Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: FfWB6xDI60fr8E+bqTsSigfvL7e7EJz8smLC9HHyVZo=
Subject key identifier: 35:97:8F:61:43:5C:A5:52:7E:A7:F8:89:22:F7:4F:82:B4:EC:0B:1A
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 019CAC46DB047768549CCF000234087BF54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 13EB
Signing time: Mon 02 Mar 2026 02:00:50 +0000
Manifest this update: Mon 02 Mar 2026 02:00:50 +0000
Manifest next update: Tue 03 Mar 2026 02:00:50 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: VJQ2X6VKvAMxUc8fNT58wYMwjFOl4yJZan+DPp27Hvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:db:04:77:68:54:9c:cf:00:02:34:08:7b:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Mar 2 02:00:50 2026 GMT
Not After : Mar 3 02:00:50 2026 GMT
Subject: CN=35978f61435ca5527ea7f88922f74f82b4ec0b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:1e:ed:c3:78:08:a2:16:7b:3a:61:73:7d:
1b:5d:65:43:03:94:c3:05:91:a3:e8:c5:38:3e:36:
4b:ba:b6:ea:d5:b9:40:94:d5:31:d6:8d:b1:0d:e1:
fe:0a:6c:b8:cf:32:14:9e:16:04:11:0d:e1:1d:8a:
33:be:91:e2:60:b2:6b:74:c5:43:d9:43:9f:fa:61:
07:d8:55:50:55:6d:cb:b8:01:13:1a:1e:fe:5c:96:
31:ef:19:e0:e4:b4:54:4c:cc:fe:7d:3f:21:7f:1f:
e5:e8:03:39:01:12:ff:74:8a:5a:8f:08:dc:b3:48:
47:57:02:a9:04:bd:e4:4f:8b:d6:6b:50:08:8e:5b:
b7:cf:82:c0:f9:a6:e3:02:0e:46:51:a1:c1:a5:b6:
d1:b0:71:70:0f:e5:b9:7e:52:15:e5:b8:99:eb:22:
2b:ae:a8:d1:75:2a:3a:c0:bf:bd:5e:74:a0:8a:56:
c6:da:0b:e3:02:05:1d:41:03:a5:e0:17:8a:c5:a3:
ca:d4:04:99:a1:5d:63:a5:b8:f7:7d:67:17:19:ac:
ce:86:b7:1f:3a:23:4d:b4:e6:0a:35:73:6b:1d:d8:
cc:19:48:dd:0b:cf:a2:d5:d0:ba:9d:60:ae:30:08:
9c:19:81:ae:b1:01:06:08:46:43:3b:48:59:cd:a8:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:8F:61:43:5C:A5:52:7E:A7:F8:89:22:F7:4F:82:B4:EC:0B:1A
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:9f:c3:88:5d:dd:4f:92:f3:42:f6:40:59:91:10:fd:06:
74:3f:51:e7:2d:22:f0:b3:80:fb:d4:31:a4:48:92:48:9d:8f:
26:fd:88:01:fc:19:56:08:f1:bc:7f:24:3b:3e:fd:07:24:19:
15:da:6c:1d:3d:29:0e:c9:27:72:c3:d6:cd:e3:08:52:70:1e:
e1:ca:c1:15:9f:4d:9d:6e:17:6c:34:37:3e:2f:69:b5:34:b1:
24:3d:bf:17:a7:0e:a5:9a:69:b3:02:9d:55:bd:6c:9f:e1:5a:
73:ee:7b:a3:d4:26:43:cc:0c:ba:08:82:6b:4e:93:eb:5e:85:
74:28:43:be:87:aa:08:0b:23:1a:92:46:ed:4b:61:49:04:70:
a2:dc:08:bc:b1:09:ad:55:29:28:a0:21:e7:b8:01:65:94:46:
41:4e:97:f9:24:96:58:e4:4d:e4:68:d5:b4:a0:90:17:c7:3e:
13:f9:36:d2:a3:56:e2:ce:27:9b:58:11:f8:a6:9c:c0:12:80:
51:03:14:30:30:26:a5:1c:cb:3b:88:39:6e:4a:44:a6:0c:1a:
15:ce:6d:e5:da:28:13:ba:77:66:3a:95:6d:a6:42:f9:99:bc:
5f:dd:b9:3b:a7:03:6e:62:dd:94:94:82:2e:aa:a8:ba:82:98:
db:52:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:46 2026 by rpki-client