Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: Me1QggU/btGDM5HjJiHdooRME6QzMME8d7hxJTGstgU=
Subject key identifier: CB:C9:E8:A8:58:8C:90:7E:9A:CB:FF:9A:64:97:A0:EE:EE:D8:1B:5C
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 019D38665CDE19083E528953F70F15411529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0FEF
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: 63VwjMiHjZqFjxRolF0+1ifsXd1NTaDrDXlLvShC3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5c:de:19:08:3e:52:89:53:f7:0f:15:41:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=cbc9e8a8588c907e9acbff9a6497a0eeeed81b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:9b:da:e4:6b:32:ac:ce:e6:a6:45:be:a2:
01:7f:7c:8d:79:3a:c3:8f:6a:bf:51:98:af:9a:0f:
a5:17:8e:09:e6:ce:ce:48:40:4b:d7:00:b3:02:b1:
a6:be:ce:90:e2:12:cb:8c:c5:93:0d:e1:fe:2c:f2:
76:e5:9b:50:e8:55:a7:5a:18:d4:8f:25:d5:27:a8:
fd:15:15:9a:4d:25:8d:81:00:c9:bd:66:38:b6:12:
94:cd:bf:75:13:5e:61:8d:36:fb:72:92:52:8a:38:
05:73:ff:d1:f9:84:a3:9d:45:cd:95:c9:08:1a:46:
28:45:e2:bb:43:8f:92:55:6e:cb:05:40:12:38:16:
28:21:e6:78:dd:79:6f:2e:ce:d1:c4:98:38:77:79:
4b:24:0f:da:bd:2b:d9:29:d6:1b:54:ca:3f:4b:de:
96:7a:96:1b:b6:16:88:5c:c4:26:5e:a3:34:ca:22:
09:90:6a:08:31:db:0c:21:cc:4f:c2:25:d6:2a:75:
87:2b:87:6d:bb:a5:d2:35:e8:54:1e:e5:a5:71:ac:
ed:72:ed:97:95:23:d4:e6:33:af:17:6d:c8:3a:60:
45:33:ba:e6:38:99:17:a5:be:a6:4c:ea:a1:c5:1e:
0b:4e:2e:81:99:c0:0c:2d:19:8b:cb:0a:e5:3e:1e:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C9:E8:A8:58:8C:90:7E:9A:CB:FF:9A:64:97:A0:EE:EE:D8:1B:5C
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ae:a0:3a:0b:15:94:c1:65:df:8d:95:2c:ad:5a:76:c3:40:
98:58:ee:01:98:0f:8a:5e:2e:cd:25:12:2a:d5:2d:f7:24:a7:
2f:48:f9:2d:9d:f0:e7:f6:dd:16:e8:3a:8d:e5:f1:b2:4f:cf:
db:7d:3a:cb:2c:2f:d6:3e:1e:91:84:0f:31:6e:7e:e5:67:3f:
c0:83:88:e0:7b:2a:00:7c:a5:ef:aa:ce:d7:dc:bd:74:d2:ca:
5f:9a:bb:f5:fb:46:af:b0:0f:30:71:17:cb:a5:a1:48:08:7d:
60:1c:9c:fa:65:5c:8a:d5:d6:32:72:10:d5:ca:91:d9:f1:be:
57:5e:eb:91:7b:57:bc:e9:8a:09:3c:c1:99:da:34:11:e2:1f:
9b:a6:8a:8e:5b:cd:9f:f9:06:2c:80:2f:68:dc:3c:b8:5d:57:
30:6d:87:82:6c:ad:d0:29:04:af:ec:0c:60:74:0d:7e:c6:43:
83:01:cf:5f:c0:06:92:cb:59:30:27:41:71:9a:b0:da:1b:ca:
5e:c0:a7:95:9d:b4:cc:e6:d3:98:17:3c:20:04:3c:a0:25:14:
be:89:9f:81:13:e3:e8:f9:65:94:3c:46:38:33:e6:06:2b:4c:
3d:9e:11:1d:f7:15:cc:fa:32:14:ac:4b:82:b1:30:3d:09:19:
54:f7:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:53 2026 by rpki-client