Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: IGupzquXMbNOHE1CQvQ/5+NP3EjdJa1jTZreq8GUcow=
Subject key identifier: FF:20:6C:38:04:07:2D:72:D2:0D:37:77:64:7D:D7:08:D6:0B:0E:B9
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 019CAC7E1BE163EAD5BACFB7F29CBDAE8A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 0578
Signing time: Mon 02 Mar 2026 03:01:11 +0000
Manifest this update: Mon 02 Mar 2026 03:01:11 +0000
Manifest next update: Tue 03 Mar 2026 03:01:11 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: 4cjRlT+TKeeSHgoyJhfeeClG8h6yIBD6J+J253cfOu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:1b:e1:63:ea:d5:ba:cf:b7:f2:9c:bd:ae:8a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Mar 2 03:01:11 2026 GMT
Not After : Mar 3 03:01:11 2026 GMT
Subject: CN=ff206c3804072d72d20d3777647dd708d60b0eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:af:6c:04:28:ee:1c:0c:e4:8f:7f:0c:33:
41:59:02:8b:96:e3:cc:4f:68:f9:46:61:ad:94:0f:
67:1e:3c:35:51:9a:a5:ca:4b:d3:cf:03:24:61:85:
28:57:a7:e9:dc:67:0e:e6:94:8c:d8:16:4c:ea:4e:
8b:7a:ed:72:b7:07:72:87:1d:b4:c3:26:cb:b2:6d:
d5:ad:6a:67:eb:2e:8b:a2:cc:2b:41:ba:80:e8:82:
d9:f8:ea:7d:11:a5:da:3b:29:75:fb:05:22:58:dc:
5f:8f:8c:20:b4:4e:a0:71:f1:1f:3a:e5:bc:a4:00:
1e:7e:d3:d8:14:26:f8:94:2d:ab:25:a4:d9:44:3e:
a9:b1:02:c5:b5:c5:92:97:06:9e:f5:09:7f:87:db:
e8:44:ba:7f:92:cb:c9:91:06:18:6f:04:5f:9c:9f:
5e:ce:d5:0c:36:0a:a4:0c:65:fb:7a:1d:38:76:3d:
b8:6a:90:32:13:b7:a1:13:7b:ef:c1:d3:cb:f8:15:
64:fa:16:fb:a8:84:6b:a2:ad:db:8a:95:78:9b:f7:
57:3c:5f:ba:99:58:fd:8a:0b:85:4f:cf:14:ed:7a:
ba:e9:74:d7:09:b8:53:3a:65:0b:89:c8:66:a4:cd:
40:e9:d8:28:a5:ef:6c:c8:76:14:1b:ba:96:4d:95:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:6C:38:04:07:2D:72:D2:0D:37:77:64:7D:D7:08:D6:0B:0E:B9
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fa:68:7b:35:15:aa:c2:61:0c:a1:ef:f2:99:61:72:fe:6f:
b0:b6:6d:91:08:03:0a:03:06:00:ec:f9:23:0e:21:ff:11:68:
56:45:f6:46:e6:5e:11:18:f0:e4:8e:82:91:ed:48:08:d9:ee:
04:c3:45:fd:25:e3:6a:3b:79:0a:43:57:0c:f7:a9:a5:6d:75:
f2:a0:64:fc:33:36:9c:6e:0c:89:a6:68:3e:8e:1a:18:94:0c:
f2:8e:cd:12:67:b0:71:32:fa:c1:57:d0:97:23:0d:91:8c:12:
ca:c6:4f:cc:e2:96:cb:10:43:91:2a:0d:62:df:f4:0f:c4:cf:
de:5d:a0:cb:97:bf:81:b1:3d:ca:27:59:80:0e:60:43:78:6c:
42:48:fb:bc:31:a3:cc:4c:8d:2e:0f:be:3a:da:72:ab:74:b0:
1c:b0:a5:c8:b2:47:9f:20:91:2b:31:62:4f:33:f0:1d:51:7a:
83:61:ab:e0:6e:ea:d6:37:4f:c4:f8:31:09:94:5a:11:60:06:
5f:25:8a:00:75:36:b9:03:bc:5e:1b:2b:1b:07:cc:f3:73:49:
51:37:7e:ef:a2:5b:2e:83:e8:be:e1:b4:34:f4:27:ff:21:45:
5a:aa:82:1d:9c:22:5e:91:80:d3:e8:bb:46:63:02:e2:ca:50:
fa:72:1e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:41 2026 by rpki-client