Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
File: rWbePns_OvDgZAZ70c52RUNYL18.mft (raw, json)
Hash identifier: FkioZPBirEPjsz4mya3smdVfR9hgNBNJYeu/WC0zyXE=
Subject key identifier: DC:E0:19:F3:8F:C9:6C:E6:3F:44:39:05:7A:7A:52:8E:2F:67:C0:22
Authority key identifier: AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
Certificate issuer: /CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Certificate serial: 019D3866059E91C72D877AD56BD6401A1E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
Manifest number: 1540
Signing time: Sun 29 Mar 2026 07:01:43 +0000
Manifest this update: Sun 29 Mar 2026 07:01:43 +0000
Manifest next update: Mon 30 Mar 2026 07:01:43 +0000
Files and hashes: 1: rWbePns_OvDgZAZ70c52RUNYL18.crl (hash: 6656qdQjvxRL9j5uAllTksXQG5vPR6ZVphvfPd2ZyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:05:9e:91:c7:2d:87:7a:d5:6b:d6:40:1a:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Validity
Not Before: Mar 29 07:01:43 2026 GMT
Not After : Mar 30 07:01:43 2026 GMT
Subject: CN=dce019f38fc96ce63f4439057a7a528e2f67c022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:c3:2f:32:a9:89:eb:00:eb:93:94:78:b1:
15:04:5b:a8:c8:e5:c5:9e:18:70:df:36:26:b6:97:
c0:61:87:f4:99:45:ec:bd:4a:8d:b2:cc:9d:46:84:
9b:4f:3a:b2:02:9a:8b:c7:35:7e:cd:e6:98:7e:32:
ea:51:92:8b:3b:29:92:e7:8e:6b:7e:f1:fc:41:0e:
b5:b6:c4:43:7c:91:8c:ce:aa:91:07:ea:6c:62:65:
de:15:b5:68:16:90:7f:2e:7d:24:56:e9:af:55:dc:
65:11:0f:45:2f:a8:02:7a:e0:7a:22:17:6a:da:14:
23:6e:4e:29:14:4b:14:91:7b:48:b0:81:df:a5:72:
42:2b:ba:ab:3e:0b:21:04:08:a3:47:e0:15:76:27:
09:d5:26:5d:27:8f:78:e7:b4:f9:15:00:41:5c:d6:
53:90:53:04:7d:96:8e:4a:78:b2:c6:85:71:d5:0b:
8e:5c:4b:c2:d2:fb:06:27:f2:66:d2:06:4d:2f:1d:
75:60:a9:2b:23:84:0a:d2:4a:6d:71:97:7f:92:43:
d8:86:75:c0:1d:16:dd:20:04:54:53:e1:3d:1c:ce:
a7:b5:73:82:0c:f5:8d:1c:76:96:27:20:27:73:e1:
d6:07:c9:5c:09:d9:c7:8b:91:31:74:fc:26:d2:bd:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E0:19:F3:8F:C9:6C:E6:3F:44:39:05:7A:7A:52:8E:2F:67:C0:22
X509v3 Authority Key Identifier:
keyid:AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4a:b1:4c:4e:4b:8c:61:38:49:91:0a:65:d4:bb:6f:62:b0:
1d:a8:3f:5b:75:60:e9:1f:36:96:88:3d:13:42:58:1d:e0:f7:
c1:84:6a:ab:fd:4d:37:09:81:c6:49:eb:1d:41:24:ef:c3:55:
13:0f:09:84:3c:86:20:3a:7b:1f:ba:76:00:8a:3c:b0:8b:eb:
b4:8c:35:41:bd:fd:df:07:fd:33:b0:a9:b4:d3:90:b0:93:7e:
e5:b6:fa:e7:fa:74:fa:e5:bc:e9:79:79:30:38:b5:34:cb:fd:
64:b5:0c:80:f7:01:f0:a2:34:c7:3e:b7:a3:aa:b4:96:0e:0f:
28:66:f5:7c:d0:53:87:3a:b7:0d:08:80:60:67:26:a1:f7:99:
cb:84:fe:9a:6c:16:65:42:97:46:46:54:f9:11:a4:01:c0:1d:
63:7f:7f:1a:9f:d9:ca:06:e6:bb:e0:43:d2:9a:c1:4a:17:a9:
03:02:76:14:2c:b8:01:53:3d:1b:25:1b:dc:23:09:f1:67:14:
ea:a8:29:19:0a:6d:f2:70:8d:77:a1:57:73:4a:c5:d2:37:23:
a7:bb:09:36:96:a7:41:00:c4:60:80:7e:f0:95:ef:ec:68:81:
a0:2d:0e:f5:53:62:dc:3c:92:1b:2d:1b:7c:5f:c6:fb:69:90:
35:43:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:12 2026 by rpki-client