e1:f8:9e:ba:39:17:1f:aa:a2:7d:e6:b7:71:03:16:ac:
39:f6:40:29:fa:3f:09:47:49:18:c2:f6:30:68:e5:ee:f7:55:
61:19:ad:14:d0:d5:e9:3b:8a:8e:c4:d7:3b:a0:f9:dc:7e:24:
d7:e9:17:6d:80:fd:d2:19:b7:26:4b:ba:5e:73:4c:7d:9c:f2:
ac:c0:54:fa:6e:80:c3:a2:de:c5:bf:7c:2d:aa:9b:85:91:53:
02:d2:f5:13:7b:bd:58:cf:7c:8c:7d:a5:44:76:92:5d:78:0f:
c7:e2:c7:5f:1c:74:91:90:cc:61:7f:63:dd:28:f0:70:35:a4:
66:43:d6:55:c5:f7:b1:85:17:33:7e:81:b0:f2:28:c9:ec:62:
d6:3e:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:33:55 2026 by rpki-client