Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier: Mbp/QiMXrkYx7n1G8q1rnPmnVi47zRccX4YGxgZmDJE=
Subject key identifier: 2A:5A:18:FE:54:72:57:DE:6F:FC:FB:26:BC:32:74:08:9C:5C:2D:27
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial: 019CACB4F669986CFB3B708ADBA0C9B923BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 04:01:06 +0000
Manifest this update: Mon 02 Mar 2026 04:01:06 +0000
Manifest next update: Tue 03 Mar 2026 04:01:06 +0000
Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: 1QJ2nEa3++EAeH4iNrbSpdFfJwBD0HEGwG2cfi4euzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f6:69:98:6c:fb:3b:70:8a:db:a0:c9:b9:23:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Validity
Not Before: Mar 2 04:01:06 2026 GMT
Not After : Mar 3 04:01:06 2026 GMT
Subject: CN=2a5a18fe547257de6ffcfb26bc3274089c5c2d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:36:ba:a5:f8:85:99:ca:e4:68:51:70:35:
37:5d:b4:ea:fc:fe:64:94:97:f5:a1:af:bd:21:97:
d2:6c:69:ae:cc:7b:90:a5:8a:5c:17:a7:a9:0e:45:
81:e3:30:db:a9:41:71:c3:b7:39:b6:12:ac:46:0b:
62:6d:a5:0f:57:ca:f6:b8:61:8d:ef:83:9a:d6:0b:
bc:97:de:24:63:e3:ea:31:b9:5a:f3:af:19:8e:1a:
4f:a2:ff:a8:11:28:a1:c3:7b:b5:54:39:bf:54:bd:
80:ff:ab:a4:13:56:aa:c0:48:6a:c6:23:f4:9c:e0:
09:e0:b7:21:c8:0d:d2:ae:e2:97:6d:d6:dc:b4:43:
73:ad:02:08:91:e9:b5:73:68:cb:7c:70:0b:86:dc:
53:b6:52:59:52:d0:25:fb:79:b7:f7:05:2c:1c:6f:
96:37:84:0b:6b:59:e5:63:27:c7:d9:c7:eb:c6:1a:
c4:a2:ef:d4:3f:7a:63:fd:32:bf:2b:11:c1:c5:9d:
03:4f:8c:07:2d:0a:cc:fd:71:28:dd:33:c2:a7:dd:
f8:f9:d1:93:38:1e:80:40:5c:35:66:49:ce:ae:dc:
7c:1d:e7:55:16:e2:82:b6:b5:d8:83:b1:4a:13:1e:
4a:26:84:d3:6b:06:7d:dc:59:7e:dc:ee:10:6b:cf:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:18:FE:54:72:57:DE:6F:FC:FB:26:BC:32:74:08:9C:5C:2D:27
X509v3 Authority Key Identifier:
keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:d4:2e:a4:dd:a3:b9:f2:34:ef:6f:69:1e:66:e3:88:f0:
5d:d2:2a:77:10:d7:d6:3e:b2:87:46:15:2b:6e:36:5e:70:b4:
af:af:3f:d3:f9:85:ac:35:1e:3e:ca:0c:ac:fb:ec:90:de:ec:
fc:20:77:c0:3f:f1:8f:05:98:06:d2:76:77:32:3c:43:e0:f1:
bb:87:df:e9:99:7b:6c:f9:cc:6f:a4:87:a5:a6:49:23:bb:de:
e2:98:78:fa:bc:d3:df:20:c0:62:58:04:56:1b:4a:77:5c:8c:
f9:8a:43:a6:54:1b:7f:32:35:be:55:8c:91:35:8d:8c:86:58:
5a:39:52:d1:d7:06:dd:37:3a:09:3e:b1:a3:e7:9c:77:17:4b:
67:e7:85:8a:ed:cd:89:22:28:18:a7:7e:14:05:88:0e:e6:6a:
fa:e6:72:df:82:64:d1:aa:4c:93:2e:cf:76:6f:8b:bb:80:c9:
5b:b5:e2:49:cf:4d:d9:bf:d7:b9:f5:ce:c1:6b:83:2d:f8:d8:
8d:c3:a2:dd:1f:c4:e7:90:f1:ca:46:74:d1:88:d3:45:6c:eb:
36:6d:ff:64:61:c8:17:a3:9b:ab:0f:b6:ef:92:f7:bf:c8:ae:
0b:19:f9:84:4f:69:a0:41:0b:62:45:b9:51:07:e4:66:a8:98:
89:0a:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:12 2026 by rpki-client