Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier: U1rbg2is8PU+CblHLKbUDs2e0qJT8nWSBTmTZs2TQuA=
Subject key identifier: 36:70:C6:07:45:D0:28:71:8D:E0:3B:B3:71:B7:7E:63:7D:8A:50:38
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer: /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial: 019FA90755B2D60D5627AFECACF9C3E82CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number: 19CD
Signing time: Tue 28 Jul 2026 14:00:57 +0000
Manifest this update: Tue 28 Jul 2026 14:00:57 +0000
Manifest next update: Wed 29 Jul 2026 14:00:57 +0000
Files and hashes: 1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: HvY+dZGkSjwd7hvrqT/eV2SzxE+l5iUk/0P2utrcQ+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:55:b2:d6:0d:56:27:af:ec:ac:f9:c3:e8:2c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Validity
Not Before: Jul 28 14:00:57 2026 GMT
Not After : Jul 29 14:00:57 2026 GMT
Subject: CN=3670c60745d028718de03bb371b77e637d8a5038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:7f:56:54:2c:d4:e5:94:fe:84:ce:a6:70:
58:37:cd:fe:32:3f:bd:a5:de:f2:d3:e9:90:89:f2:
ba:43:31:6c:dd:36:25:22:44:39:33:c4:26:21:2e:
38:46:bf:89:d5:af:7c:cd:85:83:68:11:85:4b:65:
e2:e0:93:8c:20:60:ee:1c:7a:2c:1b:dc:a6:3b:27:
d9:70:ce:91:4a:91:6e:1d:99:e6:4c:00:00:79:72:
22:07:b0:4a:c8:26:db:d7:ad:f8:2d:c0:45:06:05:
5b:ec:f6:18:2c:ff:a4:29:51:bb:d5:5c:02:a2:13:
cb:23:04:d7:f1:b0:37:ac:56:7f:fb:83:22:43:ac:
13:e7:e1:65:48:de:e7:f0:63:5a:6c:ec:27:97:04:
a7:a2:3b:09:ea:8c:28:28:44:2f:78:37:4f:f0:2f:
a5:fa:da:28:a9:53:90:19:cf:fe:28:f0:3e:a6:94:
51:62:21:c5:ed:7f:c0:b5:b4:75:f3:dc:ca:72:a3:
80:a0:e3:89:3d:1f:0f:01:7e:6f:0c:2f:38:59:1e:
4e:eb:9b:2c:66:3f:7c:9e:9b:ee:e0:58:e4:43:37:
69:69:7f:79:05:ac:22:b1:b6:7f:22:df:d6:f4:7c:
cf:f4:5d:c2:56:06:14:33:d1:06:38:a9:24:c2:cf:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:70:C6:07:45:D0:28:71:8D:E0:3B:B3:71:B7:7E:63:7D:8A:50:38
X509v3 Authority Key Identifier:
keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:34:c8:ac:dd:7c:86:cc:fb:a3:b2:d9:37:3e:cf:18:cb:a4:
54:f5:29:87:ba:66:59:6e:ca:be:82:8e:0c:88:bd:8b:8c:57:
94:84:5d:b3:83:9c:01:a7:1b:c5:87:38:32:ef:fa:6d:80:c4:
90:24:4c:72:d6:21:a5:3d:e6:15:20:b5:cf:0d:54:ee:63:11:
45:22:12:09:72:44:d2:5c:fa:91:4b:b5:1a:e7:53:c8:3a:84:
1a:d1:7b:d9:1e:b1:81:80:cc:0f:02:b3:ed:21:01:0f:3c:9d:
91:ee:43:e0:94:01:b1:6d:a4:f9:63:d4:53:c5:17:a9:7b:fb:
c3:8b:6c:8d:86:bd:78:61:fb:49:ef:bc:f6:5a:8c:51:32:3d:
4e:99:97:66:20:f9:9c:d6:a1:57:f5:b6:e9:6b:9d:40:c1:63:
a3:cb:e5:d1:8e:53:b1:fb:e9:9c:71:50:1d:21:01:39:3b:be:
fa:b4:fe:c2:8c:fc:8d:06:72:ae:21:4a:da:f2:51:90:6b:a3:
f8:0c:e3:d6:c6:2f:3a:13:e6:00:24:9d:30:4d:97:47:30:dd:
db:02:51:98:15:59:21:1e:51:10:b8:ee:4f:2c:0c:bd:5b:d6:
3a:9e:14:2e:6b:0a:e0:e9:e6:f9:19:2b:9b:fd:35:e7:0d:52:
6e:19:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:26 2026 by rpki-client