Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
File: w9bWn9WH0FQXblPRknJoI2GxZzY.mft (raw, json)
Hash identifier: Po7Yne8GT/yIAol4z5ajZORuk8w7B69SoK7jEiMm6X4=
Subject key identifier: 91:AE:20:04:3F:CD:B6:99:5E:4D:4B:DF:3D:DD:61:DC:5A:4C:DF:64
Authority key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
Certificate issuer: /CN=c3d6d69fd587d054176e53d19272682361b16736
Certificate serial: 019D270419F8D2DE7F3EFB5C32256EB3A233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:13 +0000
Manifest this update: Wed 25 Mar 2026 22:01:13 +0000
Manifest next update: Thu 26 Mar 2026 22:01:13 +0000
Files and hashes: 1: w9bWn9WH0FQXblPRknJoI2GxZzY.crl (hash: lOiiQ1E364A5qvi3Nb40amGnFXP70hDww78mhGYal4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:19:f8:d2:de:7f:3e:fb:5c:32:25:6e:b3:a2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3d6d69fd587d054176e53d19272682361b16736
Validity
Not Before: Mar 25 22:01:13 2026 GMT
Not After : Mar 26 22:01:13 2026 GMT
Subject: CN=91ae20043fcdb6995e4d4bdf3ddd61dc5a4cdf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:77:df:2b:9f:e3:1b:ce:10:20:8f:cb:31:
df:12:6d:0f:0a:67:06:db:ff:a1:04:ad:06:2b:dd:
86:38:98:b4:9c:27:e6:6c:48:14:bb:8f:1a:ab:fc:
e5:81:ad:ce:94:d3:78:4e:27:f0:5a:9a:c9:87:4c:
a3:08:d0:0f:af:58:80:ea:a8:57:52:6d:87:e3:a4:
94:f7:a0:d0:ba:4a:90:b7:df:ec:4e:61:1e:d4:2b:
10:2f:73:6d:db:28:43:e4:79:ee:2f:c1:08:86:f0:
24:cb:96:d1:3a:94:46:02:66:a0:4f:a7:c9:9c:3e:
b4:a3:6f:a8:91:43:38:10:6a:57:b5:c1:89:95:3d:
79:66:11:cc:f9:3d:a3:83:c6:b2:88:6e:b1:6a:a8:
4b:64:5e:5d:c1:8c:9d:8e:9a:5a:e3:d6:6d:cb:95:
d4:85:f8:0b:2d:66:b4:25:38:ba:55:24:05:c5:15:
17:f9:48:2b:a3:d4:ee:b7:a1:20:b5:fd:31:23:fc:
c2:db:06:2b:81:a5:a4:fe:94:96:f8:50:4d:67:6a:
9b:40:64:29:f1:6c:4e:8b:63:74:b6:4c:10:16:0c:
46:fb:1c:63:e2:44:90:ea:58:1a:2c:91:e6:42:14:
1f:3d:54:2d:ad:6b:21:43:fe:0a:e6:b7:1c:cd:96:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:20:04:3F:CD:B6:99:5E:4D:4B:DF:3D:DD:61:DC:5A:4C:DF:64
X509v3 Authority Key Identifier:
keyid:C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:bf:4d:fa:4e:b0:f8:23:82:da:12:38:5b:34:e3:3c:29:
1d:d8:93:db:a4:31:be:44:73:40:1d:0f:db:31:d9:7d:94:9a:
fc:0a:78:6b:b6:89:6a:c2:b6:dc:63:bd:5e:ed:0e:f7:f4:81:
0f:8b:da:08:5f:ff:75:1f:61:61:8c:2f:e3:f4:2c:fc:8a:fe:
5a:5a:19:0d:a3:fd:e5:e3:ea:51:b4:b6:1a:cb:a6:f3:49:94:
cd:f2:d5:89:9e:b2:c7:3a:de:4b:c6:67:dc:d9:10:d4:38:2c:
22:c4:ac:74:f5:25:46:8a:61:19:e9:1f:6f:8a:d8:88:b4:8f:
1f:94:6f:b8:72:a8:53:ba:6b:76:5e:36:78:fc:b6:9c:a2:b5:
b6:a9:1b:bc:65:d9:62:2f:3e:b1:fa:3e:4f:bd:ed:89:db:96:
04:4a:a1:2d:e7:89:84:cc:a6:aa:14:5d:68:73:80:d9:f0:3b:
cc:c3:95:fb:6f:6e:b2:99:1a:7a:dc:f7:0a:f8:b9:21:95:90:
45:2e:36:fc:c1:ed:56:c7:48:1a:f6:6e:85:d6:7f:11:54:b1:
f4:f6:60:3f:d1:a9:2d:d5:6b:05:50:06:14:59:a2:72:84:6a:
40:49:71:5a:1d:70:ab:48:3d:18:d6:2d:6d:a2:6d:a6:15:35:
5b:85:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:29 2026 by rpki-client