Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft
File: wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft (raw, json)
Hash identifier: rovVQTzMuqKhmw758VIoaqqMYjJtyzP3K2CNbj7CEow=
Subject key identifier: C1:BC:EE:A8:10:55:FF:7B:E0:3C:67:E0:4C:74:D2:EC:F6:0A:A4:54
Authority key identifier: C1:C6:56:41:F1:F1:F9:49:A6:5A:D0:08:EA:46:CF:6C:84:6A:35:74
Certificate issuer: /CN=c1c65641f1f1f949a65ad008ea46cf6c846a3574
Certificate serial: 019D34BF075EFCD619DE325033EE016595A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft
Manifest number: 7C
Signing time: Sat 28 Mar 2026 14:00:27 +0000
Manifest this update: Sat 28 Mar 2026 14:00:27 +0000
Manifest next update: Sun 29 Mar 2026 14:00:27 +0000
Files and hashes: 1: wcZWQfHx-UmmWtAI6kbPbIRqNXQ.crl (hash: UTWmZm6dynByaNeLKpFG21AdalFaKsSpf3jRNR7/mZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:07:5e:fc:d6:19:de:32:50:33:ee:01:65:95:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c65641f1f1f949a65ad008ea46cf6c846a3574
Validity
Not Before: Mar 28 14:00:27 2026 GMT
Not After : Mar 29 14:00:27 2026 GMT
Subject: CN=c1bceea81055ff7be03c67e04c74d2ecf60aa454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:09:1f:7e:43:43:64:6e:20:94:6f:87:8a:
85:9f:ac:1b:34:d9:c6:9b:08:4f:cc:07:45:e9:d0:
b1:ac:45:09:c3:bf:f7:ab:0e:6e:96:84:dd:8a:8d:
61:34:1b:37:2b:3c:3c:e6:e8:fb:00:bc:10:8a:ba:
ab:1f:b7:7b:27:55:5f:98:70:ea:06:25:0c:10:82:
72:35:47:4f:38:28:82:ab:4b:50:4d:b1:9d:1b:ce:
b3:ae:28:5b:47:0d:1b:70:2f:ad:a5:0a:09:7e:34:
eb:74:da:ce:69:cb:96:31:95:fa:37:99:03:dd:a3:
f3:ce:6d:d0:a4:67:90:f1:1f:86:d6:50:fb:1c:cb:
08:31:16:6f:47:e7:09:c8:45:ea:e9:73:7e:5c:01:
01:e1:38:ba:b1:9c:9e:a9:68:d7:64:aa:e6:78:0b:
d3:b5:5c:5a:75:4a:cc:9d:f1:43:68:e9:50:76:93:
ba:fe:14:29:51:c7:7d:6b:de:5c:1e:d4:b3:45:c2:
77:cc:e4:83:b7:18:27:d5:19:46:c9:be:34:c4:9c:
51:46:b7:aa:7f:d3:50:18:ec:b9:c0:be:7b:42:97:
9f:6b:41:98:6f:10:9b:08:08:07:88:62:8b:57:5f:
21:5c:3d:fb:4b:21:6b:dc:ac:03:9e:ed:39:a6:74:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:EE:A8:10:55:FF:7B:E0:3C:67:E0:4C:74:D2:EC:F6:0A:A4:54
X509v3 Authority Key Identifier:
keyid:C1:C6:56:41:F1:F1:F9:49:A6:5A:D0:08:EA:46:CF:6C:84:6A:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9db7e8-0076-4d00-bdac-a697fd5d3aea/1/wcZWQfHx-UmmWtAI6kbPbIRqNXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ea:f3:dc:c8:06:6d:fe:8c:a2:73:4c:57:4b:fb:e7:96:26:
99:a5:d4:7b:ff:7a:e3:25:f5:21:c1:0e:ac:d5:79:36:e0:f8:
0d:22:28:4b:63:55:b8:49:30:7b:77:0a:c8:12:bc:bc:78:61:
61:b3:7d:f0:59:f1:a3:53:77:dc:96:f8:d3:8c:61:b5:ca:f9:
0e:1b:4d:3b:67:59:26:1d:12:29:56:50:00:59:fb:ca:61:32:
8f:a7:90:26:20:30:e8:7e:f6:f6:79:ba:38:7c:47:db:c4:7b:
2c:17:66:03:ae:a4:16:3e:c7:91:72:ce:0e:5b:d9:d0:f2:e8:
9b:41:2a:77:1c:0f:de:0d:eb:ac:62:1f:7a:56:95:31:ff:ca:
00:15:57:31:28:b0:df:11:40:6f:b8:95:28:cd:57:e6:d5:d7:
4b:9c:c1:13:54:62:12:56:44:25:3d:94:62:d8:93:e4:b7:c2:
46:b7:4e:a3:ec:a7:dd:ab:52:d4:a4:0a:97:08:51:37:c2:b6:
cd:06:b9:b1:c1:bd:99:30:f5:08:1d:9d:92:04:4b:fd:7a:ae:
64:86:5e:9d:9a:24:ad:2d:ed:94:39:34:2a:a6:3c:d1:93:0f:
7e:84:4c:de:33:48:a0:3a:fc:7e:01:e3:ee:86:8e:ee:ee:62:
fb:59:9f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:12 2026 by rpki-client