Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: OyFCMiP3RuWuM0sqWE0STEq4kPok+k6snY1Hn9jhQfY=
Subject key identifier: EA:8C:6F:60:CB:9E:56:1A:80:C0:FD:9A:C7:BC:AC:B5:1E:30:77:B2
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 019CAD599DAAC66F04904B84CC7B553E4664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0AC0
Signing time: Mon 02 Mar 2026 07:00:57 +0000
Manifest this update: Mon 02 Mar 2026 07:00:57 +0000
Manifest next update: Tue 03 Mar 2026 07:00:57 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: GxRLQ1pUz3GJqoPmm9ClZXHGSWL5Z6HFCDI5pS3P60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:9d:aa:c6:6f:04:90:4b:84:cc:7b:55:3e:46:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Mar 2 07:00:57 2026 GMT
Not After : Mar 3 07:00:57 2026 GMT
Subject: CN=ea8c6f60cb9e561a80c0fd9ac7bcacb51e3077b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:e4:17:f3:72:4a:11:df:7c:e7:bd:03:9d:
94:a0:24:51:02:a6:ab:59:1f:65:fd:d0:36:bb:0c:
3d:b4:d7:ab:0d:a0:b0:ac:84:8e:6b:a2:71:25:b0:
56:06:ba:87:80:7d:15:97:f5:be:ba:93:06:75:b2:
7b:c1:07:5a:9f:3a:dc:42:fe:53:bd:0d:4f:48:7a:
33:33:6c:ef:4c:3f:1b:56:68:8b:46:76:55:60:56:
d5:37:8c:80:5b:fc:f9:6a:ec:fe:2d:cc:64:43:83:
84:8d:7c:7c:41:f4:bc:4f:7d:84:27:bf:6c:fa:17:
04:79:8c:fe:f1:0f:41:38:21:b8:96:da:a7:bc:4e:
03:d6:d3:b6:35:dc:a0:be:80:a5:6b:eb:82:24:41:
fd:df:4a:84:68:da:fd:af:ac:3e:e4:cf:c9:0a:30:
26:a5:94:0e:a9:0b:b2:35:35:df:5c:ce:ef:4e:9d:
07:ce:a8:fb:a8:2f:03:b1:29:18:07:ca:98:3a:8e:
e4:29:c3:a3:38:8a:77:c1:1a:b8:15:57:10:3f:e7:
19:13:2c:5f:1a:f2:df:5f:cb:09:df:0d:da:42:a5:
db:f7:74:dc:50:c8:78:8f:1b:51:d3:04:bc:b3:47:
88:97:05:e0:5c:dd:6e:58:d8:eb:35:ca:40:b2:e2:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:6F:60:CB:9E:56:1A:80:C0:FD:9A:C7:BC:AC:B5:1E:30:77:B2
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5a:9a:40:b3:92:ab:26:bf:95:d3:c6:1a:f7:27:cb:ca:b6:
0c:f7:08:1b:3c:1f:ca:e9:7c:28:96:c7:a2:a0:22:df:c3:06:
32:95:1f:12:cf:dd:57:a6:25:65:2a:d4:3f:4e:a2:3e:89:53:
50:bb:4b:34:fc:01:9b:08:a6:b6:c0:60:62:7a:38:7f:ee:35:
2b:26:b4:8e:6f:ee:99:c3:38:d6:22:ff:c1:0a:1a:30:45:2d:
dd:c5:c0:02:f6:f8:25:29:cd:fd:c8:1b:f0:5f:f8:e4:98:12:
7f:42:38:df:70:7f:b8:31:83:47:5e:2d:45:ca:76:b5:56:0a:
c4:bf:62:71:fb:7d:ed:fb:f4:76:32:14:4d:c1:ab:d8:87:e1:
ad:89:90:e2:e2:e1:b6:1f:c2:6f:a7:6f:15:be:3f:17:e8:89:
03:f2:e3:42:cc:82:3a:15:4f:0f:8a:75:51:8c:b6:a6:6c:78:
52:d7:0d:17:01:0f:99:19:82:de:34:66:b0:35:2e:9d:6b:b5:
e3:7c:19:ae:3a:d7:54:e3:32:34:09:ad:9c:f9:a9:4c:d3:a8:
98:3d:7d:42:e9:43:fb:b1:e9:42:28:12:cb:26:3d:d1:d8:a5:
c2:24:0a:e9:f4:25:4c:4c:28:38:8e:40:fc:83:16:47:7a:47:
f5:9f:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:33 2026 by rpki-client