Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: GgIpdbq1MIxqfUMHirIWkUlRkhERJGUXtZj+bt1/NoQ=
Subject key identifier: C3:75:03:34:AD:DA:3B:2D:A8:08:51:96:4B:5F:25:FF:31:4F:7F:FE
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 019CAD599965B490C16300D490A06BC9BE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0EAD
Signing time: Mon 02 Mar 2026 07:00:56 +0000
Manifest this update: Mon 02 Mar 2026 07:00:56 +0000
Manifest next update: Tue 03 Mar 2026 07:00:56 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: 2yyYYtDvIodeNrnVpQ8pDFW7fhM4Kzwtx0gNPEN/giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:99:65:b4:90:c1:63:00:d4:90:a0:6b:c9:be:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Mar 2 07:00:56 2026 GMT
Not After : Mar 3 07:00:56 2026 GMT
Subject: CN=c3750334adda3b2da80851964b5f25ff314f7ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:ab:96:d4:4c:1d:a0:95:5d:9d:c3:71:fc:
55:07:73:1b:71:7e:b3:ad:16:00:64:cf:fa:b5:55:
03:9a:73:1d:61:f9:69:58:57:10:f6:36:1b:90:bb:
d5:1b:d8:4c:9f:7d:15:d7:ac:96:47:da:a8:90:db:
e8:e6:09:5d:67:59:5b:99:15:cd:91:e2:3d:ff:78:
72:b0:1f:74:cb:a7:2f:fc:32:cf:e1:b0:cf:c1:53:
41:88:be:3b:b3:7f:df:fa:a0:b5:5c:22:f8:b2:80:
7f:5e:7b:11:79:10:8d:7e:ed:3a:75:ec:1b:15:ee:
ed:13:5a:44:4d:b5:d6:02:0d:ec:98:df:8e:c5:e8:
23:71:34:f3:be:ac:27:ed:e5:39:74:9a:e2:48:cb:
49:08:3b:51:59:bb:41:0f:98:ce:30:81:e9:70:43:
62:f6:5b:63:c7:91:26:da:35:08:5a:fd:1a:e0:ca:
b2:75:c3:24:0f:3c:c5:72:e4:7e:9a:89:4d:af:f1:
d6:d6:01:86:13:cc:6f:9a:e0:c8:85:72:12:6f:d8:
68:3a:20:aa:7b:a3:c7:93:ad:3c:e3:e6:4a:7e:33:
cc:64:ff:77:5d:fc:24:ef:53:8a:12:32:ef:6e:ae:
c4:f3:f0:f2:47:59:da:4d:a1:8a:ca:9f:92:53:8e:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:75:03:34:AD:DA:3B:2D:A8:08:51:96:4B:5F:25:FF:31:4F:7F:FE
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cc:44:ed:5e:b0:1e:3a:68:cb:90:f4:bb:35:ef:0e:23:bf:
19:77:b1:40:00:82:d4:53:76:74:5c:b3:fc:34:96:3e:1c:00:
16:b5:34:93:3d:f2:ae:3a:8e:43:b5:91:8d:dd:64:de:92:00:
6b:d4:7e:45:07:f1:61:09:15:2a:2c:2f:75:35:23:58:2b:cb:
3f:67:cd:44:2d:e1:48:36:09:0b:79:41:40:d1:0c:b1:e1:d8:
93:fb:c6:9a:bd:3e:94:66:7b:a7:39:72:06:5b:14:2f:50:63:
22:45:cb:93:91:f3:fe:e6:50:0e:cb:91:72:0f:c6:00:2e:e5:
92:9e:fb:80:e0:fb:a6:0d:09:b7:7f:78:d2:aa:f5:84:e5:fe:
2a:43:ad:60:3a:6f:82:a6:0d:b7:c7:ec:41:81:22:01:0d:b9:
5c:43:b9:2e:78:7a:1e:86:e6:78:06:0d:e8:7c:0f:c7:06:3f:
94:42:74:28:fa:66:30:8d:1c:b3:ee:8e:01:60:d8:8c:b6:51:
1b:6e:90:bd:08:b5:29:49:be:e7:dc:14:3d:cc:b9:bb:c0:a1:
91:eb:8b:d5:a4:55:cf:00:02:e2:00:68:c5:be:98:4e:75:a2:
ba:7d:fb:da:ff:01:44:01:8c:38:08:ce:fe:5e:82:9a:a4:3b:
d4:b3:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:27 2026 by rpki-client