Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
File: wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json)
Hash identifier: ang8eF6vfGFzf5BZTNlEFtPQAqDV7GLHZ/UoplPFTeY=
Subject key identifier: 9B:B3:65:8C:B4:C3:16:C2:EE:CE:C5:38:67:DC:13:3A:64:15:BE:85
Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
Certificate issuer: /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Certificate serial: 019D3940A55C5AED0DF28AF2AB82CB99EE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:00:31 +0000
Manifest this update: Sun 29 Mar 2026 11:00:31 +0000
Manifest next update: Mon 30 Mar 2026 11:00:31 +0000
Files and hashes: 1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: Bp3knPED84UmIw4fhaLoQOrrC/eBcfSu+SiCJ11C4OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a5:5c:5a:ed:0d:f2:8a:f2:ab:82:cb:99:ee:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Validity
Not Before: Mar 29 11:00:31 2026 GMT
Not After : Mar 30 11:00:31 2026 GMT
Subject: CN=9bb3658cb4c316c2eecec53867dc133a6415be85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:76:84:e3:e6:64:a6:e9:34:26:d2:43:2f:
24:f6:fc:fd:73:6e:ad:44:3c:5b:be:c2:7e:34:2a:
a2:96:1f:28:25:9a:5c:ed:27:8d:7a:68:80:ce:2b:
79:80:77:7d:01:23:53:9b:07:1e:73:83:f2:5f:be:
8d:de:1e:67:52:c3:89:37:68:9b:d7:71:dd:89:dc:
f5:d5:e5:3b:76:89:69:8c:ce:d6:b6:2c:91:19:ca:
f7:87:77:d4:9d:26:72:c8:12:6d:b3:6e:7c:57:58:
8e:46:0d:ab:ef:a9:ab:33:70:72:c7:8c:08:77:bc:
b4:9e:48:47:3f:44:34:e7:70:69:dd:56:94:22:c7:
d7:37:aa:5b:bc:fb:dc:93:56:1e:9a:c8:ed:11:34:
ef:c9:94:9b:18:a7:aa:6d:20:28:ac:d7:a4:93:55:
eb:35:c9:1e:de:fd:6b:51:6b:07:a0:5b:a4:56:1b:
70:75:bf:02:0b:73:a6:6c:e0:0c:4c:c6:2b:54:7e:
bb:08:ce:7b:2e:f4:7b:35:a6:e2:1c:b5:01:04:8b:
2b:86:fb:0b:da:a1:30:36:bb:85:fd:36:b7:00:24:
f8:2e:b1:56:11:46:f1:b4:4a:d0:cc:cf:d7:69:af:
15:3e:0b:90:65:95:cf:96:4f:d6:db:8a:7b:41:9f:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:65:8C:B4:C3:16:C2:EE:CE:C5:38:67:DC:13:3A:64:15:BE:85
X509v3 Authority Key Identifier:
keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3f:35:be:3d:7b:2e:0a:c0:2c:10:af:8a:78:13:17:71:de:
1c:14:fa:ae:6a:cc:84:6f:cd:54:dd:20:cd:b3:14:39:1b:c1:
6d:df:23:39:81:11:33:55:be:f0:1f:48:77:5e:41:69:42:a7:
31:cd:ed:98:d8:46:4d:9a:7d:8f:ba:9a:0d:ea:8b:ff:b1:ee:
49:32:fe:aa:fb:36:13:38:b0:a6:3c:f8:db:b8:ef:77:2d:3b:
02:02:f2:aa:81:de:d7:27:2e:2c:86:77:51:b4:e1:a6:cb:91:
17:55:04:fd:b6:fb:c7:fa:27:ed:8a:fa:37:9e:e3:3f:a5:ad:
e7:51:c6:53:4b:34:ca:61:3b:da:de:bb:55:b9:f7:6c:33:9d:
c5:a8:11:43:88:0a:7b:89:14:cd:10:f7:ff:e5:26:2f:74:f0:
5b:50:a1:5f:52:87:42:b0:bb:bc:76:95:52:b3:0e:d8:90:42:
b6:7b:e6:07:26:dd:08:32:df:15:e8:d4:d3:24:f8:e5:63:0a:
96:a5:18:56:3a:ea:08:a5:22:07:c5:65:29:7b:58:02:bd:3c:
36:02:d6:a2:80:25:9a:1f:23:19:1f:f4:ab:5f:62:76:4c:0a:
52:87:0c:9d:9f:60:40:23:2e:d0:22:a8:55:21:a6:4b:e7:7b:
56:fa:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:16 2026 by rpki-client