Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier: kWZtK/OAU1J49nOmU4jF5Hnzk1kObQbUpgQrJ30Q6K8=
Subject key identifier: 2F:EB:EB:67:7D:67:0B:38:3C:2C:4D:CA:EB:63:F9:0D:01:D6:84:0B
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial: 019D2703C4958C4DB4734B49EAFC453F57B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number: 1676
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: d96pJgGoVfhbR62HhkK61ud9UarqaXomChBtchj42AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c4:95:8c:4d:b4:73:4b:49:ea:fc:45:3f:57:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=2febeb677d670b383c2c4dcaeb63f90d01d6840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:32:97:16:3d:68:7f:4b:85:c1:2a:1f:b6:
50:c0:71:48:56:dc:51:87:38:62:c1:b8:0d:06:a1:
99:22:ef:a8:ae:f5:ae:c8:54:b9:fc:69:da:ce:64:
86:ff:09:58:66:bd:fa:7b:81:0f:7e:9b:fb:b9:f4:
fd:23:ef:29:cd:25:7c:a2:a0:05:e6:e9:bb:d0:95:
9d:95:18:01:00:08:74:c3:c6:4e:43:de:6f:0c:58:
28:51:3e:6b:d6:84:e1:7a:6c:7a:31:59:3f:87:31:
76:49:fd:88:0c:62:3f:a6:ec:88:91:58:0c:89:98:
de:cc:81:5a:30:d8:fd:8a:33:6c:23:72:ab:a4:58:
07:ed:de:1c:3c:b1:25:cd:2a:a9:5b:3d:70:c6:0c:
3e:1f:50:28:e7:84:f3:34:53:9d:a5:7c:31:ab:78:
1e:30:29:53:95:e8:24:d6:f7:83:40:cd:3a:20:c9:
b3:d9:bb:c3:a6:ba:e9:0d:3e:2a:81:20:d3:63:61:
e7:58:95:72:b8:c7:1b:53:de:9b:5f:42:c4:20:fc:
a2:57:ec:c9:cc:fe:d3:e2:26:49:4a:b7:72:d0:1e:
5f:7a:95:96:01:60:93:55:a6:7d:9f:4d:1b:8f:19:
2d:1b:bc:fa:b0:b6:0d:2f:73:09:98:18:d7:bf:56:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EB:EB:67:7D:67:0B:38:3C:2C:4D:CA:EB:63:F9:0D:01:D6:84:0B
X509v3 Authority Key Identifier:
keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fc:6a:a1:cd:04:bf:d1:5b:0c:b9:32:44:cd:5b:20:00:b3:
70:44:be:75:3e:26:93:57:12:2f:63:23:b3:8f:3e:13:41:51:
98:03:0d:6e:ea:59:f8:bd:f1:ca:8f:ef:2c:05:36:dc:d4:47:
70:16:6c:b8:33:89:47:e3:36:d4:d0:9b:54:3e:9a:5e:35:39:
ca:4d:70:e9:47:04:2b:e6:e9:74:30:fb:c6:5a:09:34:e8:36:
66:cd:1b:26:23:77:f3:ba:d9:5c:fe:ef:ba:6f:53:d6:26:d1:
f1:a1:13:28:3a:35:d3:d3:ed:2d:4f:52:88:1a:af:b5:cd:f3:
33:67:f8:25:8f:77:43:3e:b0:87:a8:1b:df:da:a4:ae:ff:ff:
5b:41:ff:38:50:55:9d:42:e1:b2:e9:3f:f0:c9:17:92:a7:2f:
6a:c6:93:ee:da:1c:4a:b1:f0:4d:68:5d:53:e9:a6:ad:eb:b2:
0e:64:c5:ef:93:d4:bc:67:0a:b2:87:15:5d:f6:eb:14:25:53:
f0:ad:d1:f1:06:41:60:10:29:03:bb:58:9b:23:f7:4a:a4:1f:
19:64:f7:14:e1:a5:f4:7f:cb:39:d1:a7:0f:37:e0:32:ae:f1:
a6:4b:55:35:82:e8:9f:cc:61:8b:1d:d4:d5:6e:a4:bf:8f:a8:
c7:3c:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:01 2026 by rpki-client