Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: D2Se7tq5t42jDBl3tPpHCw3RbJGhOaNFIKXZnRNjPq8=
Subject key identifier: 0E:82:37:C9:D9:EA:87:55:E6:02:CD:6B:DA:6D:C8:08:5B:FD:12:4E
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 019D394076EC151F15A0AB591C46D4594A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 1434
Signing time: Sun 29 Mar 2026 11:00:19 +0000
Manifest this update: Sun 29 Mar 2026 11:00:19 +0000
Manifest next update: Mon 30 Mar 2026 11:00:19 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: 5kVupeZbMpKFIG4B9/61pHl3rBwgnxZfPRbRyUT0gJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:76:ec:15:1f:15:a0:ab:59:1c:46:d4:59:4a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Mar 29 11:00:19 2026 GMT
Not After : Mar 30 11:00:19 2026 GMT
Subject: CN=0e8237c9d9ea8755e602cd6bda6dc8085bfd124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:47:89:b3:c6:bb:9e:70:a6:e1:b1:fa:f1:
86:d1:f1:67:6d:6c:67:e0:7f:31:56:72:55:36:f7:
aa:56:d2:0a:b7:0e:43:90:4b:24:65:47:34:26:60:
a1:9f:c1:28:9b:16:a3:91:8b:89:4e:b3:96:b0:71:
cf:6d:14:22:75:f5:be:1c:ea:a7:66:4a:1a:03:aa:
1e:6a:3d:f7:09:93:91:28:88:47:57:66:94:cd:f9:
ef:52:dd:ce:b8:ab:4f:a9:90:fd:97:34:f0:7c:d5:
2c:15:4e:8a:ff:5a:ca:8d:7b:98:29:c5:d4:a5:7d:
00:09:4b:4e:d2:f1:cf:e8:fd:b1:79:84:05:46:16:
b9:df:a1:f7:96:e5:6a:9f:02:a5:8f:8b:08:3c:d7:
ae:bf:f4:6c:78:62:39:60:34:86:6c:50:2d:cf:ee:
55:10:54:ce:f9:dc:b0:e6:18:3a:8b:c4:29:92:ad:
35:32:ef:6e:5e:c5:02:53:9c:73:c6:a9:2d:1a:c2:
d1:50:b7:b0:c3:5b:af:91:99:c9:e6:23:e7:3d:13:
0d:af:76:aa:9b:c2:83:42:6f:d2:6f:ac:ce:19:93:
72:3e:f7:93:82:54:af:c8:eb:ae:63:41:fc:f8:2c:
26:bf:62:b9:88:ff:55:9f:46:b6:bf:67:ee:f6:1a:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:82:37:C9:D9:EA:87:55:E6:02:CD:6B:DA:6D:C8:08:5B:FD:12:4E
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:1f:c0:ac:40:c6:58:c4:0f:57:ad:02:48:a8:ec:7b:73:
7c:ab:10:df:b7:a9:62:aa:3c:0f:79:94:be:22:80:82:35:69:
98:ce:8a:ae:d0:44:c7:bc:99:46:1b:71:e2:e3:e4:06:e1:ab:
df:02:8d:22:0f:c5:4b:04:7e:01:c9:cc:c2:98:e6:a8:11:92:
41:2b:92:27:c0:b2:63:fb:4d:fc:7e:69:9e:06:0d:05:39:22:
94:64:b7:4e:8f:7b:61:17:3f:73:71:5a:24:4b:47:e9:9d:79:
d7:bd:a9:6f:06:64:aa:03:ff:fb:ef:37:75:cc:f9:ea:b3:03:
94:5e:3b:42:63:55:eb:7c:82:43:84:10:1b:3c:4c:60:26:df:
9b:46:c1:d1:24:a7:f1:70:fa:86:3b:c6:f8:43:ec:a1:95:8b:
e0:1b:38:74:2f:e2:3c:f6:67:54:05:ed:2e:53:36:58:90:82:
27:4c:9f:33:31:61:a2:83:14:62:50:43:9c:9e:01:3c:22:63:
5f:cc:9f:a6:82:37:53:9a:58:6e:a4:93:e5:58:bf:0c:be:b3:
96:a1:e2:cc:63:fa:fe:7a:bf:d2:fb:5e:ea:2d:6b:a0:5d:5f:
21:97:37:e7:90:8b:13:57:c2:3d:48:0e:f8:14:66:3d:72:a1:
25:61:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:35 2026 by rpki-client