Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: LCqhj6Z6SsvTefJh3PmRSP1w2KxhP5plPAXKuX6nkIk=
Subject key identifier: E1:7C:2B:B1:07:90:55:3C:6C:98:6D:AB:15:FC:A7:0A:6C:3A:F4:80
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 019D38657600975802198C129A29216B63F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0EF5
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: jRbKuqSJCCFWEFWWq9jSvzeawm9XSIxsNE1idC6RnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:76:00:97:58:02:19:8c:12:9a:29:21:6b:63:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=e17c2bb10790553c6c986dab15fca70a6c3af480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:4a:2a:d9:ba:1a:ab:d6:a1:19:63:37:c8:
fc:d7:d8:f9:ab:69:27:19:5f:37:8e:14:36:af:0b:
52:4c:43:ec:eb:5a:0a:9c:51:1d:b3:9f:56:ea:12:
e3:03:45:59:0c:23:fe:b8:97:57:e0:6b:a3:7d:bc:
8d:b5:74:62:75:ae:cb:18:32:07:07:fc:bd:a9:92:
41:52:18:9f:b6:36:e9:eb:e6:e4:75:8e:c9:e1:43:
0a:53:c6:1e:f8:be:81:3d:f1:63:38:71:da:73:de:
9a:2f:d1:7b:ce:3e:b2:8c:84:27:d8:94:c7:7e:1a:
7d:da:78:8d:0f:57:8d:c6:f3:38:df:53:50:15:01:
b3:36:e7:08:85:42:79:c7:55:33:20:56:9f:c1:ae:
e7:86:4d:07:3a:67:43:60:5e:c8:31:1c:9f:99:0d:
61:70:cd:b3:83:c5:fd:9f:e5:8b:c7:ab:50:3b:bf:
42:d3:42:29:71:7a:0c:09:9f:fb:8b:a6:67:63:9d:
38:ac:19:71:2e:92:30:5e:a7:51:c3:52:72:96:cf:
16:be:5b:d6:92:72:e7:7f:e6:1e:8c:1e:2e:ad:0e:
a5:6f:81:1f:89:44:5c:51:17:c0:47:f9:f6:07:3f:
84:7c:b6:35:b1:54:45:4b:f9:43:41:fe:d2:bf:87:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:2B:B1:07:90:55:3C:6C:98:6D:AB:15:FC:A7:0A:6C:3A:F4:80
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:63:58:56:53:ea:cf:62:4f:23:e0:87:cc:80:bd:8e:48:
fa:1a:3e:0d:27:78:1b:d0:50:4c:b9:31:1c:61:79:ca:2b:9f:
72:54:11:62:91:e6:1a:03:ef:b2:9e:ba:82:fa:f2:b6:a5:a5:
47:2e:e9:ae:d5:6e:ad:53:a5:19:44:af:17:ef:d0:30:ec:c5:
a0:43:56:8c:78:c0:d9:55:60:01:eb:04:35:ed:25:01:19:19:
72:08:52:9a:bf:9d:40:cd:bb:75:ac:80:4e:09:34:e9:14:b8:
62:2f:ac:dc:b4:68:7b:28:b1:d0:20:ea:03:42:76:33:cd:2f:
75:bb:61:c7:3d:96:8c:96:a5:c8:f3:46:24:9f:50:3c:e0:d7:
f0:0d:57:43:97:4f:01:e4:ed:2e:35:58:40:85:40:42:92:60:
b9:ca:7f:f7:9f:d5:f8:62:7c:2a:c1:5d:98:85:31:ee:03:24:
19:24:8d:89:9c:92:7c:11:21:f8:93:32:1f:16:c7:dc:4d:bf:
59:0a:4b:d3:ad:5f:14:c8:d8:1b:6a:65:b1:b5:3d:02:34:2b:
fa:26:65:21:7f:f8:fc:8e:db:a9:65:f0:11:fd:47:a4:ff:64:
87:c7:35:38:f9:7f:56:b9:c3:63:64:c6:6f:49:e8:72:6a:99:
8a:63:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:36 2026 by rpki-client