
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
File: bWLDbYdChp-XVVt8mDlPn2XI6CY.mft (raw, json)
Hash identifier: L3MsGKOGCbcH3sxMFKNkIpQOIU6BI9IdqKpSZ/SVMyw=
Subject key identifier: 29:93:3C:58:54:79:D2:95:90:19:B8:98:84:92:36:5F:56:71:C5:40
Authority key identifier: 6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26
Certificate issuer: /CN=6d62c36d8742869f97555b7c98394f9f65c8e826
Certificate serial: 019CAD59BAB1D0BA724B8616105D28452702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 07:01:04 +0000
Manifest this update: Mon 02 Mar 2026 07:01:04 +0000
Manifest next update: Tue 03 Mar 2026 07:01:04 +0000
Files and hashes: 1: bWLDbYdChp-XVVt8mDlPn2XI6CY.crl (hash: sd7XPdEup2KKk08XvwgpZcgUQ4mJAYYdPgc9c3PfHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ba:b1:d0:ba:72:4b:86:16:10:5d:28:45:27:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d62c36d8742869f97555b7c98394f9f65c8e826
Validity
Not Before: Mar 2 07:01:04 2026 GMT
Not After : Mar 3 07:01:04 2026 GMT
Subject: CN=29933c585479d2959019b8988492365f5671c540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:08:61:75:9c:4a:78:20:bb:09:0a:5b:f8:
6f:26:1a:b0:76:6c:c7:69:68:cc:76:e7:9c:fc:6b:
56:f2:b7:b3:5e:13:9d:30:80:79:66:49:a0:a1:f6:
d6:0a:69:42:5d:7e:fc:68:08:16:43:66:6b:e8:44:
b1:32:38:2a:d9:a9:21:96:61:1d:e4:7c:a8:74:c6:
84:21:bc:93:15:56:1a:11:10:0a:ca:77:ca:67:04:
e1:34:7b:a2:71:ab:ba:db:2a:24:05:e8:35:76:fb:
4c:0f:f5:ed:0d:ab:c7:0e:50:a9:b1:0a:a0:e8:37:
1f:bc:e7:1e:f6:e5:78:5c:aa:d0:1e:05:01:bb:8f:
6a:7e:01:30:cb:5f:7f:6e:bf:e2:af:09:51:f4:62:
8e:e7:89:81:79:47:b6:4b:9d:51:b9:01:d1:62:cf:
32:3b:88:88:b3:68:ca:99:d2:f5:e4:6b:5a:49:f8:
1f:a5:4d:a2:1e:36:f8:cf:3b:a0:f7:66:94:4a:34:
29:24:6a:7b:66:3b:48:cc:20:25:4f:d2:12:43:35:
0e:08:dc:29:b6:05:73:61:c4:ad:45:3e:7b:75:fa:
74:de:e0:a5:34:f0:ec:e3:3b:3d:94:54:11:67:c1:
9b:1e:1e:df:ad:39:f0:b9:99:b4:f2:67:69:89:15:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:93:3C:58:54:79:D2:95:90:19:B8:98:84:92:36:5F:56:71:C5:40
X509v3 Authority Key Identifier:
keyid:6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:d7:f8:21:17:f1:08:52:00:80:42:21:1f:56:dc:44:c8:
ca:24:2b:26:cb:29:09:90:41:c8:b5:52:66:23:32:5d:05:38:
e9:dd:7f:b9:45:c9:8e:76:d9:8b:42:ea:c7:ef:3c:6b:69:ed:
55:a3:fc:67:3f:3f:24:33:78:aa:e2:ff:a7:c0:a5:1c:50:ea:
34:2e:87:32:74:a9:82:77:56:21:ad:7a:93:d8:d3:47:0f:58:
7b:45:b5:dc:ed:9b:ab:1c:6a:14:6e:35:a5:68:33:04:6b:84:
a6:b5:5a:09:a6:2e:11:e8:9b:b5:f9:83:62:d2:88:ae:ac:6c:
52:cb:f4:2d:44:fb:6c:88:30:3e:14:ab:bd:3d:9c:a7:7d:53:
fb:98:49:43:1b:01:a1:80:5f:f7:90:c3:45:64:1a:56:ce:e0:
ff:2d:3a:33:8f:4a:21:71:43:76:ad:69:9f:9a:4b:16:7d:7e:
7b:8e:81:d6:77:f6:df:68:da:9c:26:67:36:6d:f2:9a:e0:2d:
64:dd:9f:4a:6d:36:8e:41:a6:ed:87:d4:82:3c:50:c6:97:d8:
27:9d:8c:80:66:61:73:f4:cf:8f:70:9f:3b:3b:c3:ee:36:ac:
f8:a9:50:bf:62:e6:3e:6a:c9:b6:c4:a3:c6:b9:6b:b7:94:a8:
09:dd:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:58 2026 by rpki-client