Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
File: wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json)
Hash identifier: e+yCI6CP7JDL0/Rn5KgGDAvXjMvc+1J8zEcNIJbpvMI=
Subject key identifier: 37:C6:98:0C:9F:D7:FA:47:6D:09:11:DA:90:0B:41:A6:16:B6:A2:A9
Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
Certificate issuer: /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Certificate serial: 019D386649418063445CB13776119134839F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
Manifest number: 03AB
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: vNcFZ1i5Skd3loBveADZa8NkVB1Wc7M+he917fdcbuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:49:41:80:63:44:5c:b1:37:76:11:91:34:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=37c6980c9fd7fa476d0911da900b41a616b6a2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:6f:ce:ea:d4:e2:f4:c9:87:80:cb:d6:99:
1f:eb:c4:c8:b6:d8:f7:27:79:73:ee:ac:4d:df:6c:
ad:72:ae:c9:8b:b3:b8:28:6d:be:ef:2c:95:be:19:
40:bb:e8:3d:16:be:8d:b0:30:88:57:fb:19:9b:ee:
e2:69:72:46:7a:66:42:2e:94:a1:9e:27:7f:01:a1:
19:9e:b2:78:6e:73:43:fe:b3:3d:f8:e9:2e:d2:3d:
22:fe:13:11:64:20:64:c3:e7:c9:26:52:b9:c8:e7:
48:0e:e9:e2:e5:81:bb:54:d7:e1:8a:48:c3:69:c9:
fd:8c:93:5d:9e:3e:77:5e:35:40:c1:ac:10:cf:7b:
0e:2a:f9:ed:ff:41:ed:b7:53:fa:9a:ec:dd:a3:a5:
11:ed:da:93:fd:4e:db:4b:a2:1a:ca:b8:67:5f:81:
45:ef:2b:5e:e7:bb:75:7e:1b:0d:b1:54:15:42:2d:
66:57:46:44:96:9f:bd:94:62:0b:34:a4:6a:37:84:
da:d5:67:42:f4:4e:84:34:26:c2:46:92:c8:5d:46:
f2:7b:18:eb:bc:93:70:4e:db:cb:76:e7:f3:57:ba:
86:a3:39:4a:25:29:c3:75:51:1c:3b:5b:96:46:1d:
c5:fd:0a:af:be:1b:00:da:8d:c5:9a:97:3a:22:16:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C6:98:0C:9F:D7:FA:47:6D:09:11:DA:90:0B:41:A6:16:B6:A2:A9
X509v3 Authority Key Identifier:
keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d6:57:f6:82:fc:6f:a9:85:bf:d4:7e:e5:5f:b3:0d:0b:5f:
7e:ae:13:37:cb:cf:99:db:c0:7d:11:25:d9:38:8f:1b:08:66:
1e:10:27:a1:d7:54:57:af:28:1e:63:f4:48:57:a2:0e:1f:28:
27:05:90:4b:4b:24:37:5c:a1:98:68:0e:97:01:a3:5d:00:53:
fe:44:73:6c:e5:74:72:a7:55:0b:31:42:bc:7d:7b:4c:f2:a8:
d7:2b:5d:37:cf:07:e3:ac:99:d0:d8:7b:ee:97:bc:bf:80:ab:
fc:ec:90:e8:22:6f:f7:f8:ce:72:21:68:de:58:52:70:30:fe:
d0:aa:bd:79:e9:ed:e5:24:37:c3:ac:e2:1d:f6:ff:92:7c:07:
9e:15:57:68:f2:65:06:3a:47:fd:67:5b:00:a2:ea:4d:00:63:
87:ca:d5:fe:b0:2a:52:d7:62:58:33:2c:3a:32:ed:03:8a:f0:
be:06:a6:8f:97:fd:14:dc:44:f1:32:ab:9e:d3:4a:0a:7d:18:
3b:f5:d5:a4:31:48:46:82:71:61:54:60:83:33:e9:31:fc:a9:
f8:07:12:92:fa:87:4c:5f:be:ad:dd:ed:54:9e:60:da:b4:5e:
fd:55:22:62:2d:38:ab:68:eb:d5:b0:0f:24:8f:84:f8:57:b1:
7e:71:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:13 2026 by rpki-client