Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier: Rjis5T3AdYXXtP6bkHwI6itSxZsiAB24Njcmj+Dk06U=
Subject key identifier: 9F:E0:59:8E:C6:3B:61:E3:CE:1D:BB:AC:8D:8D:AB:52:3E:B1:D9:72
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial: 019D38659B782967DB263BF15ECD9029A28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number: 1314
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: SH1I2+x+PHJ80RAjIsDeLpdh0gygdHXH71u75150GG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9b:78:29:67:db:26:3b:f1:5e:cd:90:29:a2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=9fe0598ec63b61e3ce1dbbac8d8dab523eb1d972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:76:83:d5:db:a5:ea:71:4d:94:b8:c1:56:
34:bc:98:f5:09:7b:3b:b6:08:90:42:a1:60:59:db:
e1:33:93:db:a1:4b:4a:f4:c8:7f:4a:5b:7d:c3:e8:
45:8d:d3:8e:d9:6d:1e:0d:11:fb:a5:35:25:ff:69:
c5:d9:21:fd:89:d0:d6:e1:29:a3:9a:82:c0:93:eb:
be:57:ff:7a:51:0a:75:2e:41:3d:68:12:65:9a:3a:
37:9b:20:cd:84:a6:8a:9a:ca:66:5e:d8:aa:68:b8:
b4:3f:a5:30:05:25:06:6a:a6:fa:16:35:31:ac:b3:
9f:7e:2d:61:05:cb:fa:58:96:73:6e:95:07:ea:8c:
53:97:75:71:5f:fb:68:3d:3e:0e:8e:3b:4a:70:bc:
b9:1b:ac:95:5b:37:27:2d:e4:9d:26:03:65:57:69:
68:83:7c:fd:60:9a:21:40:db:8a:b0:49:d5:98:39:
bf:e3:50:d7:42:80:03:0f:5f:00:79:e0:5e:80:d8:
e5:b2:b3:5d:52:53:c5:1b:ac:92:75:f5:9a:68:f3:
c3:33:7c:ff:ff:cd:de:03:33:56:07:70:82:a6:db:
e4:02:84:fb:4f:f0:8c:94:38:75:9a:48:4b:d4:0b:
de:f6:99:91:20:ad:11:c2:31:ac:05:2d:65:cb:e3:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:59:8E:C6:3B:61:E3:CE:1D:BB:AC:8D:8D:AB:52:3E:B1:D9:72
X509v3 Authority Key Identifier:
keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ad:6d:e6:24:18:26:62:2f:e7:c5:1b:d7:2f:33:3a:a7:90:
b7:30:6a:85:e9:b0:ef:6f:6d:13:dd:66:2e:b8:7e:b5:53:48:
9b:d3:8c:28:fb:f2:c7:be:9d:32:e3:ee:62:06:cb:fd:ad:a3:
40:03:07:d7:e9:d9:1e:11:d4:80:b6:27:24:2f:16:94:92:81:
7f:28:76:6f:76:d1:a7:65:9c:d0:88:5c:4d:74:cd:45:04:0d:
be:52:bf:70:11:28:ca:de:b0:32:2a:e7:cb:3c:67:4e:fc:3c:
e6:10:cf:10:2d:92:70:c5:92:12:1e:30:4b:f4:e8:db:71:40:
34:f9:fc:71:e0:94:4c:48:cd:54:78:a5:d3:0c:70:aa:6f:a6:
c3:44:72:5c:7d:45:a5:5d:4e:48:cc:e4:a1:b3:b3:da:8a:a4:
72:ea:f2:a4:9a:e1:0c:91:cf:47:40:f0:59:cc:7f:a2:42:dc:
db:8a:0c:12:8a:18:b6:73:e5:39:d6:3d:4f:8b:a8:f4:53:88:
c9:44:3f:b3:a7:0c:79:73:96:6b:fb:06:33:c9:ff:49:24:fd:
99:37:27:34:fb:46:de:21:36:aa:75:5e:b4:36:22:1c:d1:f5:
cb:8f:56:14:15:2b:10:e9:6a:06:69:55:a4:10:63:06:03:f7:
f5:b0:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:15 2026 by rpki-client