Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier: 7O7HLXvWLrz5Gr3Sh3mcpwp1FUuBR1ZmpusAsHxUllY=
Subject key identifier: 54:5C:47:16:0B:0E:85:5D:E1:B8:60:2D:10:93:A1:00:5B:A9:31:8C
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer: /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial: 019F1830B00B001CE8DA14A3E97520C30367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number: 1982
Signing time: Tue 30 Jun 2026 11:01:11 +0000
Manifest this update: Tue 30 Jun 2026 11:01:11 +0000
Manifest next update: Wed 01 Jul 2026 11:01:11 +0000
Files and hashes: 1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: mNWZBiQuvay8D9WB31X8EK69XRalH6D4IZF3TM3qdWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:b0:0b:00:1c:e8:da:14:a3:e9:75:20:c3:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Validity
Not Before: Jun 30 11:01:11 2026 GMT
Not After : Jul 1 11:01:11 2026 GMT
Subject: CN=545c47160b0e855de1b8602d1093a1005ba9318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:8a:74:60:f0:aa:33:ec:2c:ef:3c:77:63:
79:fd:14:77:53:3f:67:10:7e:9c:f6:a2:85:c0:ec:
6b:9c:2d:d6:e6:e1:33:60:c8:f8:a8:cf:fa:15:d7:
56:31:fd:56:ce:37:5e:f4:aa:a7:21:b2:5c:1c:b0:
59:44:b5:a2:bf:50:54:3a:3f:06:eb:40:aa:01:72:
e0:c3:c7:64:e4:ab:ec:cb:fa:59:4a:36:14:c0:ec:
d6:f5:96:96:fd:37:c3:97:84:62:0d:40:21:34:1d:
f1:6b:4b:df:ed:52:c2:f2:2e:c2:2f:72:57:ff:a7:
65:7b:20:e8:e8:a6:8f:20:18:3d:bc:52:ab:bf:15:
5e:b2:d4:40:fa:a8:be:93:4b:b9:75:6e:1d:6c:82:
f6:74:f6:9c:9a:38:f6:8b:69:d3:2e:bc:5a:4f:52:
a9:d1:a3:d9:d3:95:45:4c:7f:00:fe:16:eb:6b:50:
e0:31:68:df:1b:e9:3d:ea:6a:90:ad:db:e7:1b:da:
c2:68:4e:82:e4:74:b3:91:9e:22:d8:94:1d:35:1e:
ee:38:ec:3f:15:ff:7e:7d:75:84:f8:5c:0d:cd:d1:
bb:01:f8:7d:bc:da:66:a8:ac:7e:51:ad:4d:6c:57:
bf:65:24:6b:ad:13:e8:ac:9f:e4:e5:e1:61:9b:81:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:47:16:0B:0E:85:5D:E1:B8:60:2D:10:93:A1:00:5B:A9:31:8C
X509v3 Authority Key Identifier:
keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7f:ec:de:8a:c1:95:06:d4:7a:d0:9a:50:b1:20:91:a1:64:
2a:f0:38:02:cb:91:75:04:3f:9d:4a:b0:0c:f6:37:f9:f2:f8:
fc:26:67:46:bf:b7:9a:af:65:5e:38:ae:12:6f:f6:03:97:08:
7c:41:13:01:44:aa:2c:dd:6e:9c:73:6e:01:9a:07:19:79:b9:
f6:0a:b8:50:5f:c7:89:52:f8:b9:ea:d0:7e:78:0d:cc:18:ee:
8c:b4:92:a0:34:81:57:f2:08:c7:32:47:f7:8c:76:4a:ad:64:
52:3f:6b:a5:15:ec:1c:16:a2:81:7b:dd:13:f7:0e:cd:97:25:
ff:47:16:5b:d5:eb:e9:e3:ce:d4:c1:eb:5f:44:70:8a:47:18:
aa:27:11:00:42:6e:24:a1:51:e3:f2:84:31:15:c5:2b:2f:4e:
4d:21:fc:50:24:d6:27:b2:f5:e1:57:a2:1e:d1:59:02:f8:d6:
fd:07:75:e8:00:fd:30:18:31:df:ea:fc:ca:f0:8f:7d:45:15:
10:c1:0b:b9:4a:8d:1f:1d:2d:01:81:40:77:c6:e3:af:1a:93:
fa:2f:78:04:f7:cc:b1:bf:8d:20:ad:fc:a4:86:0b:7a:f8:d3:
f8:cb:63:6d:8d:d8:21:b3:5d:97:36:ec:8b:e8:03:9d:dd:21:
36:36:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:14 2026 by rpki-client