Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft
File: wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft (raw, json)
Hash identifier: fSSTyp8MWglFHrfaF5a/eoUZVvOict+2dYx7S4iGv3Y=
Subject key identifier: 67:A8:02:02:1D:EC:17:03:E7:41:0E:41:76:90:47:27:06:E4:F3:00
Authority key identifier: C1:C6:56:41:F1:F1:F9:49:A6:5A:D0:08:EA:46:CF:6C:84:6A:35:74
Certificate issuer: /CN=c1c65641f1f1f949a65ad008ea46cf6c846a3574
Certificate serial: 019D389C558C4F8B4F13073A22EFDD1BE053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft
Manifest number: 7E
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: wcZWQfHx-UmmWtAI6kbPbIRqNXQ.crl (hash: 3Fvfv4FUGKuTSvt/jejrlHinSpmFW2Qcj/v5Xnd9H9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:55:8c:4f:8b:4f:13:07:3a:22:ef:dd:1b:e0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c65641f1f1f949a65ad008ea46cf6c846a3574
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=67a802021dec1703e7410e417690472706e4f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:20:72:7c:85:d8:0b:01:66:16:b2:96:90:
9d:3e:44:00:11:03:3a:45:91:e6:5d:98:ab:53:e7:
6d:08:d4:18:e9:ec:1e:17:ae:7b:5b:9c:73:23:f4:
8d:23:b0:b7:ca:f4:79:eb:68:ea:93:72:91:d5:45:
ee:06:0a:49:09:28:3e:09:be:30:cc:9f:60:f7:ba:
6f:91:61:68:17:53:5e:c4:94:16:b2:49:ae:4d:3a:
08:8d:68:3b:80:9e:06:bc:ec:c1:bd:54:14:80:85:
b0:78:07:77:c7:9f:a7:84:d7:c1:87:a2:14:f6:cf:
b7:56:33:0c:b7:0d:b8:de:80:1a:5a:b0:50:a8:9c:
9b:af:a3:8e:e7:e3:f7:48:b3:01:96:45:e0:d5:34:
42:7c:50:1d:db:69:8e:8d:4c:19:29:ac:c6:5a:32:
df:46:81:f2:43:41:19:f5:ad:57:17:b7:8a:56:a9:
e6:f7:4c:1e:db:53:d9:45:f8:22:0b:95:ae:34:81:
4a:ac:72:98:16:a6:c5:52:a6:0e:44:78:dd:b0:6f:
46:a6:0c:29:95:80:4e:d7:ac:a8:36:83:8c:b7:45:
78:39:fa:c0:b1:2f:73:38:bb:07:aa:aa:ab:9b:97:
3a:6d:34:e0:80:6f:80:a2:89:8f:63:7c:55:e2:48:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:02:02:1D:EC:17:03:E7:41:0E:41:76:90:47:27:06:E4:F3:00
X509v3 Authority Key Identifier:
keyid:C1:C6:56:41:F1:F1:F9:49:A6:5A:D0:08:EA:46:CF:6C:84:6A:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:f8:f2:b8:53:cc:7f:eb:84:8c:da:1b:27:ff:f4:8b:3d:
7e:0f:6d:b2:ac:39:15:84:ae:a9:96:24:65:50:5c:b8:a2:87:
db:fd:51:25:64:bf:37:ce:f5:ca:a4:95:0a:16:47:fd:a2:f8:
da:48:6e:10:fe:11:67:94:fe:bf:dc:fc:a7:b3:b9:a7:b8:04:
f9:a6:cf:b9:a2:51:47:23:7b:51:be:a1:19:03:ad:9c:5e:58:
85:34:18:9f:a5:5c:2c:0f:74:36:f5:55:84:50:9a:e0:e0:42:
11:fd:c3:79:3b:66:4b:0d:ee:54:b5:01:40:d0:bb:e7:53:29:
85:f9:ff:29:24:d8:d8:bf:f2:ec:4f:d6:5a:5f:b0:29:79:a3:
45:bd:27:7f:42:08:32:2d:5e:9c:b9:c7:95:51:23:24:62:da:
09:a6:7d:72:97:df:29:5d:15:43:cb:f3:c5:d3:f4:1e:9f:aa:
de:2a:07:b9:2b:74:a8:05:13:21:c9:5c:ca:15:d9:47:61:03:
11:e7:93:b6:0b:6d:89:96:bb:f9:0e:8d:a7:02:98:e1:bc:94:
45:66:b4:b1:ed:56:a3:3d:61:e5:18:61:03:d7:42:3c:b5:8f:
bc:0a:a1:97:77:35:48:ec:c7:70:d7:33:ab:67:75:91:a4:86:
b6:4d:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:34 2026 by rpki-client