Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier: nGIPaDLYu2dhBYs8uX9EJIlbxks/nC5pkT3Q0SyWGmM=
Subject key identifier: 33:A4:E2:93:82:E4:74:5B:91:6A:02:AD:C9:80:C5:2A:87:80:41:81
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial: 01A08B67E19EACF347D888B840E19215C130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number: 1068
Signing time: Thu 10 Sep 2026 13:00:36 +0000
Manifest this update: Thu 10 Sep 2026 13:00:36 +0000
Manifest next update: Fri 11 Sep 2026 13:00:36 +0000
Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: ZEOZ3gbMEgCNMaqrfQGnjd676brkm7/kmWJY5oxYqpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:e1:9e:ac:f3:47:d8:88:b8:40:e1:92:15:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Validity
Not Before: Sep 10 13:00:36 2026 GMT
Not After : Sep 11 13:00:36 2026 GMT
Subject: CN=33a4e29382e4745b916a02adc980c52a87804181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5c:64:e2:50:7b:c8:c3:5f:93:6e:26:7b:56:
a6:c9:75:78:7b:8c:d5:25:0e:fe:6e:44:17:0b:56:
ed:e4:1f:80:e0:6e:6d:01:2b:52:e9:94:7e:5c:9c:
d4:c2:6a:44:48:cf:3b:39:8a:77:aa:9b:d9:2e:56:
65:ea:e3:e3:81:7e:71:a0:40:ff:9d:31:74:26:8d:
6f:a2:14:57:74:d9:53:47:ba:0f:3d:50:1b:30:55:
44:cb:8c:c5:c0:4c:b7:a6:f0:35:92:83:1b:66:f0:
6a:0a:fb:76:e1:7f:ae:50:e2:98:b4:58:42:0e:7e:
90:ea:0e:ba:ca:d7:35:74:35:9b:8c:36:82:62:4c:
33:9e:be:46:57:05:e2:bc:68:ee:1d:cb:b8:59:27:
2a:64:4f:6e:d9:40:3f:c3:d1:5c:6a:d9:9c:bf:eb:
c4:50:2f:80:23:b2:82:d1:22:8c:e1:91:94:e2:03:
01:e2:a6:ee:74:58:d6:2c:cc:8b:16:3b:c3:9e:f9:
d1:8b:79:2e:26:c9:9c:cf:fc:07:4d:5f:d6:00:ad:
aa:e8:1c:bb:f2:67:05:d2:49:60:05:3d:4b:9d:1f:
08:89:62:9a:12:b0:58:37:05:ae:5b:84:da:d0:c4:
bc:a9:1e:9e:65:a3:6c:36:31:b2:04:0e:2c:fe:bd:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A4:E2:93:82:E4:74:5B:91:6A:02:AD:C9:80:C5:2A:87:80:41:81
X509v3 Authority Key Identifier:
keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:ff:e9:a1:3e:e9:ec:1b:df:ba:5a:5d:15:25:26:f1:9c:
0b:4d:f7:fd:96:79:89:23:18:8e:80:6c:77:33:b1:fe:ac:d5:
20:e2:67:dc:e1:98:7c:7a:e7:5f:5e:3d:30:3d:60:f1:4c:28:
2b:26:32:32:0b:ab:e6:da:24:69:c3:70:17:0d:27:f8:f3:92:
53:64:ea:5f:2b:d3:c0:89:37:1d:82:fb:47:fb:28:3b:d0:c2:
39:28:1d:fd:40:b0:d1:51:71:01:7b:0a:b3:89:23:e4:af:c9:
36:3f:60:3e:b7:9b:b3:47:35:74:78:90:b0:ee:54:9d:3b:de:
6e:4c:9d:a9:65:a5:4c:aa:5b:38:06:a6:72:87:50:d4:96:6a:
71:e4:69:88:2f:e4:67:01:ce:0b:8f:e5:4c:c5:90:87:94:4e:
75:37:d1:29:56:22:c2:3b:d0:5a:aa:30:d5:d8:3f:a4:ed:8d:
39:b5:52:f0:8b:bb:dd:97:ca:02:85:27:ab:d0:7a:b2:01:12:
d0:f6:84:a6:06:ce:ef:7d:95:f3:bd:1f:c1:ad:e5:c5:b9:38:
01:77:7f:ed:0a:a0:e3:56:57:d1:d6:a5:0a:9a:1e:5f:0a:1f:
62:46:0c:c1:79:41:71:9b:96:ca:0f:ce:aa:2b:14:bc:eb:3b:
9e:e2:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:24:59 2026 by rpki-client