Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: /3eY2e+C65lUOb1HnqXME3/ASe1ZAXs1p6swnYjMatk=
Subject key identifier: A6:6B:8B:5D:4D:7E:43:09:DD:9F:FA:6E:E4:56:07:8D:C9:39:83:5C
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 019D2816CFCE0FA51853BF6B13CC2EC50B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: 03A6
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: sC3pXhkTpu44ibrhpiya92fDawsowYjcc42ssFR/Jns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:cf:ce:0f:a5:18:53:bf:6b:13:cc:2e:c5:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=a66b8b5d4d7e4309dd9ffa6ee456078dc939835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:54:7c:90:2e:c6:01:e9:e4:98:24:c6:00:
ca:de:e2:9c:e6:b8:d9:15:28:12:25:94:b3:53:7f:
ef:2f:5e:9d:3e:45:75:b8:81:90:60:9c:06:40:b0:
6d:4e:57:18:8b:d5:44:db:b1:a3:5c:66:8b:b8:91:
b1:a4:3c:9b:c8:4e:31:2a:26:47:1d:23:52:61:80:
32:79:19:1f:a0:4d:4b:fd:ed:49:e9:9c:0c:48:fa:
12:81:e9:06:24:63:89:e8:16:a3:3e:b0:c9:27:c6:
80:77:30:92:8e:54:5c:12:a9:fa:50:8d:c5:74:4d:
b6:f8:29:ac:41:83:29:27:7e:20:b1:dc:a4:c5:90:
af:bf:6e:01:22:58:81:11:a8:71:1b:a9:18:82:39:
33:fa:fb:53:7c:a7:96:0e:0c:03:41:8b:44:1e:4b:
7e:7b:b3:90:c1:89:03:2d:3d:ae:e3:eb:aa:d7:f1:
6e:06:df:fa:ec:04:c0:d0:bc:11:be:de:69:53:f6:
6e:56:f5:16:34:45:3a:d5:96:39:c7:12:5b:0a:7c:
16:b4:32:ae:42:ac:08:4c:8a:47:bf:2b:38:61:a1:
ab:2c:16:bf:f7:70:a6:49:44:a3:02:cb:53:43:a7:
18:f1:10:ae:e2:38:28:38:d1:d8:48:ed:08:75:19:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:8B:5D:4D:7E:43:09:DD:9F:FA:6E:E4:56:07:8D:C9:39:83:5C
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:54:1f:35:64:e4:03:80:cf:46:3c:a8:87:d5:2f:32:1a:af:
b8:55:8b:91:51:23:c7:53:ef:56:23:07:93:0c:91:9d:5b:cb:
5e:10:b3:cd:b3:f2:c9:8e:d6:d4:b5:a9:ce:5b:26:e5:91:6e:
78:75:7f:b2:29:fe:b8:2a:9c:96:e0:83:d4:7e:fc:a7:48:78:
45:ef:fc:dd:ee:50:df:67:7b:ba:cf:dd:de:6b:94:3f:55:02:
95:27:8c:b0:65:4b:6d:56:b9:fe:fe:49:c7:3c:00:15:17:ac:
10:c7:7f:2f:23:02:61:42:37:b0:df:46:56:a2:63:3c:7e:b1:
e6:57:a8:79:3e:e6:16:55:04:64:7a:a6:8e:d3:12:29:7c:64:
f0:09:40:d2:db:a6:70:f0:df:69:f6:fa:2d:02:97:3a:ca:c8:
fa:83:22:61:5f:06:36:fb:22:a0:2c:4e:cc:7f:b1:9f:7a:c4:
15:ac:e1:1b:dc:d4:91:e8:d5:f3:06:56:14:c1:dd:d7:b6:2e:
62:dc:26:3c:11:8f:fb:61:be:ca:29:70:14:1b:99:d4:a7:2a:
c9:10:78:07:cb:43:9a:ca:9c:84:a3:3b:99:5c:fc:f6:a0:22:
e9:a3:f4:e2:a5:e0:1c:a9:53:f5:2e:74:01:67:c4:85:37:06:
50:c9:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:47 2026 by rpki-client