Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: k9Mllis5zZFXwDSarm2fgoijLsKF2NNel1CUNhRabXw=
Subject key identifier: 7B:F2:C0:81:C1:00:C6:04:CC:A1:4D:89:F9:9E:65:9D:6F:20:F9:DA
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 019CAB6AF28E6BFFB994CF630C81A93E79DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0CBC
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: WO1Vy2JMecPobJOFrj7LnJyenhpBhL4cmEy7utfX7VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f2:8e:6b:ff:b9:94:cf:63:0c:81:a9:3e:79:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=7bf2c081c100c604cca14d89f99e659d6f20f9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:34:74:51:50:13:70:34:c0:da:15:90:1b:
95:f1:23:32:5b:17:ca:97:37:ae:0e:31:14:b9:45:
ea:a2:6b:aa:ec:cc:98:f4:f7:49:3f:c5:24:bd:c3:
a7:2c:5a:8a:3a:aa:f8:7b:58:f2:ec:2f:8c:0b:cc:
27:a4:9f:b5:b1:79:f6:e2:81:69:b6:8d:32:26:b4:
7b:59:ff:c4:f9:6d:f6:83:f6:a5:11:b9:d6:30:1f:
10:c2:b7:74:8e:7e:d1:bb:ac:d2:43:31:e9:ba:66:
fb:7b:f5:79:8d:34:cf:10:60:b7:38:78:73:8b:02:
32:4a:4d:3f:b1:b0:ae:a2:02:99:58:cb:0d:13:b4:
04:9a:16:0e:10:82:15:d2:c7:da:98:58:89:53:ad:
d7:d4:47:64:9d:56:6d:0f:4f:cd:96:bf:0f:86:d9:
77:7f:fe:d0:38:04:a4:0c:cd:c0:d0:a9:0c:8b:5f:
7c:d0:6f:04:39:f7:fa:01:38:26:d7:61:26:bf:84:
25:ec:64:98:99:8e:de:67:18:2d:18:02:50:b5:50:
75:2d:2c:58:b3:e8:97:62:6b:c8:5c:c5:6e:c5:04:
50:49:82:84:f6:b6:37:2e:38:16:db:6d:a8:d2:33:
47:78:ce:78:b8:d2:1b:3e:68:60:58:3f:f0:70:56:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:C0:81:C1:00:C6:04:CC:A1:4D:89:F9:9E:65:9D:6F:20:F9:DA
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5e:38:b5:b9:89:59:b2:8b:80:19:9c:07:39:bb:43:60:3c:
a0:82:98:f2:bf:5c:73:ae:93:1e:2f:30:40:c7:7f:2c:1f:cd:
82:93:d6:fb:fe:ce:27:6e:78:99:3d:cf:46:a6:b0:0e:76:4b:
62:5a:b1:7b:8a:cc:50:cd:89:55:03:5b:fd:ce:65:19:6f:4c:
b8:af:7f:6d:8d:71:03:c8:91:91:76:5b:e8:1c:47:b6:30:eb:
ac:c0:10:e4:a8:7c:33:d0:36:b0:3e:8f:27:6f:50:35:a8:1f:
b5:e0:23:72:52:af:9c:ed:ff:27:1d:84:bf:7e:6b:97:3e:3c:
ba:8c:0f:b5:37:47:34:e7:00:45:8f:06:0e:31:07:1f:56:38:
d8:34:fa:b8:68:78:c9:f7:26:8d:0b:0f:38:59:8d:36:cc:5c:
fe:ae:12:3c:3b:4c:45:44:31:a8:c0:02:11:5d:4f:f4:79:30:
15:7b:30:3c:12:56:cb:9c:75:a2:40:fe:0d:8f:ac:19:07:2d:
cb:cb:9f:2d:73:bb:2e:c8:5c:19:3b:ae:79:0d:42:99:d1:7c:
72:df:87:7e:92:f4:9e:db:05:5d:32:35:e1:a5:6c:62:ff:94:
56:b4:74:40:04:82:52:bf:ce:4c:ab:64:2e:fe:7a:78:f9:63:
9f:fd:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:09 2026 by rpki-client