Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: /65gS+mXWM1xDMxZ0gcek8WnXibnj6JNW2IT3pP2Owk=
Subject key identifier: 70:74:3A:57:FF:F2:85:4F:88:45:D5:83:67:B4:76:8A:BA:0D:69:B0
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019D98BE0B728339BC167FF8D63FE4165290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 18E5
Signing time: Fri 17 Apr 2026 00:01:24 +0000
Manifest this update: Fri 17 Apr 2026 00:01:24 +0000
Manifest next update: Sat 18 Apr 2026 00:01:24 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: exT7JtIkwLnxBbN6EEfPr42AGSzJk7emVc1wDjIJCRQ=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:0b:72:83:39:bc:16:7f:f8:d6:3f:e4:16:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Apr 17 00:01:24 2026 GMT
Not After : Apr 18 00:01:24 2026 GMT
Subject: CN=70743a57fff2854f8845d58367b4768aba0d69b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:26:c1:bd:1f:2e:0d:d3:5b:82:62:83:d1:
41:07:46:59:59:02:fe:77:0b:10:fc:fa:32:a0:74:
d3:fa:69:ed:85:48:3a:ff:a6:cb:e1:46:cd:54:c3:
e3:61:a6:a0:82:58:0f:c9:4c:d7:18:9b:38:b5:62:
e3:1b:33:5b:18:ae:33:e2:7e:25:d4:40:f6:57:1a:
07:a5:68:f3:e1:45:87:ad:9d:7e:46:f8:25:67:35:
47:6f:ac:72:c3:71:44:f5:bc:18:2c:99:e6:0d:17:
b7:ee:9d:9f:3c:46:d6:f5:fe:a8:05:c7:40:4c:7e:
76:e5:50:54:7d:f7:fc:6f:23:de:eb:19:54:c1:5c:
cc:1e:cf:26:28:88:72:68:7c:1c:0b:29:1d:aa:ed:
35:09:7d:87:cb:3d:87:12:bf:de:b4:78:4c:03:a9:
9c:b0:ed:72:44:91:54:bf:31:5d:13:42:b0:e2:e0:
1c:ab:a5:1d:2c:2b:e9:1a:a7:0d:ed:42:2c:87:4d:
1d:5e:64:cd:da:a2:89:f1:02:2c:32:7f:95:9b:2d:
ff:62:b5:a0:87:74:1f:87:58:23:10:50:59:d6:b0:
82:6a:b2:59:68:6f:31:1f:04:74:39:89:90:38:8f:
f7:b7:26:13:3e:f2:3a:3a:80:56:4e:05:32:0f:16:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:3A:57:FF:F2:85:4F:88:45:D5:83:67:B4:76:8A:BA:0D:69:B0
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:48:09:75:c1:50:59:5d:e6:16:c7:f7:40:b0:d3:e0:cf:
81:15:db:a2:3d:04:2c:2f:ed:d6:df:81:80:ae:43:0e:75:2b:
08:73:c1:ad:9f:0f:77:32:2b:f2:d3:33:3f:ec:6d:31:46:2b:
6d:23:92:07:2e:f8:bb:9c:67:e8:f6:b6:d4:ff:24:22:6e:aa:
45:b8:01:3b:e7:d6:3c:4e:3e:b5:9d:e7:24:6f:a1:9b:03:2e:
b7:b3:0d:48:5e:4f:32:2b:7c:a7:fc:cf:72:5e:6e:30:4a:2b:
5f:e1:1d:60:93:d9:66:c3:f9:8a:44:8f:75:e2:45:97:5c:8e:
6a:ef:a3:67:c8:e4:f8:1f:1b:f3:19:6c:ad:8b:c6:22:dc:9a:
c2:05:ee:d9:aa:15:e7:17:7d:6d:97:77:6c:f3:49:b1:bf:26:
df:77:81:3b:19:be:3c:bd:93:f2:db:d3:61:90:4d:b8:9b:a9:
4c:0d:4c:06:59:21:ce:16:44:98:f3:9c:81:68:0b:d6:e8:f0:
91:07:2f:13:d2:13:e4:f9:d9:86:c6:ac:4c:d4:b2:8c:ae:19:
e1:ae:52:e9:78:3d:23:47:b4:f0:3b:7b:ff:7d:67:3e:be:77:
31:7b:82:6b:2d:2f:8e:23:78:c2:56:63:af:19:95:74:c7:e2:
ca:5d:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:25 2026 by rpki-client