Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier: wHygIUZ3sCik3vTk8UNvuMOV8es2p0dqF9Z/OCxRLsU=
Subject key identifier: 0B:2A:0E:83:73:FF:3F:DA:F2:A0:CB:D7:01:DA:05:96:9C:67:64:98
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer: /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial: 019D3940DF320E12F434A12E4E4287639787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: dTz7GgXRcGpOxEL0DPg8D9phZiZWjh/rTcHKmcAvTBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:df:32:0e:12:f4:34:a1:2e:4e:42:87:63:97:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=0b2a0e8373ff3fdaf2a0cbd701da05969c676498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:06:c1:a5:97:5e:6b:43:12:80:c8:78:f9:
20:94:53:fa:00:e1:03:56:24:a9:14:5e:dd:a2:b0:
fe:15:31:3b:b5:a0:b7:10:41:68:6b:4c:70:a1:14:
42:a4:aa:8e:22:d1:18:36:7c:f8:57:29:de:91:42:
ab:7b:a4:c4:69:64:fd:e9:bb:66:48:5e:6c:04:a2:
30:9d:6c:58:99:89:b8:62:0e:b4:d8:d9:06:50:63:
93:64:ae:30:b6:23:5f:88:0e:2d:7a:84:02:50:01:
88:21:05:9a:c0:77:7f:78:03:79:82:79:a2:9f:9a:
df:e9:7f:04:cd:65:2c:f7:fc:47:b9:5a:e3:a8:27:
94:2c:4c:45:d3:b1:23:d4:fc:12:48:c7:42:ea:45:
23:a0:71:63:68:5d:5f:9f:f8:96:8b:d7:0e:2f:21:
5a:b6:15:d8:12:c0:3e:bb:80:8a:f5:65:3b:fc:a1:
0c:92:77:64:f7:bf:7e:c4:1a:c1:4d:3b:a8:62:d8:
94:d4:a9:83:5a:e6:95:a6:bc:c6:fc:97:b0:3b:14:
22:0b:28:7a:30:e1:81:83:0d:9f:0c:0d:3b:7f:46:
69:70:13:5c:05:1e:50:66:a0:e6:51:16:ac:09:cc:
48:45:86:33:f6:fd:2a:f8:66:84:98:de:a6:c7:89:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:0E:83:73:FF:3F:DA:F2:A0:CB:D7:01:DA:05:96:9C:67:64:98
X509v3 Authority Key Identifier:
keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4d:86:c6:0c:fb:0b:e5:73:0f:c9:a7:42:5b:cb:49:f7:c8:
6d:eb:76:fc:85:fc:40:05:7b:b2:a8:c2:c9:33:8c:ba:9f:e1:
0e:85:91:11:4d:d0:88:9c:0a:50:bd:24:01:36:dd:8e:a7:15:
43:ba:eb:a7:33:18:0e:43:fb:d8:04:1b:61:c1:b8:ee:38:fa:
94:c4:aa:b2:d2:1c:3e:fa:a5:38:21:66:63:29:1d:ab:f7:0a:
fd:22:17:b6:81:a6:2b:f0:7b:5a:5e:9c:7b:4b:6a:d1:87:b5:
ee:4c:46:b8:ba:9b:b6:98:07:dd:8e:4e:66:0f:eb:db:d5:ee:
74:dd:03:80:f0:1e:a1:c4:ea:c8:ff:80:a0:fa:b5:7c:15:ef:
0d:6e:7a:63:00:1b:26:df:bd:69:a0:90:d0:09:e4:06:f0:2c:
3d:54:7b:b1:cc:93:e3:d8:8d:6b:74:60:13:6b:f1:41:21:5b:
28:08:d0:2f:ed:dd:b1:25:83:5a:dd:6d:6e:47:ed:df:db:62:
1c:66:ae:80:a3:76:b8:a0:8d:60:cf:04:1c:7b:eb:42:51:43:
35:a1:61:f4:1d:4a:b6:7a:ee:ab:c9:bc:49:15:0a:56:cb:8c:
fa:ae:5b:c0:bb:79:89:88:2a:56:ef:75:e3:42:6e:74:80:7c:
37:02:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:45 2026 by rpki-client