Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier: Ez4wh8gbj6JtfcjIU3K5bovD1xlrSRaXJ0aTGwyy81A=
Subject key identifier: A9:90:46:B4:03:AE:32:F2:B9:33:6C:B8:40:0D:D2:FD:50:15:86:C5
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial: 019D265FFF531CE94A9352864F0A87B7BAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number: 0EA6
Signing time: Wed 25 Mar 2026 19:01:58 +0000
Manifest this update: Wed 25 Mar 2026 19:01:58 +0000
Manifest next update: Thu 26 Mar 2026 19:01:58 +0000
Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: Srz6clKC+ajo65FISk+2sE73hrYpO8ByXwesJpKrLRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ff:53:1c:e9:4a:93:52:86:4f:0a:87:b7:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Validity
Not Before: Mar 25 19:01:58 2026 GMT
Not After : Mar 26 19:01:58 2026 GMT
Subject: CN=a99046b403ae32f2b9336cb8400dd2fd501586c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:75:42:e1:a0:ad:0e:a1:6d:4f:53:42:06:
77:46:d3:ed:c3:d0:e5:5d:96:96:32:a2:9a:63:4d:
4f:0d:de:f0:49:18:8a:4d:39:15:f4:94:ed:72:e3:
ba:8e:3f:61:38:58:1d:e6:85:02:7e:ff:46:0f:bd:
d7:79:be:bd:3d:29:91:0e:b3:99:18:77:df:f1:22:
b9:6b:16:af:f8:d6:23:41:06:47:17:87:6b:e5:a5:
6c:41:4b:32:93:5c:8f:c5:36:66:be:32:c9:fd:13:
98:bd:b1:c6:01:b3:f2:79:5a:ee:e6:8a:8c:b2:2a:
e9:01:a4:be:34:25:5b:d6:75:07:b2:cd:31:47:97:
27:ad:68:c0:92:ba:36:c2:97:48:79:be:d1:f3:47:
66:50:25:48:a1:22:0b:27:31:8d:2f:cb:5a:17:d8:
1e:e1:0e:98:aa:88:b9:72:c6:de:59:6d:62:ec:0f:
86:ad:c5:ae:29:5b:87:de:a4:52:64:1c:71:d3:e2:
c7:ca:e6:42:bb:c1:52:7b:d7:20:28:42:bf:12:87:
38:62:f7:ca:b9:f7:96:a1:34:30:7f:06:ac:e3:c7:
37:36:e9:08:cf:21:d0:ee:b1:aa:5e:52:a4:1e:9f:
65:29:4a:08:16:08:7a:39:6b:8a:e2:17:80:9a:7a:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:90:46:B4:03:AE:32:F2:B9:33:6C:B8:40:0D:D2:FD:50:15:86:C5
X509v3 Authority Key Identifier:
keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:87:bb:9e:b8:31:bc:ae:98:ae:79:0c:77:1c:4f:05:f7:24:
10:d0:59:53:5b:e2:56:5c:0c:78:e5:63:40:c6:ba:c5:70:21:
29:ae:67:90:e1:c2:ae:1a:9b:dd:46:8b:b8:f5:88:a6:af:a2:
f2:fd:23:fa:2f:ad:76:91:02:b7:ee:f1:12:bb:20:96:8e:db:
2f:63:af:ae:89:e7:a7:80:80:72:8f:d5:7e:c0:45:45:99:47:
08:ff:58:d1:22:76:93:6e:92:eb:16:d2:e5:61:58:9e:31:9a:
73:47:cf:34:2e:76:ab:2f:5d:05:ac:32:88:12:6f:bb:29:a1:
35:55:60:46:c6:44:ed:f8:cf:9a:af:86:8e:d6:5b:4c:6b:a1:
7c:db:6d:ee:6f:a3:46:4d:18:c8:a4:c2:75:98:e5:d2:7d:46:
cc:e2:f6:d8:ee:5e:c6:29:b7:9d:4b:aa:8b:06:3d:22:c3:8b:
21:6b:40:41:5a:e4:d8:05:34:91:0b:d3:a9:17:64:95:ed:b4:
b4:2f:3a:2a:b6:c0:ef:c4:3d:22:aa:bd:56:37:65:94:0f:94:
bb:2e:6f:b1:17:ad:24:ef:4f:6f:7b:b7:84:fe:30:f4:0b:08:
c4:6f:17:c1:d6:e3:be:86:3e:34:24:c6:80:86:62:45:f1:f8:
ef:1c:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:25 2026 by rpki-client