
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.mft
File: wP7jP-yKG99GJgiXZPqOlilLSNw.mft (raw, json)
Hash identifier: HOQGx0WVXaJ9LW1/2QTP0ysTJm91O02onwrr1/s8hTU=
Subject key identifier: 88:44:CC:45:10:9A:07:F9:EE:02:30:BB:B8:DF:38:F4:46:F5:11:2F
Authority key identifier: C0:FE:E3:3F:EC:8A:1B:DF:46:26:08:97:64:FA:8E:96:29:4B:48:DC
Certificate issuer: /CN=c0fee33fec8a1bdf4626089764fa8e96294b48dc
Certificate serial: 019D378922C3FE6AA09F3C9E06A8F56D0F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7jP-yKG99GJgiXZPqOlilLSNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.mft
Manifest number: 0120
Signing time: Sun 29 Mar 2026 03:00:27 +0000
Manifest this update: Sun 29 Mar 2026 03:00:27 +0000
Manifest next update: Mon 30 Mar 2026 03:00:27 +0000
Files and hashes: 1: wP7jP-yKG99GJgiXZPqOlilLSNw.crl (hash: 2iKKgfVsOGnTlZ8CAJrIF0G425icoCyGO84iscQsotM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wP7jP-yKG99GJgiXZPqOlilLSNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:22:c3:fe:6a:a0:9f:3c:9e:06:a8:f5:6d:0f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fee33fec8a1bdf4626089764fa8e96294b48dc
Validity
Not Before: Mar 29 03:00:27 2026 GMT
Not After : Mar 30 03:00:27 2026 GMT
Subject: CN=8844cc45109a07f9ee0230bbb8df38f446f5112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:7a:57:a2:4c:ed:56:0a:3e:d0:b3:25:54:
7b:d1:33:f1:46:32:64:ad:20:f2:e1:58:94:dd:26:
45:af:fe:b6:4b:db:9e:9f:ae:b8:e2:8a:e3:b1:a7:
e9:44:9c:66:8d:d0:c3:60:e2:8d:b6:03:ae:29:df:
2f:09:ce:ac:b9:f5:f0:92:10:f5:a2:cc:83:fc:a0:
4d:f0:8d:cb:9e:76:c3:70:e2:70:e2:63:2e:d8:9b:
7d:a9:e8:88:ed:e8:53:63:fa:ce:b8:44:72:36:f7:
c5:f1:88:8b:cd:a5:99:26:a7:7e:df:40:2d:70:d3:
fd:c4:5f:49:6b:fc:b6:e7:83:60:2d:4b:64:82:79:
86:ce:82:b4:eb:d6:da:d5:fc:f7:39:69:b1:b0:f0:
bf:12:a1:d2:6b:4a:de:ba:47:3b:2d:b0:a7:09:91:
65:04:ba:2f:4e:ae:d1:91:6e:df:cd:20:75:c9:dc:
47:73:7a:90:e6:87:37:64:85:16:1d:70:27:0d:b6:
a8:cb:57:a0:7b:c2:0e:d1:4d:e4:ff:81:a6:aa:28:
82:23:40:d6:f6:dd:6e:25:cf:e5:9f:d7:59:46:b4:
c8:46:21:07:64:3b:3d:7e:94:88:b8:28:d2:57:cd:
3b:3f:5a:42:93:8b:07:3d:a2:fc:1b:d9:5c:01:a9:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:44:CC:45:10:9A:07:F9:EE:02:30:BB:B8:DF:38:F4:46:F5:11:2F
X509v3 Authority Key Identifier:
keyid:C0:FE:E3:3F:EC:8A:1B:DF:46:26:08:97:64:FA:8E:96:29:4B:48:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7jP-yKG99GJgiXZPqOlilLSNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2c:dc:8c:24:1b:c6:dd:5e:b1:8c:82:4f:8f:6b:a0:0a:a4:
1b:57:5c:46:61:d9:35:1b:dc:93:2c:f0:a8:f4:e9:5d:b0:b7:
6a:22:7a:78:4a:cd:15:a9:6a:9f:c4:d3:7e:08:83:25:01:2b:
23:c6:25:39:a9:3c:46:b8:d5:87:5f:89:e1:e5:08:01:15:a4:
02:c4:1c:80:a7:e9:f9:8f:6f:c1:da:d3:09:b9:9f:b4:9b:1c:
f8:fd:63:d9:d4:d2:d3:d0:d7:0d:2c:94:71:c9:df:ae:6d:f5:
6e:1f:a3:1c:57:be:c1:3c:53:58:3c:c1:03:00:11:69:90:c4:
1a:9e:39:d9:00:76:82:90:2e:5f:ef:e6:3f:07:c5:77:ac:d5:
78:51:0c:6f:46:dd:67:fe:f1:64:50:5b:6e:31:2e:09:c8:53:
52:9f:ba:c7:39:75:23:5d:53:dd:bd:cb:e2:5e:4c:fa:7b:75:
9a:73:83:c6:7e:e4:33:0f:4c:14:ec:9c:31:78:39:09:da:96:
e1:38:1c:79:9d:47:5d:13:0c:cd:92:be:a1:de:d9:f7:d5:d2:
a3:43:e4:74:5b:b4:ba:8d:f8:41:33:e9:1f:ae:b2:e4:7e:3e:
72:dc:60:5b:54:93:2b:e2:f0:76:a8:c0:2f:bb:ef:e6:a1:f0:
65:f2:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:28 2026 by rpki-client