Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
File: WZypahnO8ifMM7NFhZaqRV0rePg.mft (raw, json)
Hash identifier: KZIyQIX8ikUHbNjK22RidqpkzXyMPwI7CNO7nNyEDB0=
Subject key identifier: EA:6B:13:17:0F:8A:6D:01:16:40:EC:E3:1E:6B:88:08:C0:1B:8E:63
Authority key identifier: 59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
Certificate issuer: /CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Certificate serial: 019D273A9D6B63108BBEEB5ECD921B975C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
Manifest number: 07E4
Signing time: Wed 25 Mar 2026 23:00:45 +0000
Manifest this update: Wed 25 Mar 2026 23:00:45 +0000
Manifest next update: Thu 26 Mar 2026 23:00:45 +0000
Files and hashes: 1: WZypahnO8ifMM7NFhZaqRV0rePg.crl (hash: uNMAcQJMRxEQNzmWWyAdT261Nf+nGx2BUJ5XuPDpsdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9d:6b:63:10:8b:be:eb:5e:cd:92:1b:97:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Validity
Not Before: Mar 25 23:00:45 2026 GMT
Not After : Mar 26 23:00:45 2026 GMT
Subject: CN=ea6b13170f8a6d011640ece31e6b8808c01b8e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:ec:0e:ef:d7:22:c3:e5:2d:cf:1a:50:f2:
91:2b:66:bc:71:27:a5:ac:59:d3:e4:73:2f:57:aa:
3b:8d:91:ab:43:d2:75:76:95:eb:b6:af:79:10:5b:
1e:21:80:d3:62:25:fa:a6:e3:22:27:9f:ea:c8:93:
89:c4:24:0a:51:15:34:89:15:29:01:ef:03:2e:64:
b6:27:01:a5:71:bc:3a:13:1b:61:bf:16:85:82:a9:
6b:e2:77:1e:7b:c9:cc:9b:cb:b0:bb:53:13:17:f7:
8e:9d:a9:54:3c:fb:68:6b:b7:3a:bf:dc:36:8e:75:
56:5a:52:3d:f5:7e:e8:7e:85:21:ac:8e:2b:80:48:
21:3b:3f:a5:90:7f:b6:7a:42:0b:d9:cd:f2:65:a1:
0e:f1:36:a9:cc:34:3a:f8:44:2c:d0:31:b1:fd:e5:
a9:a3:33:79:29:51:c4:59:f1:d4:2d:ec:65:d3:71:
3d:10:8a:e6:e9:af:9c:18:65:38:54:39:1e:20:d0:
ae:0a:76:c9:b0:55:62:7a:de:fe:7f:1c:71:dd:30:
9c:d5:0b:c0:86:13:b3:c4:bd:eb:8a:1a:5d:42:23:
ab:95:13:79:f6:24:43:d3:5b:15:9f:93:6a:9c:22:
f2:4e:5d:f2:40:14:b2:a6:60:73:7d:d7:96:86:36:
ce:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:13:17:0F:8A:6D:01:16:40:EC:E3:1E:6B:88:08:C0:1B:8E:63
X509v3 Authority Key Identifier:
keyid:59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:44:04:7a:bf:ba:21:7f:70:38:9c:71:6b:0d:e9:ba:c1:08:
81:05:a3:a6:77:ca:0a:5f:bd:92:2a:ed:89:b3:21:28:a6:30:
e3:ee:29:5e:c0:35:a3:8a:b4:f1:7a:f4:e9:e2:0a:20:f5:58:
5b:c8:4f:38:12:62:6b:a2:73:e3:68:7b:fd:d1:7c:11:0b:db:
7d:1d:2f:13:60:44:77:85:c2:46:df:3f:fb:71:eb:61:99:25:
53:07:e9:26:c8:5e:8a:92:2f:e5:8d:22:b4:ec:b7:52:bc:66:
a5:e6:fa:e4:79:fc:a7:d0:68:70:62:fb:1b:cc:90:02:69:c4:
43:b2:f3:91:47:e5:b1:d0:08:20:25:4b:77:25:b2:e5:09:52:
fc:3f:1f:39:24:40:ce:8d:d0:a4:89:3a:15:8e:05:c8:2b:59:
cb:31:99:08:0a:41:4f:dc:9b:1d:cb:a2:dc:b0:e3:59:ea:a3:
bc:aa:bf:f0:44:91:87:ce:09:82:e7:76:e9:fb:33:a6:8a:f6:
fb:75:63:fc:a3:ff:7c:a0:13:ec:cd:fd:ea:66:75:ca:68:ba:
27:cb:c6:1a:fe:ec:bc:07:de:73:c4:ac:e2:4f:9c:50:e6:80:
d7:13:5e:3b:4a:0f:a6:62:f3:e6:94:c2:ed:e1:92:3f:2d:40:
eb:7c:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:35 2026 by rpki-client