Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: UZ7M/LDvBdnOMwg0heNbgcr8pQrzSWEIpOdy+BN45og=
Subject key identifier: 0C:A8:58:DD:A8:DD:F9:F0:11:60:8F:FC:80:83:2E:5A:39:4D:92:8D
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 019CAA2167843E99A3AAF84EC4562F412021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 0F27
Signing time: Sun 01 Mar 2026 16:00:41 +0000
Manifest this update: Sun 01 Mar 2026 16:00:41 +0000
Manifest next update: Mon 02 Mar 2026 16:00:41 +0000
Files and hashes: 1: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: Q2wm9AABbknZIzubJWSWe3SS+rSfSYWYNErZnYHb3+w=)
2: wUc3S_D16XdipknJCTPDOkYeAwY.roa (hash: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:67:84:3e:99:a3:aa:f8:4e:c4:56:2f:41:20:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Mar 1 16:00:41 2026 GMT
Not After : Mar 2 16:00:41 2026 GMT
Subject: CN=0ca858dda8ddf9f011608ffc80832e5a394d928d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:f4:29:95:c2:59:a6:f2:41:b5:8d:a4:de:
16:24:9e:f9:f9:ba:1a:0a:4b:2d:90:ac:ac:e9:f3:
68:28:93:58:79:84:3b:94:9f:7c:42:a7:3d:72:ec:
00:b3:13:78:a4:b4:29:7e:ad:77:d2:d9:5a:01:63:
3b:bc:76:40:08:0b:eb:78:fc:6e:61:2e:a9:bd:b6:
20:b4:af:36:55:36:83:c8:36:70:d4:71:90:91:97:
a0:1f:05:64:13:17:a7:34:e0:13:49:45:40:7a:2f:
60:21:b7:d9:ef:82:6e:db:89:96:99:df:a9:10:76:
f0:53:30:b5:01:cc:84:08:0e:19:b3:17:7b:73:21:
d9:7a:fa:97:06:71:c0:b7:04:f2:25:f9:5f:2f:22:
3d:c1:8b:25:05:09:a3:8c:14:87:26:84:42:27:0b:
7b:f0:c1:0e:fb:ae:9a:45:40:13:17:0c:d1:3e:94:
8f:6d:c5:86:05:d0:da:c5:e8:13:5d:1b:9e:3a:57:
3a:3c:c8:63:18:5e:cc:18:21:9e:3f:8d:e1:dc:fa:
9b:be:be:f4:30:6b:b1:19:cc:fb:07:61:6a:a1:cb:
2e:ea:f1:22:5d:20:a2:d0:f9:3e:fa:e0:fe:b2:05:
33:a2:fc:f0:b1:1a:cb:f2:90:d9:6f:02:80:83:67:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:58:DD:A8:DD:F9:F0:11:60:8F:FC:80:83:2E:5A:39:4D:92:8D
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:de:11:f4:62:90:9f:a4:19:3a:3f:cf:d7:0f:3e:ab:f0:57:
99:1c:04:00:df:e7:9a:78:a7:76:91:32:e9:e0:41:14:5d:31:
af:f1:f1:70:39:7e:85:51:cb:20:91:8d:26:6e:50:c9:98:06:
2b:5a:5f:db:e4:bf:8b:f5:a6:b5:9c:a8:5f:8d:4d:32:9a:53:
93:5b:c9:e2:69:da:e6:e3:b4:63:0d:9f:c5:e6:69:99:4b:01:
bc:93:25:97:83:e9:e6:39:5a:83:81:60:4b:3e:ad:4f:1e:7d:
69:fb:ea:05:80:63:e5:b4:95:b5:84:dd:cd:29:a9:a9:d6:93:
ee:31:b3:8d:ab:a5:68:85:39:a0:bd:ad:25:61:56:5c:90:d9:
9c:d1:5b:24:c4:64:d9:f6:30:a8:6a:4c:39:f0:0a:27:7a:30:
dc:ae:e4:36:73:7d:5a:5b:4d:9e:08:70:0e:ca:72:1f:b4:51:
10:34:6d:8b:63:1a:93:1d:3f:66:bb:77:65:b2:90:5f:b3:90:
d0:66:e0:61:01:01:bc:8e:c4:76:96:60:f2:91:bb:a1:24:f5:
cd:36:66:92:b4:7b:14:21:7c:da:c9:86:91:de:7e:ee:75:5d:
0b:61:a9:70:11:9b:44:8f:78:6f:15:fe:34:ae:f5:3e:3e:a2:
0b:21:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:00 2026 by rpki-client