Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: m2+hQyp39vOOgidkCBcoiCaN1s0/4IkoWFPt/Co92aI=
Subject key identifier: 9B:F2:87:E0:6B:3D:A1:6F:AA:CD:50:1C:10:5A:60:91:99:E9:EB:8A
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 019CA90EFBDB4D0D1D373F5948A7E0D0835A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 0659
Signing time: Sun 01 Mar 2026 11:00:57 +0000
Manifest this update: Sun 01 Mar 2026 11:00:57 +0000
Manifest next update: Mon 02 Mar 2026 11:00:57 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: bGbcs/7++g/zFK+0OFd0lFN80wjU6s3hXRHHxSPrRLw=)
2: tvVyRp4L9e3meI8HjNM8zokhY-g.asa (hash: olDJRhTYRvq4nKsZ0gccZ00xYdhkTFh1VWFFg4+4L98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:fb:db:4d:0d:1d:37:3f:59:48:a7:e0:d0:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Mar 1 11:00:57 2026 GMT
Not After : Mar 2 11:00:57 2026 GMT
Subject: CN=9bf287e06b3da16faacd501c105a609199e9eb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:42:8d:95:78:e5:d0:0f:c7:f2:ac:bd:8f:
01:32:4b:d8:22:30:2e:81:c3:fc:1f:df:96:3c:e9:
dc:2a:3c:e4:c6:31:67:1e:c5:10:7e:cb:82:a1:79:
f3:09:90:c8:85:e3:e6:06:8d:d7:dc:81:fb:aa:e2:
56:e3:f5:c5:89:4e:90:87:a6:1e:a5:34:06:4e:d0:
f1:a5:2f:5a:5d:26:4e:67:b1:b3:d7:9d:6a:3c:8d:
b5:03:f2:43:8c:a8:29:83:6e:61:3e:81:9f:6b:6e:
58:10:8f:74:20:67:bc:12:4f:80:64:47:10:7c:be:
e9:2e:44:ad:ea:bd:0f:d0:dc:18:94:09:69:72:02:
77:d4:6b:50:a2:4b:1f:ea:b2:d7:e6:23:54:57:75:
4d:7f:54:60:d0:4d:a5:c2:25:d2:47:6b:ae:2b:c8:
7e:94:8a:c4:e8:b5:8c:9f:a5:cc:fa:db:c7:2e:9c:
89:52:19:fe:a2:25:81:07:cd:c5:7a:11:89:17:78:
91:12:92:bb:97:ce:8c:df:28:26:e1:c0:38:e1:36:
e7:e7:c6:3d:91:8e:cf:e1:f0:33:5f:d4:c1:67:5f:
37:13:d8:91:c0:f9:d2:1c:b7:13:ce:60:74:d7:51:
7f:55:ad:bc:82:ee:ac:5e:5a:bf:81:9b:98:4f:08:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F2:87:E0:6B:3D:A1:6F:AA:CD:50:1C:10:5A:60:91:99:E9:EB:8A
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:19:a8:a2:02:56:3a:fa:99:e7:1e:20:32:e5:5d:91:de:ca:
00:12:03:b9:30:56:43:bb:b8:03:2f:ba:aa:30:d4:f0:96:c8:
1e:6f:39:ea:97:a2:1f:8d:d9:10:62:e7:7d:45:bf:a5:a2:49:
d2:5a:9a:28:78:cc:2c:6f:ad:58:7a:96:0e:d1:e5:a3:8a:a3:
09:c0:40:61:a4:c0:be:a3:1b:03:5c:82:93:8d:2b:a6:99:0c:
6d:6d:e9:aa:7b:64:91:97:d4:56:9d:23:86:5e:d4:33:ef:b0:
73:96:e1:fe:35:44:ff:60:22:59:c1:fe:23:22:e8:26:01:64:
09:43:cb:e7:00:5b:07:44:07:ba:f6:b3:4f:23:87:a5:62:a4:
19:00:1e:36:a0:b2:82:21:90:29:7f:b5:7e:7b:5b:72:76:c9:
78:52:d7:d3:10:d3:44:5b:6b:e4:50:42:2a:ef:06:49:37:87:
5b:7f:69:2c:6d:c2:b6:49:34:7c:07:5a:b4:65:82:54:b8:08:
00:09:47:d2:c6:af:4c:6a:2f:75:48:bd:12:21:f0:90:d3:27:
78:c5:17:7b:3b:24:ec:14:f4:73:85:a8:9d:ec:d8:c3:77:50:
6f:49:d2:9f:dc:15:d5:9f:55:10:c4:ef:73:0b:c1:1f:7e:d4:
c7:33:71:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDvvbTQ0dNz9ZSKfg0INaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm
ODQxNzIwHhcNMjYwMzAxMTEwMDU3WhcNMjYwMzAyMTEwMDU3WjAzMTEwLwYDVQQD
Eyg5YmYyODdlMDZiM2RhMTZmYWFjZDUwMWMxMDVhNjA5MTk5ZTllYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiNCjZV45dAPx/KsvY8BMkvYIjAu
gcP8H9+WPOncKjzkxjFnHsUQfsuCoXnzCZDIhePmBo3X3IH7quJW4/XFiU6Qh6Ye
pTQGTtDxpS9aXSZOZ7Gz151qPI21A/JDjKgpg25hPoGfa25YEI90IGe8Ek+AZEcQ
fL7pLkSt6r0P0NwYlAlpcgJ31GtQoksf6rLX5iNUV3VNf1Rg0E2lwiXSR2uuK8h+
lIrE6LWMn6XM+tvHLpyJUhn+oiWBB83FehGJF3iREpK7l86M3ygm4cA44Tbn58Y9
kY7P4fAzX9TBZ183E9iRwPnSHLcTzmB011F/Va28gu6sXlq/gZuYTwh5cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvyh+BrPaFvqs1QHBBaYJGZ6euKMB8GA1UdIwQY
MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt
ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3
LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBmoogJW
OvqZ5x4gMuVdkd7KABIDuTBWQ7u4Ay+6qjDU8JbIHm856peiH43ZEGLnfUW/paJJ
0lqaKHjMLG+tWHqWDtHlo4qjCcBAYaTAvqMbA1yCk40rppkMbW3pqntkkZfUVp0j
hl7UM++wc5bh/jVE/2AiWcH+IyLoJgFkCUPL5wBbB0QHuvazTyOHpWKkGQAeNqCy
giGQKX+1fntbcnbJeFLX0xDTRFtr5FBCKu8GSTeHW39pLG3Ctkk0fAdatGWCVLgI
AAlH0savTGovdUi9EiHwkNMneMUXezsk7BT0c4WonezYw3dQb0nSn9wV1Z9VEMTv
cwvBH37UxzNxqg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:21 2026 by rpki-client