Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: zw5efQw0rI5/NUeY3r0uCqfEBoc0/rqRoHdNyTtrZAQ=
Subject key identifier: AE:8E:A6:D9:F6:77:D8:DE:F0:04:1F:63:C7:0D:83:13:86:1B:E9:CA
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 019D371B9670E96FD20580B2EA8871601ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 15C5
Signing time: Sun 29 Mar 2026 01:00:47 +0000
Manifest this update: Sun 29 Mar 2026 01:00:47 +0000
Manifest next update: Mon 30 Mar 2026 01:00:47 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: P+oesl7Wc5dqV2JAx43xuusm0iu2lsIntlug/mvJQjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:96:70:e9:6f:d2:05:80:b2:ea:88:71:60:1e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Mar 29 01:00:47 2026 GMT
Not After : Mar 30 01:00:47 2026 GMT
Subject: CN=ae8ea6d9f677d8def0041f63c70d8313861be9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:16:66:1e:9e:81:f9:1e:dc:5b:af:25:86:
d7:ef:2e:0d:1a:4c:2f:44:80:9f:d9:2f:45:8b:0a:
30:90:85:e0:e0:c6:de:c1:83:be:5d:c2:47:23:93:
ef:bd:b8:6b:16:6c:d4:88:d4:01:ae:43:b1:80:88:
16:f2:12:36:9f:ed:9d:eb:8c:0a:ef:d3:42:b5:64:
2e:af:56:18:06:f3:0d:a2:90:71:c4:e0:2e:3d:9e:
58:b0:09:96:a5:22:73:d9:81:7f:97:ca:3a:4d:be:
b0:43:2b:60:a8:0a:83:f9:44:97:ab:db:e2:db:64:
92:e7:6a:c4:3d:8c:e9:11:6b:af:44:63:a4:be:98:
a1:7b:b8:d2:0f:bc:3e:ba:fa:d2:e4:e0:22:36:e3:
84:e8:4c:ef:2e:83:d1:6a:58:41:ef:d9:e0:e8:39:
a0:3a:5b:79:4b:bc:45:90:97:93:b4:08:90:43:5d:
06:a3:99:37:8a:5f:86:86:0d:87:0f:af:fb:66:07:
72:d5:f5:bc:3f:5d:18:ef:9b:b6:9a:37:75:77:04:
59:64:e7:17:c0:c4:58:75:c4:28:a7:03:1a:6d:0d:
d4:f5:63:6e:f7:78:27:83:f8:64:bb:ee:73:c6:62:
94:89:0a:0b:b0:3f:ec:dd:77:36:0f:db:b6:63:90:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8E:A6:D9:F6:77:D8:DE:F0:04:1F:63:C7:0D:83:13:86:1B:E9:CA
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:11:95:97:9a:94:46:6b:6c:a9:de:c1:24:d3:f5:e9:ba:80:
02:6b:b7:88:ba:83:c1:e9:47:51:3f:04:28:26:4b:4a:74:66:
68:8c:53:30:96:a2:16:f4:5b:01:0f:c2:a4:bc:e0:c6:be:7b:
ca:85:ca:1d:66:51:05:32:91:71:4d:a7:ef:67:63:6b:8c:e3:
15:c0:7b:2a:df:cb:e3:c5:c2:17:09:04:b4:37:b6:5d:d7:b4:
83:91:b0:ee:36:ce:52:3f:07:c0:53:14:a9:0c:43:35:53:b2:
39:d7:7d:4c:64:4a:e8:d7:47:25:a6:22:09:24:02:16:91:3b:
85:59:2d:73:b6:88:cf:dd:57:47:0d:b8:ac:56:3f:30:57:37:
58:5d:f3:56:40:a2:1d:c1:89:9b:46:e9:c1:8c:d2:bd:14:c1:
f4:9b:04:45:3a:fb:ec:4c:20:88:c0:4d:26:2e:ae:11:8a:1f:
f8:92:e6:47:12:c2:e3:cc:4e:d7:82:77:c3:bb:af:d1:38:66:
4c:8f:a7:f4:50:6d:bb:9a:1c:e9:d0:12:cf:10:ec:18:84:5d:
91:69:fb:ff:2a:8c:3a:fc:39:6b:e2:46:12:c3:3b:16:fe:ce:
fe:10:4f:a9:3b:55:14:ea:31:42:04:1e:cd:16:90:8a:f4:76:
ed:c7:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client