Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier: EF2D8Tevtq4AuJYb4b3dkCieqRuX7533eeCI3XIZVvQ=
Subject key identifier: 78:C4:76:F3:22:FF:F5:47:3B:0B:F3:F8:A8:85:42:B3:1D:CA:4C:A4
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer: /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial: 01A0D26E38B7AF2D74E83437F6C9767A1C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number: 1A67
Signing time: Thu 24 Sep 2026 08:00:33 +0000
Manifest this update: Thu 24 Sep 2026 08:00:33 +0000
Manifest next update: Fri 25 Sep 2026 08:00:33 +0000
Files and hashes: 1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: yjGdFXttWZQQcJ6mPKnIeOZEk1tW/HaPi6uzSXd9YcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:38:b7:af:2d:74:e8:34:37:f6:c9:76:7a:1c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Validity
Not Before: Sep 24 08:00:33 2026 GMT
Not After : Sep 25 08:00:33 2026 GMT
Subject: CN=78c476f322fff5473b0bf3f8a88542b31dca4ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:b6:93:ac:48:4e:f0:58:39:2f:6d:5a:8e:
c4:44:ce:52:06:0c:3c:ce:59:60:87:ce:60:d2:2c:
6a:db:61:e2:dd:74:6e:45:24:bc:ac:b1:8e:8e:05:
06:a1:d2:c8:fd:b4:aa:36:00:56:25:31:f5:11:ac:
99:88:a9:94:36:2a:cf:9d:56:7b:cb:0e:e3:8e:96:
bc:15:50:d4:ee:9a:c3:7a:d5:c6:9c:5f:55:e8:6f:
2d:b3:d6:e0:d3:11:53:59:61:bf:51:3e:3e:21:77:
0c:dd:73:e4:b9:44:07:06:08:6e:66:d9:48:9b:64:
e8:56:3d:5f:da:e3:d8:14:a5:8d:20:ac:64:cb:22:
bd:ed:f4:00:5d:35:5a:3f:31:85:76:ba:95:9c:b2:
ed:91:c3:80:39:61:d7:97:6c:2d:6d:84:f8:69:fb:
e0:7f:d9:57:df:47:e8:36:bb:d0:2f:a6:0a:08:5c:
b5:db:c8:ad:8a:32:cd:f9:8c:bf:e7:7c:6d:f3:d4:
59:58:85:b1:45:a6:d5:10:3e:ad:03:df:3a:9a:50:
e9:7f:74:3d:79:31:a7:de:28:ff:7b:e5:9a:09:c6:
1b:4e:f2:aa:2f:4a:bd:3e:4e:dd:6f:62:45:4a:ae:
84:ab:11:4b:87:80:42:42:90:97:d7:0f:44:47:f0:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:76:F3:22:FF:F5:47:3B:0B:F3:F8:A8:85:42:B3:1D:CA:4C:A4
X509v3 Authority Key Identifier:
keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:81:5e:00:fd:c4:41:ac:3a:06:b3:b3:52:3b:26:35:b9:ee:
b5:99:95:6e:5b:22:f4:11:26:b6:1a:3b:86:55:3a:63:d5:2f:
74:56:67:1b:f8:ea:10:81:df:f9:a7:75:29:51:0e:f1:50:48:
0e:5b:58:19:2a:29:69:b7:76:9a:33:bb:ca:09:98:32:9a:c2:
87:04:3b:57:75:a1:55:10:49:65:a1:c4:8e:5a:e2:d6:a6:f5:
a8:f1:da:93:5c:d0:c4:b5:73:b5:40:af:77:cc:b6:5c:fc:f2:
07:14:bc:d2:79:2a:fd:4d:c4:4b:ac:be:43:4e:25:7e:25:64:
7b:5e:7a:7e:6b:ca:12:06:d6:63:83:19:8c:66:31:31:de:28:
f9:22:cf:38:0b:57:2d:fe:55:99:ad:40:5f:2d:65:c3:87:23:
08:d7:d5:10:64:c5:63:74:7c:37:5e:6c:e8:34:06:9e:74:79:
ec:c6:49:8b:17:fd:7d:60:f2:11:f5:c4:f4:d7:37:40:54:22:
71:92:d5:7e:9d:48:01:c1:9f:7e:21:63:29:68:75:54:78:9d:
c1:c4:25:41:db:09:33:ab:44:80:f3:3c:0f:16:8a:cb:7e:09:
d1:c5:cd:e5:67:60:7e:98:2e:ab:f2:eb:dc:19:ca:b2:74:b8:
08:70:d8:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbji3ry106DQ39sl2ehyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjJkNGNkMGMxYTlmZmUyNGFkNTE1M2QxOWNlOWMzMWRj
YjRjN2QwHhcNMjYwOTI0MDgwMDMzWhcNMjYwOTI1MDgwMDMzWjAzMTEwLwYDVQQD
Eyg3OGM0NzZmMzIyZmZmNTQ3M2IwYmYzZjhhODg1NDJiMzFkY2E0Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjC2k6xITvBYOS9tWo7ERM5SBgw8
zllgh85g0ixq22Hi3XRuRSS8rLGOjgUGodLI/bSqNgBWJTH1EayZiKmUNirPnVZ7
yw7jjpa8FVDU7prDetXGnF9V6G8ts9bg0xFTWWG/UT4+IXcM3XPkuUQHBghuZtlI
m2ToVj1f2uPYFKWNIKxkyyK97fQAXTVaPzGFdrqVnLLtkcOAOWHXl2wtbYT4afvg
f9lX30foNrvQL6YKCFy128itijLN+Yy/53xt89RZWIWxRabVED6tA986mlDpf3Q9
eTGn3ij/e+WaCcYbTvKqL0q9Pk7db2JFSq6EqxFLh4BCQpCX1w9ER/CNAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjEdvMi//VHOwvz+KiFQrMdykykMB8GA1UdIwQY
MBaAFNFi1M0MGp/+JK1RU9Gc6cMdy0x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Zjg0YTEtZThkYy00MTE1LWE2NDUt
ZTgxNzIwYTM5NzhkLzEvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81Zjg0YTEtZThkYy00MTE1LWE2NDUtZTgxNzIwYTM5Nzhk
LzEvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4FeAP3E
Qaw6BrOzUjsmNbnutZmVblsi9BEmtho7hlU6Y9UvdFZnG/jqEIHf+ad1KVEO8VBI
DltYGSopabd2mjO7ygmYMprChwQ7V3WhVRBJZaHEjlri1qb1qPHak1zQxLVztUCv
d8y2XPzyBxS80nkq/U3ES6y+Q04lfiVke156fmvKEgbWY4MZjGYxMd4o+SLPOAtX
Lf5Vma1AXy1lw4cjCNfVEGTFY3R8N15s6DQGnnR57MZJixf9fWDyEfXE9Nc3QFQi
cZLVfp1IAcGffiFjKWh1VHidwcQlQdsJM6tEgPM8DxaKy34J0cXN5Wdgfpguq/Lr
3BnKsnS4CHDYMQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:55:37 2026 by rpki-client