Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier: 6AxgBIIDN5RNbGSTLbmljNzOE0nMRw+aigxNGdOAlNc=
Subject key identifier: 60:1F:1F:38:0F:81:47:67:48:FE:15:A4:96:CA:FD:5E:68:34:5C:7D
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial: 019D3977ED0553CE0B718B7C67DA7D0FD9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number: 084E
Signing time: Sun 29 Mar 2026 12:00:53 +0000
Manifest this update: Sun 29 Mar 2026 12:00:53 +0000
Manifest next update: Mon 30 Mar 2026 12:00:53 +0000
Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: CHjtan8XpzGYAfrOGLwsS5Uh9xd8uz614dUfHu+xXro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ed:05:53:ce:0b:71:8b:7c:67:da:7d:0f:d9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Validity
Not Before: Mar 29 12:00:53 2026 GMT
Not After : Mar 30 12:00:53 2026 GMT
Subject: CN=601f1f380f81476748fe15a496cafd5e68345c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:77:eb:33:36:7b:fa:b9:db:30:cb:e4:db:
1f:62:f0:ea:e0:4c:54:7d:f5:d8:ff:3f:c3:2c:2f:
fe:ea:8c:4b:dd:fb:e0:03:cf:9d:71:92:3c:9b:f1:
99:bf:d8:43:05:d1:10:86:03:be:26:09:38:c2:6f:
3b:5d:5c:4f:18:3a:e7:a2:71:89:eb:8b:d1:4e:de:
c0:91:31:ff:57:4c:e1:c0:f3:f6:83:1d:66:98:33:
32:24:2c:2a:10:56:1b:39:59:38:b1:27:8f:bb:61:
34:4f:9a:4b:4e:0e:7a:4d:ba:2c:60:fb:5e:00:d6:
0f:f6:aa:5b:d2:e4:17:40:f9:e7:47:87:e7:b0:f3:
a2:d0:65:05:d1:19:6c:63:68:55:c7:8c:4e:19:0f:
98:ed:58:8f:8a:e3:a5:dc:da:b0:12:eb:9a:c6:ae:
27:68:49:70:bd:9a:07:6d:e9:16:0f:d4:b8:d3:2c:
1d:08:e7:52:23:d9:26:90:25:87:ef:bd:5d:a2:a7:
15:34:ca:26:d0:d7:c4:36:dc:4a:c2:55:50:e2:22:
2f:5a:cc:80:f5:2e:b2:a1:c9:4e:93:aa:f3:d1:cb:
d1:a9:64:f1:d7:c0:1a:f1:c9:e8:c1:be:ce:70:50:
77:8b:58:21:8b:4a:2e:28:7d:a3:22:74:bb:64:36:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:1F:38:0F:81:47:67:48:FE:15:A4:96:CA:FD:5E:68:34:5C:7D
X509v3 Authority Key Identifier:
keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0c:f1:6e:6b:d6:6a:2b:1d:2e:cd:e2:b1:80:ce:0a:4e:93:
22:5e:c0:02:d2:ba:6c:40:09:29:34:27:f5:70:e6:dd:aa:d0:
e5:fb:7b:83:99:35:a8:b3:f6:87:d3:c9:8f:66:cf:fa:31:e3:
7f:bd:32:6c:69:ae:b4:6f:16:74:eb:eb:54:81:44:7e:6f:8e:
92:c8:92:9f:be:8b:4b:72:0c:48:e1:0b:8f:45:a6:22:12:5c:
f5:c8:b5:8d:39:23:c2:14:e5:13:a5:4f:72:48:7d:ce:ba:9a:
12:8e:f3:3c:0f:a5:e0:28:ed:09:9f:3e:4b:ac:48:11:8a:aa:
fe:10:bc:ed:f5:9c:eb:ef:06:29:eb:ca:d4:a0:61:10:c5:c5:
66:78:08:45:9b:66:4c:9c:ca:64:98:67:a0:5f:60:80:fd:0a:
d8:ad:eb:31:7d:9b:be:75:48:fc:44:72:0b:21:53:aa:34:d7:
e5:f8:98:e8:f9:6e:81:af:dc:ea:6f:e2:83:9f:45:ed:2f:e2:
5a:19:02:49:6b:46:09:34:a9:77:67:95:2e:76:96:0f:93:3e:
17:96:d9:23:e2:36:e9:19:21:2c:2e:42:e4:02:33:29:27:77:
be:22:ba:f3:47:d3:67:24:ef:42:b8:ce:fe:f8:7d:09:b4:eb:
43:a8:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:11 2026 by rpki-client