Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier: jqdDCCi3LhJJ4it+6tNvbdjUZHzs0xRX7VkaIHEhyEs=
Subject key identifier: 99:10:D7:50:86:DC:8A:54:1E:BA:B4:2B:9D:23:C0:C1:ED:95:BE:D1
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial: 019D386556C207A931825AA5E35FF21CFD93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number: 167F
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: sx8Ht63DdQCCOWNhgbjwKo8laUKZgQBhSkZaj1lMlno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:56:c2:07:a9:31:82:5a:a5:e3:5f:f2:1c:fd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=9910d75086dc8a541ebab42b9d23c0c1ed95bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:1b:ad:d0:79:b3:2b:70:26:b2:d2:9a:ed:
8c:64:e4:58:fe:7b:f8:86:37:d6:c4:c0:7f:aa:32:
78:8d:f4:d1:88:2b:d4:f6:62:88:67:1a:c5:8b:65:
f0:5b:3c:06:0d:36:a5:06:43:56:b4:49:be:2f:f6:
49:22:a8:38:31:59:06:85:7a:aa:a3:ad:79:a0:c9:
94:7c:38:a4:63:49:47:86:59:92:f6:43:7c:46:28:
01:f1:04:20:f3:4e:4e:e0:0b:cf:34:57:6d:5a:ee:
a4:db:a2:9a:24:fc:57:65:0e:da:fe:16:e5:71:32:
a1:3b:28:07:b7:95:9c:88:b8:d5:61:c6:d0:aa:d2:
92:68:d4:43:9b:1b:2b:f0:6d:5e:d8:b4:a3:a9:1f:
50:d5:ce:1e:56:7e:56:d1:01:67:83:e8:90:29:f7:
e5:b3:49:5e:10:bc:5f:3b:9c:e4:d5:57:45:77:08:
c8:ec:5e:d5:ed:4c:56:9c:ec:9e:ce:41:d3:13:4a:
b7:19:e9:d2:78:29:fd:9d:6b:be:fd:f8:a8:00:30:
11:f0:13:84:48:be:3f:5e:eb:c3:e1:59:47:8f:11:
00:c2:04:18:af:dc:50:14:6e:c2:af:20:39:0a:4b:
5b:6c:e5:b7:56:86:e8:57:c2:44:03:27:55:2e:88:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:D7:50:86:DC:8A:54:1E:BA:B4:2B:9D:23:C0:C1:ED:95:BE:D1
X509v3 Authority Key Identifier:
keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:e4:b9:4b:1a:a2:65:d1:9f:ab:e1:54:e0:a0:93:06:19:
e7:82:62:95:bd:34:7a:31:bb:27:0e:9f:08:b3:1b:ba:58:c9:
92:e7:4a:bd:31:d7:b2:e6:82:35:00:e1:26:27:6f:61:f3:64:
59:0d:f8:6b:2b:de:07:79:07:8d:d9:04:17:7d:6a:b8:70:51:
6a:98:e5:1e:43:7b:22:18:25:9e:fe:a6:c0:cb:ce:03:b2:79:
53:02:f6:f3:ef:fb:3a:c5:e3:67:c4:9b:6c:e4:00:a4:01:1f:
5d:c2:f8:c2:22:81:9d:14:8e:d9:04:02:ed:3c:e0:87:c7:24:
06:ab:d1:61:80:4a:29:33:ba:ce:c5:8b:9c:ff:c7:d3:fc:aa:
de:2b:4d:6f:fd:25:28:d7:4b:72:86:5e:cd:95:d7:02:a5:8e:
27:a5:eb:96:63:43:d9:4e:0e:9d:48:38:3c:40:d4:6c:4c:f4:
44:fe:f4:22:c2:f1:55:6d:2a:d1:ba:36:0b:5f:b5:2c:69:9b:
3b:5e:b1:ab:52:41:ed:22:da:2c:91:12:d5:79:16:bb:8f:e1:
4e:47:88:4c:01:4a:4d:90:6f:8e:d7:2e:3a:ab:08:4b:49:5b:
b2:93:d9:c6:3e:f3:f1:f8:43:a7:de:0f:38:36:e9:fe:8b:68:
ce:b0:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:08 2026 by rpki-client