Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier: e5pIcwv7q1cwj83xMNXlQ4tLKEpPdBxEog2xdAg6Tm4=
Subject key identifier: 2B:9C:01:F4:83:BF:CB:E0:D3:F7:B0:BF:AB:8F:0B:7C:F7:D0:17:B7
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial: 019CAD59D63DD258D08EC0704FB7643B7E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number: 099E
Signing time: Mon 02 Mar 2026 07:01:11 +0000
Manifest this update: Mon 02 Mar 2026 07:01:11 +0000
Manifest next update: Tue 03 Mar 2026 07:01:11 +0000
Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: Hza67VW5EEDw7M3E7sLiSkgjwiFOCaSJJDwCT1T4bNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d6:3d:d2:58:d0:8e:c0:70:4f:b7:64:3b:7e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
Validity
Not Before: Mar 2 07:01:11 2026 GMT
Not After : Mar 3 07:01:11 2026 GMT
Subject: CN=2b9c01f483bfcbe0d3f7b0bfab8f0b7cf7d017b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:ea:33:d4:ef:c4:1e:03:c0:8d:9c:84:ff:
55:8f:2f:e8:ab:66:41:f7:d1:8e:e6:cf:df:d9:93:
a5:aa:a1:64:64:66:0c:2f:bf:72:f3:95:3c:06:c9:
84:b3:9d:c8:32:eb:be:26:cd:f0:91:a7:73:bd:7d:
67:56:d8:30:17:fc:e2:ee:36:f9:5a:43:7e:1f:8c:
d6:5d:34:3d:6c:7b:56:7f:05:7c:ab:10:23:0b:d8:
34:24:ff:14:50:e4:b2:0f:dd:ba:6c:db:9e:35:b3:
78:b0:db:e3:5d:5a:11:64:82:4a:a5:ec:f4:fc:78:
21:2f:0e:d5:f4:10:44:82:d2:2b:0a:43:76:ee:dc:
4e:87:c4:4a:6b:11:20:cd:e4:96:85:a6:13:fb:b4:
e8:16:f5:e0:a8:21:4e:cb:5a:c4:85:ca:78:34:7b:
00:31:15:f9:3f:77:50:7d:03:70:bb:2b:aa:60:45:
59:e2:8b:f1:99:a0:11:72:97:38:6d:c8:b6:be:07:
30:86:8a:83:fb:94:21:ee:18:e1:cb:a5:88:dc:33:
15:93:4f:1c:4a:1a:40:6c:15:0e:32:27:03:bd:77:
f6:f6:44:26:84:32:64:69:a7:af:d0:13:82:51:1b:
b6:b8:d4:b4:4e:81:aa:53:a8:54:84:71:fd:ce:73:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:01:F4:83:BF:CB:E0:D3:F7:B0:BF:AB:8F:0B:7C:F7:D0:17:B7
X509v3 Authority Key Identifier:
keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b8:55:c6:43:ca:fb:59:09:e8:b7:e8:5e:00:8d:2e:6c:a1:
b5:64:e8:ef:32:d4:ef:1c:b5:ee:9f:68:e8:67:43:6f:4e:21:
c7:f8:7d:e4:08:bc:df:2c:a1:9a:a2:70:a5:bc:bc:59:11:dd:
7a:02:d2:4d:d5:2e:60:ea:11:d2:ce:60:52:03:06:94:57:8c:
94:11:31:2a:9b:0b:fc:d0:cd:34:1a:ba:c0:f0:7b:81:79:a2:
2f:f6:f3:93:f4:5d:d2:44:44:11:f6:a4:e4:e1:a7:f8:32:f0:
a9:f2:3b:18:85:5c:7c:17:2a:85:62:69:e5:2f:ee:b5:da:92:
a7:80:e8:63:e4:4a:df:f0:13:26:af:24:4b:8e:2b:f3:e9:83:
8c:d1:19:4b:82:f2:e4:61:4b:c7:09:81:63:aa:52:54:9b:29:
20:40:11:f1:42:f9:f7:4b:cf:5a:29:01:7b:b2:a3:83:b0:9d:
ae:31:d1:08:b8:e0:bd:06:a0:64:9c:05:84:fd:98:8e:37:ff:
18:7e:99:ed:9c:95:e0:a3:89:cd:26:fd:87:86:8b:6d:43:a6:
13:83:e5:8a:7f:3e:ea:d1:a6:f5:48:f9:5b:fd:6a:aa:55:d9:
6b:93:ad:65:e6:2d:60:11:1a:e7:06:84:45:25:76:25:53:40:
93:d9:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:12 2026 by rpki-client