Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: oXrvG7uOBi+ldeeSaygMzwLekTxOc7TVsUxmrtMYFeA=
Subject key identifier: C5:43:74:0F:FF:4D:70:20:C2:76:F6:75:01:46:47:A1:DE:5D:22:78
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 019D28F31067F89BEDE5FB44178F0EFDA9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0FE7
Signing time: Thu 26 Mar 2026 07:01:51 +0000
Manifest this update: Thu 26 Mar 2026 07:01:51 +0000
Manifest next update: Fri 27 Mar 2026 07:01:51 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: SicVjN9OXzp5WezSBUkv+hm6/40dsvy79q98EY0UIZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:10:67:f8:9b:ed:e5:fb:44:17:8f:0e:fd:a9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Mar 26 07:01:51 2026 GMT
Not After : Mar 27 07:01:51 2026 GMT
Subject: CN=c543740fff4d7020c276f675014647a1de5d2278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:22:8c:37:e3:f2:c4:39:af:ea:70:68:0a:
1d:66:2f:e3:eb:79:96:dc:2f:39:8c:f1:f7:7e:6b:
a1:7b:d5:28:04:90:5d:16:9a:46:a1:58:f3:60:b9:
50:ea:88:eb:90:68:58:49:35:80:f7:11:7d:a4:6d:
df:25:36:e2:89:f4:ea:f8:db:bc:f6:e4:6f:73:44:
ca:95:7b:c1:7c:2b:80:62:97:18:e4:c0:23:18:69:
20:c6:e4:8c:59:9c:17:fd:47:4d:4c:9e:9c:3f:7c:
fe:47:69:a3:e5:a9:a8:39:33:d8:88:1e:37:68:50:
c0:93:65:64:ae:ed:84:71:15:8c:f0:e8:7e:4b:ce:
d3:55:22:98:15:ee:a0:38:2c:39:98:86:55:6e:2f:
5f:96:2a:ec:52:6d:68:6d:ae:c7:0f:27:e3:79:d6:
cd:54:f7:73:34:f8:95:ca:f8:d3:0e:e4:f5:cb:f7:
5d:61:3c:42:93:60:e9:24:27:d1:a9:07:b2:cd:52:
5f:a3:25:fd:86:f9:ae:6e:94:f1:44:45:07:6c:c6:
bd:44:b4:4a:74:52:42:c7:64:e9:88:47:bc:d9:a8:
04:cf:2b:11:b7:a9:31:52:78:96:d1:e8:e6:e1:41:
1b:6f:bf:ae:7a:41:1b:9c:cb:12:97:de:df:bd:59:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:74:0F:FF:4D:70:20:C2:76:F6:75:01:46:47:A1:DE:5D:22:78
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ac:5d:3c:1f:be:9d:ee:f8:20:38:41:33:52:ca:7d:16:dc:
7e:c4:6c:f4:11:7e:96:61:54:6a:fa:9c:96:0d:56:a0:f7:df:
d0:cb:42:60:18:49:48:6a:00:ea:81:c8:98:58:59:4d:5f:1b:
4a:05:d6:50:44:f0:d6:39:8f:cf:51:ea:b7:bc:d2:32:50:b6:
f7:70:9e:f4:23:9c:fd:16:b8:72:42:4e:f0:c7:83:cb:0e:39:
59:01:ac:95:92:19:b6:b6:5b:42:b8:45:57:44:b1:fd:0e:23:
d5:ae:d5:6a:ef:0b:3b:e7:ca:5a:3d:90:4f:25:c8:53:db:30:
c9:dc:07:e7:cb:e1:dd:f6:7d:68:23:b0:1e:67:2a:0d:43:96:
b4:2b:54:16:04:67:1b:59:73:01:7d:f0:0b:8f:05:0a:38:5f:
1a:05:02:7b:19:1f:ee:79:22:00:16:ab:e2:df:4d:9d:11:f4:
13:e7:88:5c:5c:99:75:01:33:57:e1:ae:69:4f:96:aa:c1:f3:
66:73:01:65:7f:14:f0:25:15:78:a6:ee:74:d9:5a:74:8d:39:
25:de:51:39:24:46:b5:9a:65:70:73:6a:00:8a:33:7c:1c:9e:
ab:bd:12:a8:20:8f:59:4c:4c:5e:a5:0d:3c:c7:10:f6:5c:c3:
c6:dd:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:37 2026 by rpki-client