Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: fbrp1H0lt1iQixqdyX3dZRahyiiau1yY5Nl2nnb9Odc=
Subject key identifier: 4C:8B:15:03:28:B8:9E:27:26:8D:A9:3A:FE:A2:6C:57:65:05:D6:1B
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 019CAC476BC48885AB4FB19162E7C71A10BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 1504
Signing time: Mon 02 Mar 2026 02:01:27 +0000
Manifest this update: Mon 02 Mar 2026 02:01:27 +0000
Manifest next update: Tue 03 Mar 2026 02:01:27 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: bG3KAoj8Eagi+EgaIguYofR1b/0/ruHvWCfV+G77MLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:6b:c4:88:85:ab:4f:b1:91:62:e7:c7:1a:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Mar 2 02:01:27 2026 GMT
Not After : Mar 3 02:01:27 2026 GMT
Subject: CN=4c8b150328b89e27268da93afea26c576505d61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:4d:96:ec:e2:cc:01:a4:fc:f2:53:b3:ab:
a9:b3:06:67:d6:45:be:2e:87:23:57:a4:bc:af:e1:
4a:b3:4f:da:ad:ad:f7:65:16:d7:b5:3f:eb:90:df:
e1:c9:f5:c6:72:24:41:42:09:e2:42:db:c3:41:f3:
27:bf:48:68:81:25:ce:2b:de:57:dc:a4:ce:5d:4e:
7c:30:3c:de:6e:cf:aa:de:e9:a1:a3:67:1b:b4:70:
e7:70:44:ed:13:89:e9:ad:8c:e4:3d:93:6d:35:35:
4a:fe:8b:d3:26:99:51:13:dc:5f:ce:a6:31:59:46:
d0:00:91:16:a5:12:48:c7:f3:30:ac:8b:79:2a:58:
7a:e1:cb:f0:96:e7:42:ff:bb:7e:0a:da:ba:bf:72:
8a:bc:17:9f:50:51:0d:fd:fb:20:7d:84:7a:fa:f9:
90:5d:2e:d5:72:e4:e8:a6:b3:f0:4b:07:b2:8b:0b:
ae:d5:49:26:41:f2:11:15:67:60:cd:31:a9:4d:b6:
17:45:74:87:bd:eb:a4:eb:6d:3f:8b:39:47:c2:eb:
5a:ef:a8:fc:15:2f:5f:bb:fa:b6:0a:b9:7b:8c:d0:
ba:6d:60:29:a3:68:a2:b1:1e:bc:9e:8f:9d:3d:cd:
2e:a5:28:a7:d9:19:b3:3d:0c:53:24:a6:95:23:44:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:15:03:28:B8:9E:27:26:8D:A9:3A:FE:A2:6C:57:65:05:D6:1B
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e5:2a:34:35:ee:9b:34:4e:43:67:ac:ac:73:bb:df:27:06:
d9:3f:9d:db:18:0c:aa:3f:e1:b1:63:40:5c:37:72:fd:12:22:
37:f3:72:79:10:4f:58:0d:03:ab:f3:7a:92:39:1c:83:fb:ee:
53:d5:4d:f0:fb:0a:6e:c8:31:ba:f2:a0:cb:2b:00:1c:89:c9:
fb:89:fc:68:9a:0a:43:bf:03:f3:21:4e:8a:8d:a0:5d:d2:4f:
8e:31:b4:5d:02:e0:81:e2:4b:e6:56:15:77:f9:26:b9:50:5c:
f4:ad:45:83:88:a2:4a:2a:dc:17:bf:c6:05:b7:9a:48:10:68:
48:70:fa:18:cc:08:21:c3:32:7e:38:72:b6:9f:5c:14:0d:78:
ae:2d:54:6b:69:06:30:a8:88:f8:4c:b0:e7:71:b2:19:d5:b9:
41:ad:79:a6:e2:4c:2a:87:df:a4:62:a7:84:f1:0a:36:fd:cd:
5d:9f:b9:0b:ca:5b:64:a1:33:a5:8e:06:67:40:58:a2:06:53:
c3:1d:08:6c:54:9b:e3:fe:9d:e4:6a:10:b0:9b:70:e6:eb:ea:
7a:af:ab:62:86:9b:52:3b:ec:ea:9e:9a:f3:d9:3c:77:88:32:
9f:78:8e:f2:e7:8f:d9:c9:27:74:4a:4f:02:4b:e9:c3:76:de:
75:73:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:16 2026 by rpki-client