
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File: dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier: 2fiG9dIOXgAMjPYxE7jZPhMXE0EOa3wphWBEQzeh2SA=
Subject key identifier: A4:00:4C:3B:48:DB:29:15:06:55:28:BE:88:72:EE:39:9F:0D:0B:30
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer: /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial: 019CAA8FCC5E0A872800D58869B0882A1F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number: 15EA
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: /P+/iH/cyzO1c81Y6g3zDpTimoCyUzSmuup0ZHY0Eh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cc:5e:0a:87:28:00:d5:88:69:b0:88:2a:1f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=a4004c3b48db2915065528be8872ee399f0d0b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:4e:84:c5:d1:00:90:1e:9d:60:8c:ff:34:
76:5e:c7:b4:3f:60:bc:d5:e8:51:45:b8:de:33:78:
bd:89:7a:2f:4a:a5:20:fa:05:db:97:fe:d0:79:13:
a9:4d:b1:ea:4f:86:d2:36:6e:18:e3:24:2d:e8:36:
57:e7:34:78:fc:c2:f0:f5:9a:73:4e:29:d4:9a:d8:
66:85:97:22:7f:15:a0:1d:f4:a7:26:76:82:d9:a2:
d7:c7:dd:20:1e:46:95:e6:fe:bf:1a:c7:c2:a7:34:
77:da:e6:76:94:17:09:cc:d8:75:88:02:0f:99:73:
b1:33:a8:68:89:93:26:b8:b1:cb:d3:8f:cd:4f:11:
6b:ca:7b:72:75:7e:7e:01:54:26:c9:e8:40:31:98:
f0:42:c8:d3:1c:41:c7:ed:82:76:cf:0b:36:9e:bd:
84:d2:b0:15:d9:86:c1:6f:2e:10:fa:ab:61:48:ed:
11:ab:7f:65:72:1a:a2:03:1a:29:c4:44:98:dc:04:
49:a7:28:63:d2:23:1e:49:05:fa:d8:ba:f1:08:c6:
a8:0a:d1:79:7d:5b:6d:88:07:b3:ee:b4:2d:96:60:
58:6b:35:15:6f:64:d9:ae:de:24:a2:86:8e:06:09:
d6:05:03:20:5c:87:32:14:a5:9a:83:7a:1a:b1:e3:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:4C:3B:48:DB:29:15:06:55:28:BE:88:72:EE:39:9F:0D:0B:30
X509v3 Authority Key Identifier:
keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a6:9d:93:2e:2c:d7:57:75:a2:0a:ac:07:34:6c:0d:0e:f4:
b9:8f:9b:34:aa:36:78:03:ae:d4:5a:69:78:48:47:d1:11:b7:
85:0e:3b:4a:83:a9:fe:4c:d1:f2:9f:b6:6d:83:fb:4e:bb:22:
2a:01:4e:e8:31:7a:ff:f9:2c:cf:65:58:e4:1b:81:21:84:ab:
c7:f1:a6:58:4b:a4:b9:11:69:c8:36:a9:34:97:4e:fb:7d:be:
aa:bb:bc:89:92:e9:08:75:7f:1f:77:1f:94:12:67:ae:a8:c7:
8b:26:72:65:c7:c0:93:dc:39:e5:e1:5f:d3:39:f8:08:ee:7d:
99:cf:6d:8c:03:ea:ef:b2:14:c5:63:ef:d3:11:b4:99:ff:fa:
db:c4:ac:c5:55:6c:d2:18:81:a4:ce:6e:2d:f8:5f:7c:d9:82:
b5:41:95:2c:ad:50:d3:35:1e:61:e5:09:ef:34:c7:76:48:6f:
eb:8a:44:31:04:8f:62:cd:e9:98:b4:0c:9c:2d:95:ac:68:a6:
47:0d:aa:41:6a:47:15:78:e1:fc:76:31:3e:2d:2a:cb:2a:a1:
77:10:2a:e2:08:19:54:ad:33:99:8d:c5:fc:43:27:7d:b9:c1:
1e:78:81:a9:0f:77:4d:fe:be:95:2d:1e:a6:e0:b0:9c:89:72:
dd:bc:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:59 2026 by rpki-client