Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier: K4BJHgW+M1F/9lBec60xl8acRTNEjkmOaIADp8I6VVI=
Subject key identifier: 20:52:57:C1:31:AC:40:71:C2:51:E4:BE:0E:C4:13:07:58:47:97:DE
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer: /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial: 019D3866203F2E17DDFE32140D49DEAB453F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number: 11C0
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: 7UC+NHWhKEvLc0hb9j5mmISbZ8OT/s9sns/kOGRYwEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:20:3f:2e:17:dd:fe:32:14:0d:49:de:ab:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=205257c131ac4071c251e4be0ec41307584797de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:6a:b8:93:a6:bb:a8:ed:58:84:a0:92:39:
44:9f:bc:dc:6d:18:01:a7:a9:37:2a:63:59:81:2f:
1c:be:77:eb:df:d0:1c:d3:42:d2:07:9f:1a:44:e1:
41:63:0f:e6:0f:ed:db:2d:7a:82:7d:6c:f3:61:12:
cb:1f:6c:f1:b8:99:53:1f:f3:f6:a8:f1:de:6e:66:
8e:b6:01:f6:23:66:2e:66:3c:36:3b:b0:c4:98:35:
08:34:22:64:4e:e3:ff:bb:a9:d7:e1:07:0d:27:ba:
68:46:98:65:47:4c:50:7d:90:e2:71:46:47:e6:af:
4c:20:99:a0:3a:e5:89:6e:69:2f:d0:5f:bf:a4:d1:
b4:77:79:03:67:c8:80:16:5f:bd:07:65:c5:2b:7d:
d3:99:f7:a5:47:89:a9:b4:f0:36:ed:79:35:64:26:
b5:81:8d:31:c5:fe:d4:ed:1e:39:46:cd:f0:38:d0:
d7:2f:cb:b1:a0:ce:97:5d:a2:fd:12:ae:f4:3e:08:
6e:cf:4c:c8:34:f5:97:87:68:11:2c:b1:db:6b:5e:
8b:0f:22:21:1e:a3:46:1e:65:73:e8:18:46:db:dc:
7e:69:b2:01:a0:4c:7a:1e:0e:74:5f:78:c1:f2:f0:
0f:72:b4:72:6a:d2:c7:20:ff:4d:04:0a:08:b1:22:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:52:57:C1:31:AC:40:71:C2:51:E4:BE:0E:C4:13:07:58:47:97:DE
X509v3 Authority Key Identifier:
keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cf:95:7e:60:2e:d5:70:02:eb:1c:7d:42:59:21:77:6b:b7:
a2:a7:b1:b9:45:76:de:fc:dd:4d:24:ef:9e:95:09:b4:f7:f8:
1f:c5:f5:7c:1c:3b:54:36:1e:af:1c:1d:ee:a9:de:7a:82:3c:
1a:60:74:81:18:08:37:5f:37:08:54:74:87:b9:e0:b3:e1:e5:
b0:49:5c:de:52:bd:c4:da:28:bb:6a:a2:d8:47:4d:02:65:93:
8d:e8:85:ff:12:9c:87:08:8c:af:71:b0:6b:91:6b:79:31:0d:
67:13:2f:ec:51:33:d5:88:96:f8:19:62:5d:50:ab:f7:d1:e2:
46:6d:52:97:67:08:06:27:01:83:b1:f5:d9:9e:02:63:35:2c:
38:a5:e6:a2:cd:6c:ac:43:09:53:44:22:56:d7:e2:ff:7a:ff:
bd:f7:e8:78:a5:d9:b2:fe:4f:93:42:d2:86:64:b0:07:fa:e1:
fd:04:ac:44:b6:94:e0:a8:f8:7f:84:7b:c5:93:77:b9:de:42:
26:96:e6:72:cc:dd:af:44:5b:dc:96:d3:09:a2:af:ad:4e:4c:
4c:f8:81:c8:28:a4:a7:26:cb:02:3c:65:b6:13:82:31:5c:77:
9a:37:74:40:2b:29:09:97:05:f9:a2:36:10:0a:65:70:3c:cb:
64:4d:5b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:55 2026 by rpki-client