Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: kDj24kHjjJfFk+N0o953sKyQq2z+5HJXyc4RogJ47L4=
Subject key identifier: 5A:D8:42:9E:4B:B8:1C:43:28:65:D1:8C:57:61:2E:53:8F:40:18:5C
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 019D277202E07B27117001A3C30DE963A169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:16 +0000
Manifest this update: Thu 26 Mar 2026 00:01:16 +0000
Manifest next update: Fri 27 Mar 2026 00:01:16 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: XTmCwC7ITarkVyNnhu6G+dAMwk+lPmCKl+BGF1CVtjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:02:e0:7b:27:11:70:01:a3:c3:0d:e9:63:a1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Mar 26 00:01:16 2026 GMT
Not After : Mar 27 00:01:16 2026 GMT
Subject: CN=5ad8429e4bb81c432865d18c57612e538f40185c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d3:7c:0a:af:b2:0e:96:31:47:ac:98:df:eb:
b0:2b:dc:eb:e8:94:1c:a4:41:64:27:96:b6:7c:2e:
12:01:de:d4:cc:44:1d:0e:d6:4b:25:8f:ae:44:7a:
30:84:99:5c:30:44:16:a5:6c:dc:e5:c8:7d:3e:dc:
68:32:bd:8e:99:99:72:22:6d:ed:ce:68:09:92:94:
13:86:5a:f8:bb:3f:20:78:7f:1e:2a:83:a5:25:24:
2c:76:3e:a2:b2:32:fe:44:2c:fa:d7:2b:ed:e5:cf:
59:94:32:b3:fe:35:77:9b:59:a9:bd:4c:d4:20:a0:
ab:3f:b6:0e:8e:82:89:3a:77:d0:55:30:3c:8d:22:
80:ae:90:9f:0d:ea:8d:33:6f:ae:a9:a6:f4:3e:c5:
f7:7a:93:7d:53:ac:f7:88:62:4c:38:82:a2:dd:e1:
b2:4e:26:ba:f8:be:69:68:b4:81:1e:53:98:ec:08:
59:ae:8b:3b:31:62:bf:f8:21:59:77:55:88:46:35:
e2:c4:95:1e:88:52:4d:6d:62:da:e6:de:f2:3c:e0:
5a:ef:ac:46:68:ba:ab:65:37:a7:c3:df:cc:cd:5b:
2e:94:bc:42:09:f7:2a:30:66:bd:6a:82:b0:66:8f:
97:b8:2c:98:71:67:fc:f7:db:15:9e:41:f8:1e:94:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:42:9E:4B:B8:1C:43:28:65:D1:8C:57:61:2E:53:8F:40:18:5C
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8b:b9:dc:4b:7c:a3:7e:1d:fe:15:c0:37:48:5c:fe:17:6d:
d7:bf:80:2d:5f:5c:0a:4d:66:27:7f:3b:f3:31:3b:7e:d3:21:
56:e6:c4:b5:9b:99:84:46:02:2d:bd:38:c4:7f:58:4d:f9:bf:
95:c1:fe:c4:6f:1c:4a:29:ce:be:e3:2f:d9:dc:af:62:b5:46:
a5:62:e6:fd:d3:e9:e4:2b:5d:a7:60:98:58:65:26:ac:2b:b2:
bb:84:2c:1e:91:34:5d:e7:6f:8d:5c:c2:a5:15:12:67:95:2f:
64:9b:ed:be:4c:49:9c:ce:35:67:ab:88:c8:bb:25:d9:39:22:
5c:56:27:ee:f3:80:cb:33:da:39:4a:ce:37:b3:f4:0e:fe:d6:
96:90:13:05:e8:b4:85:2e:9e:6d:67:bd:f7:bb:f9:ad:1f:e9:
57:fc:d5:28:ca:0a:85:e8:53:46:04:b5:02:6d:62:59:97:a1:
07:e5:92:d2:68:69:42:1c:9f:fd:33:ac:61:92:66:6f:80:a3:
af:e9:a9:67:c5:0a:de:8d:a1:c9:e5:4e:ea:26:28:e7:c7:b1:
31:bc:7e:8a:71:1c:b8:13:ec:1b:7d:dc:04:1c:97:95:bd:bc:
03:1d:c1:e1:04:ef:8b:5f:af:c8:62:2c:1d:f4:56:13:17:42:
aa:e8:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:11 2026 by rpki-client