Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: t+X13/j4J508YIMgrOjQS4T6oGORJpy9/zwztSr83So=
Subject key identifier: F5:67:19:B3:B2:3E:CB:44:71:4A:EE:32:80:A6:AA:A8:FD:8F:C5:1D
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 019D3865F57B866BEE40E629F5C46F3BB6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 08A9
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: i9RziqM9GLnfY4Z8rnlU0hptiN4E9Zsubr1zL1NvH9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f5:7b:86:6b:ee:40:e6:29:f5:c4:6f:3b:b6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=f56719b3b23ecb44714aee3280a6aaa8fd8fc51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:c7:f1:9e:a2:90:56:ac:98:39:45:5b:f0:
e0:38:fb:8c:ad:2c:29:03:86:41:d0:bc:e9:07:83:
20:29:ec:12:fb:b1:e4:6f:26:b2:5e:35:59:47:1b:
dd:d6:ef:5d:e1:35:2b:18:f9:1d:04:c8:fd:24:87:
5b:a3:2b:ff:9a:55:41:bd:fa:a4:12:a2:d7:33:f5:
a2:80:60:5b:22:cd:2f:b4:a2:4d:ac:b1:79:dd:1a:
86:07:65:32:30:5d:10:a2:fb:f2:2c:05:6d:61:3d:
fc:3b:3c:ff:46:d6:07:77:ae:ce:da:da:4e:32:60:
94:79:e1:9e:92:d3:74:fc:7d:73:ea:59:95:e1:ac:
cd:99:00:68:c9:a4:2d:c4:ec:a7:b0:e1:09:6a:0f:
62:98:14:03:7d:9a:d9:b7:3c:a5:a8:89:2e:df:29:
6a:6c:ef:ef:8a:24:33:0f:43:9e:a9:98:2d:43:20:
d6:4d:1e:b1:e5:da:9b:d1:55:c7:52:48:27:5e:b7:
fb:e8:d4:70:cb:d2:44:46:f0:60:f8:de:45:81:fc:
72:8e:72:d2:dd:1b:8e:be:40:cc:f5:e2:b3:93:c1:
88:b7:64:e4:01:e5:0b:cf:70:11:9d:b0:ca:41:85:
ef:6e:56:6b:03:ab:b4:9b:10:f6:55:7a:ff:81:dd:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:19:B3:B2:3E:CB:44:71:4A:EE:32:80:A6:AA:A8:FD:8F:C5:1D
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:60:44:88:35:02:ba:1b:c5:bb:dc:d6:cf:22:a8:f7:dd:af:
40:17:1f:c2:af:88:2f:45:a4:c4:ab:a8:6e:98:79:56:8c:21:
88:b1:4e:00:d4:6a:93:41:bd:48:06:ca:10:42:6f:9a:f0:1c:
6d:ff:92:d6:a2:e3:0e:cf:df:7c:c4:73:33:a8:3a:2f:5b:3c:
89:d4:d7:97:06:c0:49:ed:9b:75:8b:47:f7:35:9a:78:c8:0c:
69:95:1b:56:ba:f1:8e:10:6b:54:9c:fe:8b:13:a8:0b:64:58:
b5:f1:35:9e:1f:aa:b8:05:aa:1d:4d:5e:69:af:07:18:a1:6f:
b7:a4:ea:7f:46:d2:56:c7:98:e8:8d:a3:11:08:0f:fe:96:81:
c1:ae:a1:6f:92:db:c8:14:b8:aa:2f:d8:dd:7a:4a:57:fc:35:
de:6b:f3:fd:fc:4e:fe:e9:d1:91:c6:69:b3:5e:ca:a5:a1:ac:
9f:c7:11:36:de:c4:0f:db:b9:39:64:1b:7c:0c:e4:ac:af:e3:
c3:47:c0:ec:ba:97:fd:12:d2:e8:db:87:74:3f:31:93:69:64:
83:f4:d4:00:2f:2c:31:c0:49:bb:34:fb:bd:5a:bd:5d:76:b2:
1a:27:8d:2a:12:06:60:39:a8:17:4b:d6:3c:15:60:f6:78:d4:
8a:73:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:33 2026 by rpki-client