Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: zqADPj/8S5hkJ9a8ufVi2ezWe6LMEDcvDVyKLOIrow8=
Subject key identifier: 30:AF:6A:8C:B1:55:EF:E7:4C:38:D4:72:16:29:DA:6B:2C:73:3F:97
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 01A0C7B383FEAA4FBC041AAAB0BD729F9FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1A8B
Signing time: Tue 22 Sep 2026 06:00:25 +0000
Manifest this update: Tue 22 Sep 2026 06:00:25 +0000
Manifest next update: Wed 23 Sep 2026 06:00:25 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: jBkILhl5J60dPfSqI5owbfBgrVshcqY7gxzyzavwkqY=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:83:fe:aa:4f:bc:04:1a:aa:b0:bd:72:9f:9f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Sep 22 06:00:25 2026 GMT
Not After : Sep 23 06:00:25 2026 GMT
Subject: CN=30af6a8cb155efe74c38d4721629da6b2c733f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:1e:a3:ef:19:b8:ab:df:88:b5:36:49:f6:
e8:50:fb:83:2d:ef:5b:85:cf:c4:d4:e5:38:ea:2d:
64:dc:8c:8e:4f:f3:bf:30:16:38:1c:0c:43:5b:01:
d2:b1:dd:89:e3:51:cf:cb:a7:c1:a3:01:5c:90:0c:
e1:d4:e9:36:73:a6:4f:e1:31:ed:66:c7:85:ab:c5:
d9:23:30:82:ca:2a:4f:f6:2a:13:d9:f0:14:51:45:
2b:fc:4e:20:53:2d:8d:7e:87:a3:f6:06:c3:d5:80:
5e:f1:e4:5f:48:71:10:ab:20:f3:b4:b1:72:76:ec:
58:60:d6:ab:06:a9:b5:42:fb:78:23:6f:eb:ac:64:
1f:82:f6:45:17:6f:a1:6e:d8:03:0d:d7:38:94:64:
8c:d9:12:86:32:7d:43:25:d9:30:2f:33:86:ce:2d:
17:14:1d:01:d2:8e:2e:17:9a:de:e2:63:c5:de:b9:
af:fc:d7:28:cc:b1:a5:cf:51:99:de:16:c4:75:ae:
9c:b9:d9:b8:be:bd:70:bf:63:7b:93:9e:1f:7c:56:
65:d0:e2:19:bf:2e:67:1c:cf:4a:df:8d:6d:fc:79:
fe:22:83:16:11:f6:f0:78:3e:26:18:a2:74:1c:6e:
5b:20:44:68:1f:1b:11:6c:2e:2f:15:3b:7c:30:87:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AF:6A:8C:B1:55:EF:E7:4C:38:D4:72:16:29:DA:6B:2C:73:3F:97
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:33:53:24:cb:a5:29:3e:99:9e:bd:6e:e7:a3:60:b9:ed:7f:
2c:fd:7a:00:87:e9:11:9f:dd:70:a4:0a:6f:6f:53:14:e0:94:
d0:2b:d0:a4:76:71:aa:09:ff:bd:45:37:88:9e:88:96:ac:1c:
04:72:16:db:a7:57:14:62:60:1b:80:5e:84:16:64:02:4c:9d:
d6:78:57:3f:09:21:fc:42:93:e0:f2:1f:77:fe:2a:c3:fe:21:
76:48:40:50:03:5b:12:54:6b:73:25:64:f5:23:74:41:2b:e4:
cc:1d:8e:ed:ed:f4:e1:98:6a:34:d6:c8:6e:16:e7:00:e4:45:
69:dd:10:c1:d8:8c:67:38:a5:bb:c7:b2:ad:8d:1a:ac:7f:8a:
46:5c:ba:c3:e4:22:d1:9a:47:ae:59:77:92:c8:6b:9b:75:41:
df:65:73:05:54:e1:15:6b:6b:94:18:37:17:44:e3:ce:19:65:
d9:8f:43:d7:59:ea:e3:1f:d1:45:ab:83:71:ea:91:ed:11:3b:
22:cc:f6:fa:44:c4:bd:a8:09:0f:92:3c:02:70:3a:87:c0:4b:
ea:ed:04:3e:ff:9c:46:ce:cc:c3:9b:da:c3:02:81:30:39:0f:
91:eb:27:88:98:5f:f8:3d:ad:67:41:ab:ce:e4:9f:2a:c0:d9:
bb:f1:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:55 2026 by rpki-client