Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: qLvzoL+mws/Vf6stHpE5pet2mgh7BByAlXBGr27sekg=
Subject key identifier: BF:07:E2:D7:05:28:7D:33:E9:63:18:BC:03:5A:AC:AF:03:E5:FB:9C
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 01A0C9A2409B5CD803430D6254D3CC069A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1A8C
Signing time: Tue 22 Sep 2026 15:00:48 +0000
Manifest this update: Tue 22 Sep 2026 15:00:48 +0000
Manifest next update: Wed 23 Sep 2026 15:00:48 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: xUeHZqTtWQvD46pdleaiGi1FNCRGv8wR+mOPaC7l03o=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:40:9b:5c:d8:03:43:0d:62:54:d3:cc:06:9a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Sep 22 15:00:48 2026 GMT
Not After : Sep 23 15:00:48 2026 GMT
Subject: CN=bf07e2d705287d33e96318bc035aacaf03e5fb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:29:3e:bd:64:6b:fd:21:51:06:cf:5b:29:
0b:1f:48:b5:1d:e2:00:ae:e6:5c:25:9d:50:19:f2:
c6:1b:40:59:0d:1c:80:e8:1c:2e:98:8f:1b:d9:48:
f1:89:30:9a:e6:2e:a9:2f:58:32:70:9c:dd:2f:7e:
4b:5a:32:05:b9:70:a5:5f:10:3b:7c:ff:0c:41:9b:
05:6c:af:23:1f:8b:c1:db:25:00:a3:36:1a:20:32:
fa:4d:88:15:11:f1:02:5d:5b:d5:38:5a:2f:31:a8:
fc:8b:da:61:a8:25:b6:67:1a:83:48:44:1a:a2:a6:
00:d7:2f:4e:21:10:fd:4f:8a:be:51:f3:8f:33:54:
8e:00:78:7a:9a:4f:81:2a:23:2c:9a:20:76:77:c6:
32:98:82:c6:e6:9c:02:3f:45:6a:14:46:b7:04:17:
5e:a5:5a:db:0e:78:9d:71:8f:4e:90:25:ef:4e:28:
c7:d0:56:ee:ae:30:dd:57:71:43:80:92:27:2a:2f:
f3:72:08:0b:88:f6:77:42:47:83:e3:da:76:5b:b7:
93:ec:3b:30:b7:fd:5f:8b:31:43:d9:5a:9a:4d:e0:
59:c5:f9:2c:b1:ae:b4:77:5c:d6:82:bb:5b:0c:aa:
7d:01:e2:c0:fc:38:6c:44:02:2c:c7:d7:24:9a:d9:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:E2:D7:05:28:7D:33:E9:63:18:BC:03:5A:AC:AF:03:E5:FB:9C
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:20:28:bd:a8:17:72:9d:32:5d:78:7e:10:63:5a:65:70:3a:
b5:8b:97:4c:9f:88:0c:f0:90:bc:b0:7a:e5:35:a0:c3:81:dc:
92:e2:4b:77:0e:59:ae:42:20:9f:bf:70:5a:91:36:91:54:98:
ff:68:98:d4:14:ab:d7:88:9d:a5:01:02:91:84:58:28:0f:22:
27:1d:27:79:cd:0f:bf:dd:34:af:1e:b4:7f:8e:e2:85:df:a4:
45:34:92:1b:1e:44:2f:14:ff:ec:8d:08:6a:3d:77:af:87:89:
db:b6:bd:5f:9d:c1:80:5f:01:a3:db:ff:3b:ef:e5:71:85:43:
57:d6:4d:98:1c:05:f4:7d:20:fe:61:3e:90:c2:49:ef:ed:4a:
ee:13:d4:12:6d:2c:07:15:77:0a:2e:76:f8:34:dc:64:29:55:
b2:5b:65:c6:8b:ba:24:59:0a:7a:02:01:2f:a0:4c:d4:ec:e2:
03:e8:00:1a:47:75:5c:3f:be:f2:27:47:b6:72:76:24:37:2d:
96:02:f6:99:19:80:70:f2:19:22:8f:a4:56:b0:ad:e5:32:fe:
95:d8:d8:9d:86:cd:6b:c6:14:71:3f:b7:c1:09:a0:65:cb:08:
87:f0:5c:08:2e:bf:68:02:6c:82:63:33:82:07:7c:b4:6f:4d:
60:c0:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:22:41 2026 by rpki-client