Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: /eHTiAwHOPf8Gy00IglRYy+Q6DSHeTzu1RKtxcG6Kig=
Subject key identifier: 49:E4:90:AD:D0:5D:45:F4:58:21:36:BA:F0:D5:4B:DB:A6:50:B0:07
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 019CAB6BE653F0872D58BC94B755D78C1220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0FA6
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: KytcfUeEWWXZmdvgz8RhtA+nNID6q1x1QAaHdI6zAwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e6:53:f0:87:2d:58:bc:94:b7:55:d7:8c:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=49e490add05d45f4582136baf0d54bdba650b007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:1a:e7:1a:81:db:35:0e:91:06:dc:31:72:
69:85:99:e6:e7:5b:be:dc:ff:9e:c5:1e:9f:8c:ee:
25:17:f5:77:d3:a2:7b:d4:fa:b5:ef:23:4c:b0:05:
d0:e5:3f:c8:24:9c:25:2f:85:b9:e1:88:07:5a:0a:
07:75:da:3c:9b:b2:57:aa:bb:4c:53:62:ec:2f:c6:
74:46:a8:a3:ad:06:88:c2:bd:fa:b0:f3:ea:ca:9f:
67:1e:2e:63:28:75:9b:3d:9f:a1:57:3b:2f:b2:d9:
fa:b0:57:32:b2:21:44:85:f2:22:43:6d:cb:b2:51:
10:40:b8:81:47:f4:06:a8:d9:28:75:d1:36:40:38:
71:e0:d7:df:17:12:32:bb:9d:89:c2:28:74:f0:3c:
73:94:d2:b3:3d:76:55:ca:2d:75:2f:f7:79:a9:af:
3c:ab:cf:21:69:17:fc:bb:6a:6b:b5:ca:36:af:e8:
36:22:57:32:17:35:11:c3:58:35:9b:01:c1:04:64:
23:ee:be:92:ea:06:23:ee:2d:08:f7:8d:aa:33:70:
98:a5:49:e6:3d:56:8b:da:92:04:93:a5:1f:eb:c1:
2d:87:49:78:b2:c3:75:6e:ff:c8:75:61:f5:cb:68:
90:0f:50:68:89:aa:64:bf:94:c6:94:ca:78:5d:b1:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:90:AD:D0:5D:45:F4:58:21:36:BA:F0:D5:4B:DB:A6:50:B0:07
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:66:10:94:ce:7a:60:ae:9e:15:47:e6:40:5e:80:4f:e9:ea:
7d:7d:d1:d8:be:35:92:34:df:92:2c:e7:58:77:28:40:45:8a:
31:2d:5c:44:fc:7b:64:1a:87:07:1a:ac:59:63:89:59:d6:d1:
1b:bd:82:48:84:29:2c:7a:7a:49:c2:20:1a:d6:fe:cc:c6:38:
79:e3:ef:29:09:87:4d:fe:0b:1c:0a:5d:ea:f2:c4:f6:04:5c:
4c:d4:bb:07:15:25:66:d2:b7:a4:b5:65:72:1f:b2:31:e8:fa:
e4:a6:f2:b9:ff:aa:88:6d:38:22:e2:f0:0f:21:fd:a4:74:cf:
f6:1a:e0:e4:d1:8a:36:76:f8:cc:ac:ad:5a:5c:47:b0:8a:20:
3d:d2:df:3f:bd:bd:be:b3:8e:98:42:20:4d:46:fc:81:91:5a:
cb:83:36:8c:9d:96:40:2e:f7:ba:31:60:9f:a4:92:3f:10:76:
19:37:23:8b:ab:39:12:4a:1c:fb:18:a3:d9:16:2a:95:1a:87:
73:5d:4e:05:2b:48:cf:5c:17:32:a5:e9:e2:d6:7a:b8:49:75:
7a:93:ac:31:a9:d2:c8:16:ef:75:ce:37:3b:b0:96:73:4c:65:
8e:07:92:e1:71:9f:14:35:c1:35:8c:92:a3:9a:c0:0c:68:4f:
8b:3e:87:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:23 2026 by rpki-client