Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: UXJhUAH8AGLV0xkdLsvhpKcFZ5x13r4GnISfCsByZkE=
Subject key identifier: 77:EF:32:7F:25:D8:A8:64:2A:C1:2D:7E:40:29:84:0F:AD:A8:F2:27
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 019D2703A8DFD7200F080DA8F695BD930D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 08A0
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: 9JNBvqZVXztIUOPe+HT7VhCfRLPpdnfY6q+tTcHVoi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a8:df:d7:20:0f:08:0d:a8:f6:95:bd:93:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=77ef327f25d8a8642ac12d7e4029840fada8f227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:fa:87:53:ad:eb:8b:34:ec:23:43:33:95:
f8:8c:78:fe:e3:1b:7e:77:0c:02:43:6b:4b:33:41:
4d:7e:d6:ba:e5:07:13:c3:ea:05:6a:a8:50:8d:bd:
27:06:7a:43:cf:58:92:49:71:93:22:f0:60:12:c3:
8d:d7:f9:d8:4f:00:1e:2a:c8:21:53:28:fb:30:d2:
7f:8a:d6:4c:e0:4d:7c:97:a7:e0:2a:56:81:15:36:
4f:66:4b:c0:b4:85:04:62:a5:f4:6b:f0:ff:7c:a4:
86:5f:6a:12:14:9d:0b:12:e9:34:9a:68:33:bf:6f:
f8:ff:9c:1f:86:e0:15:c0:19:1b:a5:d9:f5:33:82:
f5:e9:76:e2:61:15:08:7b:23:c6:d5:50:01:f0:b9:
c2:e6:d4:4d:af:ce:a2:1a:0b:3d:eb:2d:58:fe:f7:
71:0c:34:72:b9:28:f1:5b:9a:d9:7a:5b:74:50:7c:
b1:ff:c7:c3:b9:94:2a:63:50:2f:57:8c:ad:ca:73:
d9:03:77:ab:78:ef:3f:6e:de:8f:4c:a8:d2:3b:ec:
27:71:4e:8c:47:d4:a7:d7:6b:1e:9b:ad:97:bf:ba:
9d:26:f7:11:4d:67:13:be:57:82:7a:f4:86:1f:9f:
02:34:cf:99:3f:01:d3:cd:ae:1e:9f:71:59:f9:e6:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EF:32:7F:25:D8:A8:64:2A:C1:2D:7E:40:29:84:0F:AD:A8:F2:27
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:85:0b:60:f7:f2:7c:09:19:55:1e:98:2c:a1:65:61:9a:
91:7d:50:27:95:81:a1:4e:42:24:df:5a:bf:86:d2:1a:34:bf:
63:a7:99:f9:14:6e:91:fb:9d:ee:ec:7c:ea:d2:d2:24:6b:38:
f4:03:ff:ab:36:e5:78:30:4f:af:0b:d4:70:45:8d:1b:06:ce:
88:74:e1:08:00:34:f2:c3:f0:2c:d3:5b:35:7a:b8:a0:f5:cb:
13:eb:37:f6:d8:41:81:35:4c:10:b3:f4:3e:26:07:fe:ed:e1:
c9:d9:1e:b1:13:5f:4a:2b:79:b7:86:55:79:f5:1c:b1:f5:ca:
e1:a3:7c:5f:cb:d7:32:2c:b7:e4:e6:db:7e:4a:fa:16:b4:a6:
0e:8f:7d:6a:f5:76:cc:1e:77:fc:a8:b0:ab:58:88:d2:70:88:
fc:80:ea:07:b8:0e:e6:a9:ca:43:a2:08:3e:22:d1:9f:d4:44:
6c:54:7c:5f:de:0e:7b:50:96:a8:50:03:22:4a:56:8d:e6:9e:
21:fb:8e:67:eb:04:e8:b7:66:a8:0a:db:a1:82:80:91:c6:b9:
ad:1d:fe:ec:9c:be:af:30:fa:07:87:0e:ac:da:46:f5:47:97:
f5:68:01:fa:03:b5:21:db:45:d5:c2:4f:ea:f2:36:30:8f:77:
79:97:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:35 2026 by rpki-client