Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: gyNu86Vm988EguKaQfKCPfHd0HbODcALFvUTYwbTYn8=
Subject key identifier: 77:CF:DD:A6:74:2C:63:C7:08:E9:54:C1:CC:51:23:21:78:6B:EE:ED
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 019CAB6B6E188B82F395776EDFA3640EA0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:10 +0000
Manifest this update: Sun 01 Mar 2026 22:01:10 +0000
Manifest next update: Mon 02 Mar 2026 22:01:10 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: IuuD4Xa2O95oL9jL7KjqBsVhEm1QGvRVPcYooP4IGpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:6e:18:8b:82:f3:95:77:6e:df:a3:64:0e:a0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Mar 1 22:01:10 2026 GMT
Not After : Mar 2 22:01:10 2026 GMT
Subject: CN=77cfdda6742c63c708e954c1cc512321786beeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:00:43:eb:31:16:dd:01:ba:92:86:66:40:
4a:b3:e3:fc:ab:ca:93:d8:90:45:3f:cb:a1:df:00:
63:26:44:4f:2a:29:ff:f3:15:8b:0a:c0:6c:e6:a9:
46:9a:df:38:c1:cd:63:0a:27:e5:12:fc:63:e1:81:
55:94:c4:6d:f7:ee:2f:3c:bb:19:49:76:76:06:f6:
21:7d:20:f4:b6:d8:6e:6c:50:3e:71:d5:65:30:80:
15:ef:ef:c4:9b:5b:94:7b:a5:e2:93:f5:4c:8c:a1:
dc:7a:ec:35:a3:ca:0f:d4:d0:c1:46:cd:04:ef:12:
7f:32:8d:1e:18:88:25:22:77:37:cd:d2:e0:5f:66:
fd:c6:91:06:eb:2a:55:fa:e6:4f:6f:bc:91:5e:94:
c8:d5:f6:47:01:bd:29:e5:4b:6c:0f:ff:0f:79:b2:
48:0d:96:18:17:29:b4:fa:64:3f:4c:45:9c:be:09:
43:10:b2:88:0e:fb:3f:b2:ed:e1:3e:b6:51:f8:17:
7d:b7:9f:14:82:65:75:a6:16:ec:1f:f4:32:96:5c:
8a:c5:77:41:7d:b7:3c:80:9f:69:4e:85:89:b0:a2:
21:43:85:34:08:7e:a6:a7:33:9d:d3:88:85:ca:5a:
a4:6a:46:cb:84:d5:fe:fd:45:68:57:9b:84:c0:46:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CF:DD:A6:74:2C:63:C7:08:E9:54:C1:CC:51:23:21:78:6B:EE:ED
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a8:17:2f:0b:a5:5f:0f:b3:6e:f9:86:4b:a8:12:c4:36:5d:
12:a5:fd:ef:b6:b1:8d:46:55:04:2b:88:90:d9:55:a7:1c:af:
d4:ca:e0:38:90:b1:c1:ce:c8:a6:70:c9:02:4d:48:e5:5d:8d:
95:7e:b2:36:9e:bd:cf:73:9d:2a:76:ee:9c:b6:2f:0b:62:9f:
a4:46:ad:87:e8:97:4e:57:fb:5d:a8:2d:36:20:e9:5c:4f:3b:
8a:07:c7:3b:46:62:e1:02:9c:42:66:46:98:45:91:c6:03:24:
d1:59:86:98:b0:fa:6e:09:e7:02:54:83:07:10:b0:4c:0e:e9:
0a:a0:0e:a7:73:ba:8d:dc:1a:c8:7c:15:85:8c:b8:11:f0:e9:
da:b4:a4:c3:bb:01:11:3f:5d:f1:a4:ed:c3:25:41:4a:68:c8:
32:3d:38:4e:11:39:1c:b7:cc:18:03:30:83:7e:7b:5d:e0:a9:
38:17:d4:51:f4:e7:06:46:db:88:3a:ca:07:16:0b:99:ff:65:
83:ca:c1:b9:09:6a:38:0c:5c:25:12:1a:2e:54:98:c3:76:03:
f2:a5:5a:3c:e2:ea:1a:13:71:34:ec:80:27:2b:ce:5a:b5:4f:
47:1b:8f:05:a7:01:5e:b8:b3:34:9c:34:68:a3:a0:a7:77:d4:
35:50:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:22 2026 by rpki-client