Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: cTCX/P+8koG4b71NCNY2wxaTW20n/ae89YnaUDNyQxc=
Subject key identifier: A3:82:25:1D:06:8B:51:6F:02:F9:E5:E6:FE:74:32:1E:58:87:86:4A
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 019D3A538EF27B8FBDB85A6EE63447A09C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0B09
Signing time: Sun 29 Mar 2026 16:00:47 +0000
Manifest this update: Sun 29 Mar 2026 16:00:47 +0000
Manifest next update: Mon 30 Mar 2026 16:00:47 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: KGqj2l5aNScSyF5iSX74TFqvcPUkmIzrwb5WZTblxwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:8e:f2:7b:8f:bd:b8:5a:6e:e6:34:47:a0:9c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Mar 29 16:00:47 2026 GMT
Not After : Mar 30 16:00:47 2026 GMT
Subject: CN=a382251d068b516f02f9e5e6fe74321e5887864a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:54:5d:b6:60:ea:39:1e:c1:57:de:62:a0:
e9:ed:d6:13:b4:ac:d1:bd:27:a5:e2:4d:15:7c:65:
56:11:83:9f:c7:1c:36:08:c6:26:77:e4:c3:f2:56:
be:a5:a2:6d:9c:4c:69:86:08:3c:db:c1:49:23:25:
62:d4:b3:f2:87:7b:7d:df:f8:49:b1:1d:e1:8f:05:
09:d6:a4:14:06:33:12:d1:9a:31:ec:5c:f2:27:cd:
52:b0:30:03:de:0c:4d:98:f2:24:e5:4a:ce:22:d0:
b5:9b:de:71:f0:c2:3a:f1:3e:8f:7d:bb:5a:cb:d2:
bf:14:47:a8:53:0e:96:1c:8d:dd:37:8b:3a:af:ce:
64:fa:7a:55:18:1b:fb:03:b9:05:aa:98:b3:a6:70:
8c:d7:88:ba:8d:e5:33:97:2b:87:4b:7b:33:c2:dc:
f1:bf:6c:5d:b1:d0:46:03:aa:df:42:21:ef:05:7a:
3d:06:d1:42:4e:8b:2f:34:71:3a:40:fd:78:1e:7b:
01:cc:54:fd:3a:1d:08:86:8c:64:0b:5d:b6:47:2b:
ec:d8:59:39:30:65:7d:7c:58:14:ed:11:22:56:e6:
1c:14:d5:d1:04:20:ba:f3:50:98:88:78:f6:c8:ae:
8e:de:f6:a0:7d:40:9a:3d:52:96:1f:8b:1f:f6:14:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:82:25:1D:06:8B:51:6F:02:F9:E5:E6:FE:74:32:1E:58:87:86:4A
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:c9:2f:d2:1b:c5:f9:82:20:1a:52:3a:ad:ee:d6:5e:eb:
04:96:48:47:07:b1:7d:22:68:c9:6b:39:96:0a:11:e3:ca:f2:
86:f8:f7:12:71:d7:ea:e1:f3:79:9e:af:96:e1:8d:9a:7f:e4:
f6:fc:f8:f4:28:85:4e:f5:8b:aa:44:be:68:21:e5:db:66:12:
40:73:df:0e:75:c7:80:19:cb:27:8a:0c:52:dd:bf:45:4f:73:
d3:6c:fa:13:b9:ba:3f:7f:1b:6e:e3:28:c9:81:a6:bd:d3:f3:
80:5e:d2:2d:21:1a:35:35:e2:1a:10:d8:b4:73:c0:47:1c:8c:
14:52:72:9d:42:5d:08:3e:b1:9c:20:05:cc:f6:a9:14:eb:de:
c4:18:76:c5:36:68:05:f0:4e:07:d5:c3:db:c9:16:80:22:aa:
aa:4d:e5:3c:cc:d4:89:58:5a:b4:37:1f:2e:51:40:af:48:4b:
96:b9:56:c2:95:5d:19:57:ed:40:76:eb:c7:11:75:05:06:fe:
0b:65:66:c7:0c:b1:4d:00:5f:6e:c2:2b:26:19:26:6c:c8:86:
0d:e0:f0:51:98:45:0b:f8:3a:05:ae:35:ed:d3:5c:a8:a8:a9:
74:54:69:c6:3e:c9:90:06:80:c3:2a:d0:b9:b1:d4:2e:f3:24:
33:de:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:39 2026 by rpki-client