Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File: w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier: 9GV3FIeR9nM1ukaYaUfA7MQbEsWazoY+1M5+75OmD4w=
Subject key identifier: 3D:EC:E7:65:7B:42:C9:1A:E1:45:9C:17:B5:C6:80:15:1E:90:28:30
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer: /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial: 019CAA58CB885A22DBD6DE151DC7C89535EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number: 07CC
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: wHir8/N9PQPRBCWyXwWSLVJ1SQPSLdDKSn1Tan0eO3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cb:88:5a:22:db:d6:de:15:1d:c7:c8:95:35:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=3dece7657b42c91ae1459c17b5c680151e902830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:96:8c:3c:30:7b:d4:3b:40:0b:7b:f3:d5:
91:f9:a2:a9:5a:e9:a5:88:3b:e4:95:1b:82:13:93:
2f:43:cf:ec:0f:ad:0d:bd:db:7a:cd:bc:9b:79:53:
07:c9:d3:9e:3e:6c:21:c5:ca:fa:1b:b2:55:a1:be:
2f:6e:cd:4b:dc:63:7f:2e:92:3a:01:a2:71:6f:0d:
17:3c:30:d1:bd:15:27:3b:7c:fe:df:c2:53:a9:01:
f6:85:21:ec:fc:7a:e1:3a:38:de:12:be:10:43:de:
d6:20:e5:d9:1a:df:36:b5:af:fa:97:db:71:ed:cb:
6b:e9:48:93:b6:74:2b:36:9e:e5:e6:10:b3:29:f5:
40:d3:b5:9a:af:c7:68:02:e4:0a:54:57:2b:de:29:
ed:e8:2d:c7:66:45:ba:e6:68:5d:6d:de:16:8d:f6:
cf:2c:3e:f5:69:78:14:4a:65:76:67:2d:8b:7e:39:
23:0f:65:1e:b2:b5:6b:b0:a1:29:63:c1:83:1b:87:
c9:1e:a9:1a:56:bf:05:e9:b5:c3:b7:06:00:9d:17:
26:29:62:02:63:af:a5:ee:26:9e:be:6a:a1:5a:5b:
50:d2:0d:b4:b3:a5:64:a3:56:fc:76:2e:3f:21:6c:
6a:55:b1:54:85:21:bd:3d:5a:ae:18:9e:95:b5:c7:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EC:E7:65:7B:42:C9:1A:E1:45:9C:17:B5:C6:80:15:1E:90:28:30
X509v3 Authority Key Identifier:
keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:e9:fb:34:66:ee:df:37:f9:d9:37:c5:95:0d:7f:e1:3d:
0f:cc:5a:2a:f2:17:63:bf:42:32:6b:f2:85:da:7c:93:0e:c8:
cc:08:81:be:70:40:b5:f0:17:d9:a9:ca:e9:0f:5c:82:b6:6e:
4d:f3:12:53:86:70:82:73:83:cb:6d:63:49:31:54:e3:a6:8c:
7c:43:6f:db:07:0e:08:16:77:11:c6:ba:7f:d8:e9:f6:92:19:
2e:26:99:cc:8a:ee:7e:ce:4b:71:d6:96:42:4c:cf:7e:f4:e7:
e0:42:44:ad:42:9e:65:b9:6c:9d:1d:de:55:fa:5d:69:f7:08:
09:37:00:2c:aa:78:d6:f4:7a:ac:18:86:aa:19:1b:93:b6:44:
f7:0a:3c:4e:68:9e:9e:3f:f6:3b:c4:a2:72:dd:35:e8:ed:2b:
d8:ed:be:96:a7:76:6c:f1:a5:56:53:07:88:3b:25:40:ab:30:
be:ba:67:b9:01:16:ec:09:5b:71:67:9a:c9:cb:1c:04:f2:76:
b5:e7:3a:2a:6f:5b:91:c3:4a:d8:ee:63:ae:94:d5:e6:a5:01:
90:bd:60:c8:f0:9b:fe:65:45:27:0c:66:bc:59:cd:85:4b:46:
ce:ac:ef:e5:83:87:1b:c8:d4:a7:15:38:a4:65:78:e1:31:35:
2d:a4:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:22 2026 by rpki-client