Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: Szpn694u0T99ErliMbifIGOXknORgi7E1PpvrEheh2I=
Subject key identifier: 01:A0:72:3D:B4:F5:E0:AE:2B:5A:8C:7C:3E:27:73:40:2F:2F:15:68
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 019CDF21273328136F3CA9BE8DD732B1F3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 0675
Signing time: Wed 11 Mar 2026 23:00:17 +0000
Manifest this update: Wed 11 Mar 2026 23:00:17 +0000
Manifest next update: Thu 12 Mar 2026 23:00:17 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: uNk7aOmtxGE5W0onEI5GMqv9K09MufSL8bWClvqUzoY=)
2: tvVyRp4L9e3meI8HjNM8zokhY-g.asa (hash: olDJRhTYRvq4nKsZ0gccZ00xYdhkTFh1VWFFg4+4L98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:df:21:27:33:28:13:6f:3c:a9:be:8d:d7:32:b1:f3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Mar 11 23:00:17 2026 GMT
Not After : Mar 12 23:00:17 2026 GMT
Subject: CN=01a0723db4f5e0ae2b5a8c7c3e2773402f2f1568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:66:72:d1:f3:18:1c:e8:7a:e4:f8:96:e6:
bf:cf:07:e7:61:e0:fb:04:78:d7:14:ef:31:4e:bc:
d6:49:1a:c1:41:52:c8:04:ff:02:9b:fa:cc:55:79:
da:cf:74:6f:a0:69:7a:62:09:2b:95:1e:99:dd:8b:
1b:6d:29:d3:b3:79:aa:e5:87:24:52:cf:11:db:c7:
98:73:41:0b:7d:92:c5:ef:8a:b6:dc:0b:e5:1f:a8:
79:99:98:56:39:fb:1a:ab:aa:ea:be:05:c3:f8:a0:
71:f1:c8:62:60:bc:b2:fb:9e:e9:ef:ab:00:fc:72:
e6:43:7d:68:a1:b3:ae:9b:67:d7:91:e8:13:a3:94:
74:e2:aa:08:e3:c8:1b:84:4b:3b:51:bb:11:fb:e0:
c5:13:5e:31:7c:ef:d5:4c:3c:d8:ec:a0:5e:55:97:
31:f7:be:0c:fb:e2:77:7d:11:e9:e7:84:0b:ac:ca:
36:9e:6a:aa:18:7a:9d:55:01:3a:73:83:65:ef:79:
7c:a8:2a:0b:b1:b1:ee:d5:14:95:85:cb:ab:df:32:
28:ae:91:97:b5:68:c2:96:81:fb:84:d6:e5:24:b6:
5c:41:25:4f:5f:71:10:f9:ce:ce:d4:5f:49:99:f6:
d7:6d:ec:0a:e5:14:50:23:1e:c2:19:48:b6:c5:b5:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A0:72:3D:B4:F5:E0:AE:2B:5A:8C:7C:3E:27:73:40:2F:2F:15:68
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:87:4c:6c:18:51:c1:c8:87:01:77:72:ae:5a:16:5a:dc:fe:
6b:b7:13:3f:62:4d:4b:7b:e9:f3:97:5c:e0:6c:b0:93:92:55:
68:62:fd:3e:43:26:f5:03:59:82:f8:86:b9:71:73:eb:89:d5:
50:ac:40:97:ba:33:10:a8:17:5c:37:e8:4f:4b:13:c8:a7:36:
e8:e5:80:49:b8:8e:99:77:99:14:c5:ca:4c:93:3a:d3:94:c7:
53:e8:71:7b:f1:ee:41:cf:32:46:b7:53:fa:7e:a5:e1:38:27:
35:9a:72:56:e1:c1:88:38:b1:15:90:f9:d7:5b:a3:aa:a3:f4:
72:f6:4b:1b:f3:e8:a2:e2:98:83:ad:11:2e:35:fb:34:4b:de:
1e:43:e6:7b:7b:16:44:42:1f:f3:76:23:5b:42:48:84:e3:61:
3c:f9:aa:c2:67:0a:38:6f:64:ab:2d:1a:0b:0d:70:38:f4:30:
27:cc:b4:ed:c4:c9:35:f4:ea:aa:43:a5:33:fd:4d:5a:bf:6b:
95:1c:a2:7f:0a:d3:8a:e9:12:14:83:78:c9:ea:f0:1c:f2:a0:
b0:53:df:2b:82:36:86:26:dd:69:8c:ce:e9:e9:aa:9e:58:48:
c3:ce:3e:1d:64:03:ac:2b:aa:80:59:1d:fc:c1:cd:48:58:c7:
d6:60:c2:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzfISczKBNvPKm+jdcysfPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm
ODQxNzIwHhcNMjYwMzExMjMwMDE3WhcNMjYwMzEyMjMwMDE3WjAzMTEwLwYDVQQD
EygwMWEwNzIzZGI0ZjVlMGFlMmI1YThjN2MzZTI3NzM0MDJmMmYxNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q9mctHzGBzoeuT4lua/zwfnYeD7
BHjXFO8xTrzWSRrBQVLIBP8Cm/rMVXnaz3RvoGl6YgkrlR6Z3YsbbSnTs3mq5Yck
Us8R28eYc0ELfZLF74q23AvlH6h5mZhWOfsaq6rqvgXD+KBx8chiYLyy+57p76sA
/HLmQ31oobOum2fXkegTo5R04qoI48gbhEs7UbsR++DFE14xfO/VTDzY7KBeVZcx
974M++J3fRHp54QLrMo2nmqqGHqdVQE6c4Nl73l8qCoLsbHu1RSVhcur3zIorpGX
tWjCloH7hNblJLZcQSVPX3EQ+c7O1F9JmfbXbewK5RRQIx7CGUi2xbVeQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGgcj209eCuK1qMfD4nc0AvLxVoMB8GA1UdIwQY
MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt
ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3
LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIdMbBhR
wciHAXdyrloWWtz+a7cTP2JNS3vp85dc4Gywk5JVaGL9PkMm9QNZgviGuXFz64nV
UKxAl7ozEKgXXDfoT0sTyKc26OWASbiOmXeZFMXKTJM605THU+hxe/HuQc8yRrdT
+n6l4TgnNZpyVuHBiDixFZD511ujqqP0cvZLG/PoouKYg60RLjX7NEveHkPme3sW
REIf83YjW0JIhONhPPmqwmcKOG9kqy0aCw1wOPQwJ8y07cTJNfTqqkOlM/1NWr9r
lRyifwrTiukSFIN4yerwHPKgsFPfK4I2hibdaYzO6emqnlhIw84+HWQDrCuqgFkd
/MHNSFjH1mDCKQ==
-----END CERTIFICATE-----
Generated at Thu Mar 12 08:01:25 2026 by rpki-client