Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: n7TVwda21oQOgwrHbaCJOVBJFAVRCPw3OFwi2QJUv2U=
Subject key identifier: 4F:86:6F:E4:36:48:0A:7E:2A:73:65:3E:EC:90:8D:9B:12:EA:EE:BE
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019CAB3403C9A9AAE04985F2689E2006E3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 186A
Signing time: Sun 01 Mar 2026 21:00:38 +0000
Manifest this update: Sun 01 Mar 2026 21:00:38 +0000
Manifest next update: Mon 02 Mar 2026 21:00:38 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: Op0t/Y3lPoVbZNfnRoSxrwmIEoEP/EHnsKxEZU5DGu0=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:03:c9:a9:aa:e0:49:85:f2:68:9e:20:06:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Mar 1 21:00:38 2026 GMT
Not After : Mar 2 21:00:38 2026 GMT
Subject: CN=4f866fe436480a7e2a73653eec908d9b12eaeebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:45:33:1b:e4:7a:6b:e0:f5:c1:3a:1e:a6:
4b:38:60:d1:53:44:07:11:35:cb:55:6d:35:8a:37:
59:7a:27:af:bc:16:69:f6:1b:2a:eb:bd:32:e1:e2:
08:b4:a0:c1:19:18:3f:e7:ef:c2:50:2f:cc:5f:32:
fd:78:96:2f:0e:a1:cc:9d:29:ee:fd:eb:72:6a:25:
46:0b:8c:1a:4c:f8:22:7d:e3:5c:ea:ee:bf:08:8c:
c8:c4:26:3b:56:cf:2f:91:79:0c:f7:24:be:4b:c4:
bb:b7:ff:6f:26:be:09:c5:c7:a6:a8:6f:b2:8c:85:
45:c9:4e:cc:f0:70:b9:d7:62:fd:91:a0:f5:88:00:
6c:82:18:6b:5f:aa:64:92:be:0f:8f:c5:4b:97:9e:
51:b7:a7:7f:aa:4c:23:e2:b0:4a:6f:40:26:ff:19:
4d:33:72:85:ce:80:c2:cd:a3:13:d3:b2:11:da:f8:
3f:f4:5f:7c:b4:ed:2e:cf:0a:e5:16:7d:20:07:1d:
08:2b:61:a0:e1:13:0f:e4:e1:5f:8b:79:54:96:bf:
71:43:a2:fe:02:f0:d1:8c:1e:53:3b:37:5f:f5:16:
3f:b8:e7:5c:9d:7e:d7:c1:f9:ea:60:8b:9f:5b:ba:
70:5b:13:c7:36:8c:e1:06:47:de:b5:29:52:e6:1c:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:6F:E4:36:48:0A:7E:2A:73:65:3E:EC:90:8D:9B:12:EA:EE:BE
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:89:3f:79:1e:49:02:d8:83:74:ea:86:85:41:27:7e:d4:f9:
56:13:85:0d:94:62:5b:d0:32:ef:3d:fc:44:33:a0:8a:ee:15:
61:0b:73:00:69:8d:71:08:a9:99:34:23:38:a5:0f:58:a7:dd:
66:30:57:6f:33:12:57:cf:57:48:64:11:9e:34:75:fb:81:9c:
12:1e:e1:07:b6:6c:08:54:68:df:c3:f9:e1:1f:c3:5d:cc:54:
86:5a:35:d9:80:83:a5:a4:fb:86:5f:c9:a4:40:e2:4f:bf:30:
c6:c2:ff:43:2e:f4:7c:a1:3d:93:cf:af:08:13:30:96:84:34:
d2:65:80:ad:7f:87:8f:14:03:ad:03:a9:1f:7c:d2:cd:07:ce:
ee:08:e5:56:5c:53:e0:7f:4f:7e:1f:b9:a2:b6:26:f5:74:94:
65:9c:06:4e:f5:76:b2:cc:9b:4c:9e:ef:0a:b1:1e:49:63:b9:
6f:77:88:a9:a7:a2:c9:9f:2d:b9:6d:5b:db:cf:d0:71:4a:9f:
03:11:b6:70:ee:d5:22:e8:7b:e2:43:78:68:99:a4:f3:a4:04:
72:72:1d:40:2c:70:c2:2b:bd:d8:85:29:03:e8:cd:07:9f:43:
54:74:18:9b:ec:54:56:aa:a9:78:b9:be:10:0d:fe:53:ea:19:
29:be:e3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:22 2026 by rpki-client