Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
File: wi7Wzo-2x52t12WDpeotOruaQy8.mft (raw, json)
Hash identifier: rLSN2+FIUZ1E1hyyHhWct42UbW4qhLCY15eyJelRHMU=
Subject key identifier: F7:3C:E4:ED:57:8D:36:43:FB:00:9A:47:E5:FB:81:AF:20:89:FC:92
Authority key identifier: C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
Certificate issuer: /CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Certificate serial: 019D39AECAC0D26158D6CE5FAE8B106E7D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
Manifest number: 029F
Signing time: Sun 29 Mar 2026 13:00:49 +0000
Manifest this update: Sun 29 Mar 2026 13:00:49 +0000
Manifest next update: Mon 30 Mar 2026 13:00:49 +0000
Files and hashes: 1: wi7Wzo-2x52t12WDpeotOruaQy8.crl (hash: 8QIPGZA2V/EpBX8xvyV+tdUGVULqzRhqNg+0gO0pieo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ca:c0:d2:61:58:d6:ce:5f:ae:8b:10:6e:7d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Validity
Not Before: Mar 29 13:00:49 2026 GMT
Not After : Mar 30 13:00:49 2026 GMT
Subject: CN=f73ce4ed578d3643fb009a47e5fb81af2089fc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:97:b9:f6:97:fb:b4:8c:c5:11:65:42:d8:
61:30:74:5c:ea:2c:82:8a:0b:ba:62:8e:32:85:1e:
6b:df:ba:de:89:e9:5a:6c:32:c7:9e:ac:24:60:32:
24:e1:4b:90:10:ed:55:d0:1b:de:db:89:d2:c2:6e:
12:89:48:46:f2:6c:d4:4f:d0:45:28:5e:74:92:e2:
85:c4:43:62:9a:78:c3:e5:fc:94:f2:44:78:39:a6:
0c:dd:e4:2e:c9:4e:bf:a9:68:4c:80:5b:ad:6d:bb:
a6:54:30:66:3a:93:10:36:ef:1a:1a:30:61:ba:df:
41:fc:2e:50:ef:53:65:74:72:f9:9a:05:51:93:a0:
f8:21:e0:54:20:c8:f6:c2:9c:18:c9:cf:31:41:bb:
6c:fd:01:5b:26:f3:c5:73:d2:b5:6d:ca:70:cc:a8:
09:dd:39:5c:97:45:b7:78:59:bc:a5:69:2b:91:df:
3e:7b:c6:25:09:03:ba:22:3c:08:ff:85:4f:9f:54:
20:a1:2c:33:8f:be:2d:04:77:7b:d3:2e:77:e5:7c:
c4:da:64:08:cb:fe:b6:4c:09:3f:29:18:f3:cc:bd:
49:d0:d6:7d:e9:ec:c5:26:a5:64:62:c7:40:c0:96:
50:06:81:85:b8:ca:ad:c9:eb:fd:80:8e:71:63:fd:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3C:E4:ED:57:8D:36:43:FB:00:9A:47:E5:FB:81:AF:20:89:FC:92
X509v3 Authority Key Identifier:
keyid:C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:91:f4:a3:04:c4:0e:ac:47:71:44:db:12:f9:fb:9b:05:58:
03:29:85:21:3a:aa:b2:9a:2d:5e:ef:fe:da:b6:1d:e5:1e:31:
8c:38:24:95:16:42:a0:f7:04:1b:30:1a:a7:ea:bf:19:47:6b:
b2:7b:cc:e2:f6:37:f3:65:af:cb:08:02:d4:83:ba:e0:8a:24:
60:86:11:3f:da:88:aa:78:2c:ec:20:80:0a:6b:28:c6:81:24:
80:e3:8d:a2:c4:20:a8:e3:0e:f1:87:da:cd:7a:27:f9:56:4c:
45:00:f2:fe:fd:0f:e0:e1:4e:3e:ed:71:57:cc:9c:95:b8:d0:
7a:50:4b:12:4a:62:18:3f:ef:e5:c0:f0:1b:58:d3:b9:37:9d:
89:88:35:6d:0e:98:aa:39:c2:bf:92:45:0f:93:b3:32:a9:83:
22:b2:45:9b:7d:b3:cf:57:96:c5:6b:7e:6d:24:42:96:3b:32:
ca:f4:34:5b:b4:bf:9b:5f:b0:37:92:c5:ba:8a:20:a9:d3:ed:
57:9b:e9:dd:25:be:4d:92:5a:2a:0a:e0:3d:2f:ec:72:05:de:
b2:de:cc:27:41:45:c3:73:96:a8:05:a9:6b:1e:b1:59:65:92:
54:35:00:3a:c9:3a:d2:e8:c8:6f:e2:f4:e3:69:35:2d:e2:8a:
dc:f2:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:04 2026 by rpki-client