Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File: w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier: jWLB4RdppwwNu9H7rROOL4og2QLNIYrOrCchxVi95CM=
Subject key identifier: E3:22:58:98:6B:2F:B6:7A:19:DA:A2:5E:6F:22:80:27:9B:51:2F:BB
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer: /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial: 019D38D2F2D5CED72825364C19065A2A4652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number: 0EFA
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: Y1c1TJRYi5ib2q+NQHmN6f+hn+qo018Thrqcm+GrD28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f2:d5:ce:d7:28:25:36:4c:19:06:5a:2a:46:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=e32258986b2fb67a19daa25e6f2280279b512fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:02:a6:a1:31:5c:3f:57:96:d2:00:cb:6d:
e3:80:5e:e1:b9:38:b2:1d:8b:b1:91:81:f6:13:bc:
0c:b8:6e:22:93:a3:a5:1a:a2:57:7e:5c:6b:8c:f5:
67:a5:8e:d4:2d:be:f1:50:73:87:10:50:e9:3c:1d:
7e:79:99:50:eb:13:a6:dd:fc:6c:2a:34:43:ce:c6:
ad:9e:e8:33:9c:19:f3:63:f2:ae:81:44:1a:c1:8e:
e8:10:c6:8c:2b:80:9d:0a:e9:76:4f:1d:c1:ff:1a:
c2:7c:7d:94:db:0f:90:97:50:e4:b0:d5:51:17:88:
b7:ca:23:99:f9:06:19:89:be:2a:5b:a5:8c:55:1b:
dc:4b:d9:86:76:e1:57:1b:88:81:43:ae:43:9f:df:
48:52:25:a7:22:a1:90:00:d3:01:46:1f:6f:f1:06:
01:bc:3f:a2:fd:9d:f8:0c:d7:f8:6e:45:61:58:33:
d6:d1:40:d6:30:2b:f7:0a:aa:54:b1:10:05:02:70:
57:00:fd:75:6d:9a:eb:cc:12:63:0d:3a:30:48:81:
cc:de:2f:a7:68:e0:e0:62:2d:7e:36:f8:4f:62:24:
7e:dc:29:27:f5:96:7a:a9:b5:d4:98:c6:21:77:f1:
bd:e1:c2:ce:ba:d1:df:3f:7c:f9:5e:b4:12:30:ba:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:22:58:98:6B:2F:B6:7A:19:DA:A2:5E:6F:22:80:27:9B:51:2F:BB
X509v3 Authority Key Identifier:
keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7e:bc:ec:20:77:38:1b:b5:2c:8e:b6:6d:db:4d:1f:69:dd:
7f:44:09:a0:26:96:90:4d:25:5a:32:34:b9:82:a7:19:a8:c0:
64:86:03:b5:bf:29:71:ea:5e:b2:fd:53:2f:03:af:95:b1:2f:
5b:a5:d6:8a:aa:6b:c3:51:51:b1:b3:a1:f4:58:e1:d9:bf:95:
60:0a:ac:cb:af:d9:ce:fd:d3:88:a1:55:f3:fc:32:a7:c5:7d:
f2:0a:2e:87:c6:e9:4b:57:3d:e1:93:ba:8c:a2:39:e8:ce:d1:
02:3b:37:c1:5c:a1:12:40:af:4f:4c:a5:e8:4e:8e:93:83:8c:
d5:71:63:2a:da:b7:77:5b:15:8f:98:a2:b6:7e:2e:98:1a:0e:
b4:40:fe:17:66:e4:53:31:0d:c1:d0:9f:38:fb:6d:3b:cb:b2:
1b:37:5f:b3:47:4e:06:90:07:13:1d:c1:4d:8c:ad:ce:81:ce:
44:28:74:66:aa:ab:5e:88:c0:7b:64:e3:9a:48:28:4d:c3:6c:
29:b5:57:2d:57:e5:47:5a:0f:04:72:d7:03:25:ec:bd:1e:46:
9f:8f:af:ac:e9:89:7b:e3:c0:d6:44:b1:ee:47:80:a3:29:b2:
79:31:17:a0:69:3e:6f:b0:d1:32:46:af:c5:ee:a2:19:56:35:
e6:57:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:55 2026 by rpki-client