Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: 8n9LI6l7KO7xgHfC10aDec0/avQYIvSCOJjnLFU1840=
Subject key identifier: DC:66:73:39:0D:4B:0C:99:A5:06:88:CB:E5:0C:AC:C2:08:CD:8D:A5
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 019CABD97BE544CB807EF27F52431BBB5535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: ibcwNBD3O+skXj6RgM+tyeMQpb7eOJwqihGuTZCpFd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7b:e5:44:cb:80:7e:f2:7f:52:43:1b:bb:55:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=dc6673390d4b0c99a50688cbe50cacc208cd8da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:b6:42:63:54:4f:4f:47:3e:3f:cd:52:4a:
38:3d:c9:98:f4:65:25:db:6a:ce:fb:f6:d0:f4:3a:
66:87:5d:09:19:69:41:70:e3:2b:12:84:74:86:f2:
95:1e:35:85:0c:8d:c5:82:4d:77:d4:24:a4:08:2b:
83:b8:55:9e:e8:04:99:45:8e:0c:23:1f:c9:ff:cf:
86:ed:4d:79:24:16:b7:df:1f:cb:92:26:77:3e:2b:
bb:75:dc:63:db:6f:b0:00:af:1b:b8:ac:a6:65:60:
4a:21:a6:d0:64:5b:cc:99:ee:e1:df:4d:e6:4b:60:
f6:d6:c5:59:05:fc:3a:be:73:f5:71:22:80:92:95:
6f:80:2a:4d:15:ce:bb:76:b3:06:e4:37:10:bd:8f:
8d:9d:37:a3:7c:a7:2c:57:70:71:4f:6a:fa:24:1a:
11:9a:ac:eb:d5:9b:9f:c8:a7:74:6b:5b:10:7e:85:
08:7d:4b:1f:7f:84:a5:b9:a2:3b:fa:f5:a0:04:9b:
e1:2c:4a:59:21:8b:42:3e:bf:4a:04:47:e9:78:fd:
9c:94:53:d1:ef:1b:66:62:2e:3a:51:99:eb:59:65:
f5:08:26:e4:f8:40:a8:00:52:0b:50:1e:de:a2:e4:
29:a0:87:63:bb:a3:7b:70:23:3e:e6:47:0f:5a:fb:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:73:39:0D:4B:0C:99:A5:06:88:CB:E5:0C:AC:C2:08:CD:8D:A5
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:29:d9:21:9c:bb:b3:3b:d8:4d:ce:d1:4e:74:15:12:41:c9:
bd:65:23:06:f4:e4:b7:aa:26:3f:d9:cd:bb:34:6b:41:5a:c2:
8c:eb:34:bd:3d:3d:9b:31:33:78:83:f7:e7:2a:da:d5:5b:e6:
9b:1e:13:69:74:bf:a7:db:ed:d1:31:62:a4:e1:c3:15:6b:38:
61:16:6e:d6:ad:68:22:86:c2:04:e7:49:16:60:77:8d:d4:bf:
42:8f:99:f5:b4:99:81:1b:ef:dc:ec:e6:3a:93:9b:71:76:6e:
6a:23:2a:55:8b:85:4e:13:88:fa:5e:67:ed:0e:4b:2a:4a:35:
a8:ac:49:dd:cb:40:13:9a:9c:01:8e:fb:e5:6e:2c:17:12:d5:
c6:d7:a7:7b:4c:c2:cd:cb:69:d9:84:12:2a:97:e3:49:42:25:
2b:d0:fc:2c:53:5d:20:07:b2:39:c2:1f:c4:ad:82:00:f0:67:
bb:56:dc:80:20:c8:cc:86:41:24:e0:42:76:9f:e6:2f:c1:f5:
4a:d6:ae:20:96:21:16:79:2a:05:1b:54:da:9d:84:15:0c:44:
96:04:5f:95:72:71:d7:c3:85:d4:ec:79:6d:02:97:71:2e:ac:
85:98:29:65:59:78:4c:36:8d:88:c4:6b:0a:c7:4d:5e:24:c2:
80:68:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:30 2026 by rpki-client