Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
File: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft (raw, json)
Hash identifier: /SEhRs0QMVj3r/n21Kd+82R1CvpsYKRGYmOF2dP0gUk=
Subject key identifier: B1:1A:5B:20:F8:A9:0C:CA:60:6E:85:90:38:0D:4B:63:59:3C:44:90
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 019CAB6BF15391D5917ACA1D5C0871383719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
Manifest number: 0AF9
Signing time: Sun 01 Mar 2026 22:01:43 +0000
Manifest this update: Sun 01 Mar 2026 22:01:43 +0000
Manifest next update: Mon 02 Mar 2026 22:01:43 +0000
Files and hashes: 1: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl (hash: qwYsV+HkGgv2ykDaOLK7TDqtGCngtTsu3cTY7WlArOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:f1:53:91:d5:91:7a:ca:1d:5c:08:71:38:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Mar 1 22:01:43 2026 GMT
Not After : Mar 2 22:01:43 2026 GMT
Subject: CN=b11a5b20f8a90cca606e8590380d4b63593c4490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:5b:85:55:f6:c5:f0:04:f7:f1:f8:46:1e:
95:ca:ec:6a:14:ea:3f:e9:e1:1a:29:0a:19:c1:f5:
87:c8:9d:4d:a3:c0:50:b9:39:9e:b1:e2:23:6f:0c:
f0:13:fd:e7:99:4f:96:dc:64:fe:40:c5:f0:9d:8d:
2a:16:41:63:b1:51:e2:93:22:f7:b5:d5:1b:c1:bb:
9f:4f:de:59:2f:58:ca:cb:ba:c6:65:07:f1:ce:48:
7a:1b:76:ad:68:15:4a:e4:e9:8b:01:ac:7b:51:6f:
ec:b7:6e:ba:34:0b:86:5a:cb:c4:8c:59:01:7d:ed:
3d:c8:81:c8:3a:c6:10:45:69:b7:78:74:b5:11:b5:
15:0b:33:59:75:93:05:cd:34:93:25:72:3d:e2:0b:
96:66:b5:ff:4b:0f:cd:66:57:58:7e:c4:32:4e:62:
46:5b:9c:3b:86:ce:6e:b0:c8:8f:b8:77:86:e7:c5:
03:b1:3e:71:d7:81:f6:3b:09:d5:0b:96:2d:9b:b4:
96:96:58:f8:69:60:e5:63:62:d1:74:78:a1:f8:dd:
e4:2b:7e:55:fd:81:3c:20:b2:03:e9:d6:b3:49:31:
79:c2:08:41:e6:9f:a7:89:3e:e8:f3:e2:5d:2f:4c:
68:c0:3a:2c:0d:61:f7:e2:f3:9b:14:d8:d9:6a:f2:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:5B:20:F8:A9:0C:CA:60:6E:85:90:38:0D:4B:63:59:3C:44:90
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e8:e3:73:e4:64:8a:c4:ba:f6:71:7e:d5:b2:94:81:ea:45:
d9:c8:a9:02:92:9a:2a:ca:b9:5e:00:5c:23:c5:d7:72:7a:40:
e9:d1:f9:f5:10:fd:92:b4:f3:ca:72:55:fa:a8:8a:ea:eb:14:
83:80:fb:4a:a8:21:9d:19:d6:de:a6:af:8c:e6:9e:84:29:8b:
77:8f:ca:f6:f6:db:20:4c:27:d7:42:7a:26:39:3e:db:ee:60:
1f:dc:b2:31:70:a3:cd:09:89:27:c8:f2:59:11:46:ae:b1:52:
15:52:8a:3f:61:ed:d5:8d:22:0e:75:b6:4a:7a:20:69:3a:ce:
26:85:16:20:52:90:7d:1a:93:4b:84:74:cb:2a:54:1f:22:f4:
84:44:f4:e3:4a:cd:b3:ec:2b:37:7a:67:09:46:4b:65:5c:d1:
b7:4a:b1:d8:d5:96:b4:2b:49:86:cc:8b:d1:d3:c8:b3:70:78:
f4:f2:21:c9:97:8d:cc:31:2d:12:66:1f:8c:ae:09:51:25:07:
7b:bb:c7:22:04:a2:38:95:1a:8f:27:7e:22:cf:0e:65:6f:25:
58:24:2f:26:bf:8c:7c:e3:c3:5e:52:ff:03:a4:97:f4:35:c8:
ec:6a:a4:88:5a:a8:19:c9:ba:f7:8f:a1:1b:d4:84:25:07:02:
72:93:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:45 2026 by rpki-client