Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File: w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier: nOYNeou5iHjxxm4QVllajmdVXNXP7rYlsanzMriIm/E=
Subject key identifier: B8:60:8D:F7:DE:18:D8:60:3C:C1:48:45:4B:58:7C:22:08:13:82:31
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer: /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial: 019D2771E8474633908D5E4383FD51ECBF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number: 0EF1
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: vi2Hi2822h1PjHjYizWDpkqsaKWUa0tzqUg+aZ6qQaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e8:47:46:33:90:8d:5e:43:83:fd:51:ec:bf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=b8608df7de18d8603cc148454b587c2208138231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:3d:bd:5b:d5:8e:e7:8b:02:9f:b2:95:50:
1a:89:10:3b:e6:a8:5e:e3:39:60:54:ff:cb:6c:e6:
d3:6c:6a:70:ac:5f:ce:41:29:91:08:e0:40:3b:94:
db:e9:ad:d3:06:27:ee:6f:5a:6b:a6:b3:6e:f1:46:
6c:df:5a:1c:13:d2:ad:23:62:18:6f:a1:08:a8:03:
97:08:6a:b4:17:59:1a:3c:90:23:bd:b8:99:27:18:
ad:d7:0e:88:6c:cd:54:85:40:b1:a1:8d:4d:38:71:
43:f2:27:49:c5:16:5a:ff:0e:0c:ba:c1:20:5f:90:
b0:b6:32:7f:8d:43:bc:ea:a6:b3:31:ba:53:56:f6:
0e:0e:87:95:c0:fb:37:f9:9b:95:cf:a9:ee:b6:26:
88:b0:8a:af:80:ba:8b:5c:13:6a:2b:96:b8:2d:63:
d4:b7:71:89:d1:bb:9a:34:fd:2a:66:88:7e:ee:a0:
ae:a8:71:bc:41:2a:2b:e1:48:d0:67:63:e8:7c:3a:
6a:54:e7:61:71:2d:b1:87:33:55:02:ea:02:5f:74:
4f:d2:67:f8:11:27:61:b4:bf:bf:f5:69:ad:6e:66:
a1:9e:7b:aa:2d:db:ba:64:e8:66:b0:41:ee:59:a1:
d3:b4:93:67:e1:41:02:56:7c:1f:82:a6:1f:2f:8a:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:60:8D:F7:DE:18:D8:60:3C:C1:48:45:4B:58:7C:22:08:13:82:31
X509v3 Authority Key Identifier:
keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:a7:9a:69:53:28:74:3b:c3:48:65:08:49:9e:04:af:b6:
e2:e8:ae:92:5b:92:26:90:86:46:f7:f0:1e:16:2f:e5:79:8c:
cf:61:ef:c0:b7:52:4d:04:a5:56:b6:25:7d:5e:0d:90:10:ff:
c4:6e:9c:b1:ba:33:ac:22:59:07:a6:aa:2c:c7:7a:cf:1f:3c:
8c:5a:25:45:05:c9:03:fa:f4:ab:01:e2:13:b0:81:84:f3:c9:
57:a5:fb:33:4d:e7:1d:63:66:a2:24:78:6d:e3:c9:d6:93:d7:
c3:55:be:d2:ee:56:b3:53:6b:36:58:12:bb:9f:0f:8e:19:1a:
31:af:92:05:cd:26:5d:97:33:49:8b:91:e7:ae:c6:b4:e9:05:
35:ce:d8:53:d5:23:09:b5:ff:7b:0a:c4:3a:1c:f7:58:64:ad:
5d:24:b8:77:09:85:9f:43:68:c4:23:d0:95:53:89:78:8d:03:
72:3b:4c:4d:7d:0a:17:06:1d:79:67:af:90:5f:a4:f6:7f:c2:
a1:48:d0:2f:c9:7a:57:0a:79:e2:ff:68:0a:5a:f3:67:9f:f2:
5c:46:e0:66:3d:64:f9:64:49:1c:5d:31:d5:69:cd:0e:2f:9e:
5e:e2:e9:e7:90:08:5f:93:c3:15:e8:cc:40:e1:37:18:c7:c8:
15:ed:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:37 2026 by rpki-client