
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File: wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier: pZdGHA8zjkOAQvGoP62QEKC6sP8l8iE+uvZjpoV3MvA=
Subject key identifier: C0:21:FA:B9:A1:16:71:CE:04:E8:D3:D6:A1:27:D9:54:BA:91:49:7A
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer: /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial: 019CAD5A31CCFA89727D994251CB75CC06AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number: 0F3B
Signing time: Mon 02 Mar 2026 07:01:35 +0000
Manifest this update: Mon 02 Mar 2026 07:01:35 +0000
Manifest next update: Tue 03 Mar 2026 07:01:35 +0000
Files and hashes: 1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: Nq/V7PI2+Lgug/F7oc/P32DOs7457KARv3DU84N6TbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:31:cc:fa:89:72:7d:99:42:51:cb:75:cc:06:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Validity
Not Before: Mar 2 07:01:35 2026 GMT
Not After : Mar 3 07:01:35 2026 GMT
Subject: CN=c021fab9a11671ce04e8d3d6a127d954ba91497a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:be:40:70:a6:cc:6c:04:cf:67:39:8f:39:
48:c3:c3:2b:1a:8c:40:24:15:10:20:69:34:39:1a:
0f:7f:64:20:35:cb:8e:0a:72:e3:ad:5b:6e:78:f8:
71:64:ab:d7:f2:22:69:33:d0:8e:b3:79:02:32:2e:
bf:3c:66:c4:a9:37:5c:76:c0:37:3b:2e:29:c0:e1:
21:34:1c:23:49:bb:0c:54:29:4a:dd:60:18:3f:bf:
de:21:7f:a2:04:19:44:20:4f:4f:d6:1b:75:ca:48:
e5:28:25:3d:ed:3e:7b:48:45:b0:7e:ef:a1:75:3c:
27:d0:10:9a:c4:21:ba:f0:1e:14:43:bb:e6:2d:7d:
2f:e1:75:02:33:3f:0c:04:9b:24:57:7e:ef:d4:e7:
1e:58:a6:55:2a:c8:5e:e6:10:19:0b:44:34:8e:22:
56:bc:44:2c:6c:44:25:a4:27:fe:d9:39:9b:dd:a4:
96:8b:24:3e:82:1f:8b:21:1a:b5:41:9a:51:24:29:
fd:2a:fb:64:0a:39:6c:fd:97:f2:aa:65:e5:8a:5b:
97:5a:3f:42:bc:22:d4:e5:d8:d2:5b:0f:c6:83:b2:
e7:a4:64:87:72:23:e2:ec:03:33:11:08:14:22:46:
f1:a3:d8:6a:7a:9f:dc:76:6d:63:2f:a3:56:43:0f:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:21:FA:B9:A1:16:71:CE:04:E8:D3:D6:A1:27:D9:54:BA:91:49:7A
X509v3 Authority Key Identifier:
keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:77:50:6a:e6:57:72:24:db:5e:19:73:30:2c:0e:40:57:50:
d8:79:ae:45:0a:21:c5:40:17:17:1b:a8:5e:51:db:51:d7:2e:
38:fa:cd:cf:53:77:1c:11:22:bc:8e:0c:60:4c:3b:91:f8:65:
62:78:7d:93:ba:ca:e5:69:3e:e1:ac:1c:04:9f:26:10:63:15:
65:07:0e:bd:91:c2:0b:6f:74:6b:6c:dc:96:14:65:9a:8f:44:
d8:09:0c:5b:3d:ea:cf:ff:08:4c:2a:33:8e:22:b6:ed:e5:d3:
57:0a:01:fe:b3:fc:e6:79:50:b1:da:70:38:ed:28:d8:88:0b:
20:06:02:2c:ee:ba:1b:f5:02:85:f1:ee:2d:ed:e1:b8:69:04:
11:1a:81:ba:97:ef:db:7f:00:54:b9:95:2e:5b:9a:83:3d:d5:
c4:85:0a:b3:9a:36:15:cf:39:ab:b5:81:b7:87:3a:d1:c8:62:
bb:28:51:26:ae:02:27:56:be:02:fc:be:13:b7:db:42:cb:49:
d3:a9:ac:5e:28:d6:95:6a:00:bc:da:dd:79:2d:7e:84:01:7e:
4b:a2:64:e6:5a:30:da:40:05:cf:4f:4a:d9:13:cd:51:5c:4b:
5d:0b:a9:a8:82:16:d3:f4:f0:f6:c7:93:21:8a:14:30:45:f7:
ec:47:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:35 2026 by rpki-client