Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier: CtnwyV5fuXtrA7X3ZmAKVpUQEM+0MU1Y79S+5fLJue8=
Subject key identifier: CF:B2:63:3F:AD:8A:99:21:74:51:15:5F:32:BE:6D:99:99:14:FC:D8
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial: 019D38667A1E37C6D37693A288FD8DD56569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number: 1338
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: ACC9TgKD6eQGX9VbmNU/ei2JVQjZNGdaLrDi1Rtu3/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7a:1e:37:c6:d3:76:93:a2:88:fd:8d:d5:65:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=cfb2633fad8a99217451155f32be6d999914fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:dc:d4:06:b6:07:86:ea:0c:e5:47:ec:41:
d3:47:d8:da:61:24:b5:24:fb:3c:24:8d:e9:68:d6:
aa:c2:1e:30:17:d9:a2:a0:00:c2:37:a2:c9:4a:b6:
77:df:6f:be:57:10:37:44:1f:e7:da:fc:d7:a1:b6:
bc:c4:88:b7:b0:c6:54:b7:3a:98:be:0a:e6:58:2a:
32:f6:a7:b9:a0:94:15:34:71:f8:33:a8:26:91:79:
ee:c8:3c:e7:17:c8:e3:7a:29:27:8c:17:d2:13:34:
89:3c:bb:a5:b8:5a:1f:7c:15:4b:ec:56:3c:60:3d:
83:5d:b9:8f:4f:49:03:c3:ea:8d:8a:49:fd:a2:bd:
53:3c:d2:8f:8d:6a:78:c3:a1:85:2f:42:80:f2:20:
8f:16:5d:c1:bc:60:12:57:76:8b:34:8e:e9:38:50:
fb:e1:0d:72:cd:c6:c3:70:0e:15:76:62:90:59:ef:
fa:c3:c0:43:2c:48:c7:5a:8f:1d:f0:fd:d7:71:ec:
36:65:4a:c7:a9:7d:5f:27:ca:cd:99:d5:11:ca:85:
41:5e:4e:40:1a:1e:75:25:f4:47:66:bd:bf:a6:b2:
0a:84:d6:bc:12:a9:5c:86:a7:1d:89:45:67:a3:87:
54:ea:5e:37:cc:99:65:e6:08:a5:8b:65:eb:b9:f9:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:63:3F:AD:8A:99:21:74:51:15:5F:32:BE:6D:99:99:14:FC:D8
X509v3 Authority Key Identifier:
keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:95:86:18:bc:ec:7b:31:ad:9b:8e:5c:96:82:35:6c:22:
7e:ee:f9:f4:49:ce:ca:95:bd:af:71:59:d2:7b:2d:be:ad:47:
b2:3e:37:8c:80:cf:4e:aa:2c:e7:ef:e8:87:c5:4e:43:bd:24:
64:de:3a:b8:dc:2a:c5:1a:22:3c:9c:ad:0b:39:3a:a8:26:a9:
c5:09:fd:11:0e:09:27:c2:34:57:30:2b:3e:02:61:a7:d0:d2:
30:b9:93:41:83:cd:8a:c2:64:c5:f6:1c:19:43:ea:fa:6e:53:
48:f9:1a:a0:cd:33:db:ff:1b:ed:f5:86:f9:9d:46:5d:18:50:
31:24:ab:72:4e:da:6e:4f:36:d4:5f:51:49:e0:78:f5:a4:be:
48:7b:ce:7a:b2:2f:28:7b:45:80:2b:79:f5:48:22:8b:ca:58:
93:1c:6c:96:64:a6:cf:f8:04:ab:fd:3c:f0:ee:60:e2:c5:9a:
f7:f0:a2:e5:f9:1a:10:6e:42:89:94:3f:e6:17:be:af:fd:6b:
d8:fa:7d:da:0f:bb:ea:c6:31:f7:53:e2:8a:34:c6:56:27:91:
67:a7:68:75:f4:d5:43:c6:46:f8:68:a6:4a:88:a1:3d:40:a8:
20:e8:2b:21:f6:87:7c:3a:72:c6:82:47:46:cf:df:e8:a4:55:
b6:5d:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:28 2026 by rpki-client