Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
File: dWQLapVyPRupdqH7EJKDnpRrWyQ.mft (raw, json)
Hash identifier: BUWh3iFOLL7cq1GN00WaJEchm1+f01yS8FowOElPiz8=
Subject key identifier: 0E:CA:B6:03:73:77:12:1F:64:DE:23:15:C1:03:D0:2D:EF:26:04:FB
Authority key identifier: 75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
Certificate issuer: /CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Certificate serial: 019D27A8D9FDA518487E2E72C50307EA02C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
Manifest number: 028D
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: dWQLapVyPRupdqH7EJKDnpRrWyQ.crl (hash: qOGp3Y0AstEqZ42dRHOVRm+3OEDnTCW9M+hueVWcYas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d9:fd:a5:18:48:7e:2e:72:c5:03:07:ea:02:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=0ecab6037377121f64de2315c103d02def2604fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:92:6e:2e:5d:cf:9b:4d:62:28:9f:02:fa:
7f:48:f2:fb:1d:76:6d:b3:68:ed:df:d4:3e:0b:71:
e6:26:0a:fc:e0:5d:26:4d:fd:f1:d7:7a:f9:b7:21:
d1:8e:b9:d5:82:86:2c:ac:bd:dd:d5:b8:6e:fb:28:
5b:bb:82:c2:84:b2:a3:f4:68:83:14:e0:7b:31:72:
5e:47:33:98:b6:54:4d:3a:a7:d8:97:7a:4d:23:94:
d4:e4:63:c7:f6:8b:71:20:c3:0f:26:d2:b1:61:d8:
a1:ae:70:72:c1:02:e3:0f:a3:b9:6c:7a:fa:25:6c:
21:3b:ac:3e:67:1f:5d:9b:b6:e0:c3:72:a6:8d:24:
4a:42:3f:2e:0b:85:da:33:37:db:db:b2:f9:a6:bc:
91:b2:b5:8a:68:c1:b7:fd:92:6b:8e:bf:75:1f:5b:
3e:bc:51:59:0f:80:68:10:48:ea:4b:cc:38:0a:de:
7e:9f:2f:74:fb:1d:c3:bc:e7:65:6d:bb:f4:0f:18:
2b:55:c8:c0:49:38:87:d7:75:6f:88:ef:2c:37:c5:
f7:f7:3b:8a:da:83:9e:02:7f:77:f1:40:09:df:d7:
a7:69:ae:18:d0:14:cb:b9:b5:74:ca:3a:78:45:d6:
61:5d:fb:31:34:44:3b:5d:7c:6d:f9:59:37:23:35:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:B6:03:73:77:12:1F:64:DE:23:15:C1:03:D0:2D:EF:26:04:FB
X509v3 Authority Key Identifier:
keyid:75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8a:79:68:c9:24:d3:e3:9f:7b:aa:52:a8:62:f7:67:3b:3e:
9e:83:1f:5a:65:48:f2:ef:94:eb:81:5c:85:ba:64:17:86:95:
ac:5b:0c:1a:86:13:87:55:d1:44:17:fd:08:af:3e:fa:97:ba:
eb:1b:a5:e3:c4:00:4e:ca:32:7d:79:f6:1d:ca:56:87:9c:9b:
59:b0:4b:c7:04:f8:47:b7:68:7d:b0:a1:84:b5:95:0a:e3:e7:
41:92:0e:6c:bd:08:2b:8c:29:9b:d9:a3:02:ad:bd:05:b0:aa:
3d:3e:7a:0d:46:85:a0:dd:67:32:c2:43:b5:1c:c2:9e:38:3b:
1a:b6:45:b3:6c:ec:47:17:3b:26:88:15:14:c3:b3:fd:3f:8a:
47:9b:e5:d4:f6:7d:06:bc:2a:80:7f:99:7b:e7:18:e4:8b:8d:
68:41:d5:a8:4e:4a:00:b3:d0:96:83:0d:a1:33:70:9c:d1:95:
74:c5:0a:3f:5d:e3:cf:9f:da:df:37:07:2f:eb:33:27:0f:a6:
4d:f4:ac:98:0d:85:c9:61:5d:90:78:79:e3:fe:23:e2:f8:9e:
bd:5d:57:a1:00:0a:89:03:84:36:2d:fe:0d:79:f3:c3:d4:cf:
de:e8:b9:46:b0:40:b1:a0:29:59:bc:c8:49:5d:dc:48:56:91:
03:db:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:43 2026 by rpki-client