Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File: wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier: SIlEsDwKBrve7SMTuQXNfLDhetFB3ZZrfQvi4Ebl2MM=
Subject key identifier: 15:EB:30:DE:5C:E5:91:80:F8:D6:CE:CD:7E:0B:5D:EC:32:BA:EC:F9
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer: /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial: 019D284E2927601072B1ED81FC5623622AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number: 05DF
Signing time: Thu 26 Mar 2026 04:01:44 +0000
Manifest this update: Thu 26 Mar 2026 04:01:44 +0000
Manifest next update: Fri 27 Mar 2026 04:01:44 +0000
Files and hashes: 1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: A4XrpHl6BMZo5oxEhVmhVvhAu7wpPPN6AZfcY78fZr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:29:27:60:10:72:b1:ed:81:fc:56:23:62:2a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Validity
Not Before: Mar 26 04:01:44 2026 GMT
Not After : Mar 27 04:01:44 2026 GMT
Subject: CN=15eb30de5ce59180f8d6cecd7e0b5dec32baecf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:cc:51:af:01:d2:39:6d:a2:5d:6b:69:43:
f9:75:b9:5a:2d:9b:6e:71:39:8c:ce:ac:37:75:c8:
b5:29:6f:8f:8e:87:34:f4:5e:9c:89:91:ae:48:25:
25:79:78:64:c8:59:36:e1:9f:bf:3d:46:91:97:57:
75:ee:4d:c2:0c:3d:d7:ee:2a:69:da:da:97:25:31:
27:aa:fd:77:ee:8b:2a:b3:13:35:0f:03:6e:9a:cf:
c6:0e:bd:eb:5d:4f:55:38:f1:2f:54:24:55:89:bc:
8a:ef:00:c1:e7:09:b5:67:2e:8c:d2:4c:65:b1:f7:
e5:1b:c2:c3:5c:86:5c:7d:83:9e:43:c8:45:01:89:
f1:4c:b6:61:ba:d0:56:e8:54:5c:62:98:5f:3b:68:
8b:64:6a:9a:5e:5e:5d:98:cc:a8:86:06:fa:99:14:
61:e7:98:a8:2a:2e:67:f2:31:87:8d:4a:b7:df:0b:
8a:35:31:42:c8:80:bd:69:46:c7:f4:f2:36:c1:7e:
e9:9f:c8:b3:11:f5:bc:dc:a5:5a:51:3e:8e:ea:b2:
b5:9b:91:2d:ca:5b:08:b9:49:fd:29:ec:fa:8a:5b:
1b:ad:35:29:d1:1f:ee:e1:2d:91:0a:bf:48:10:eb:
79:3b:36:cb:9f:9b:a3:09:64:65:4e:15:52:16:68:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:30:DE:5C:E5:91:80:F8:D6:CE:CD:7E:0B:5D:EC:32:BA:EC:F9
X509v3 Authority Key Identifier:
keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:66:bc:cc:db:cf:96:ec:71:f0:7f:6a:ac:67:84:ef:7b:fc:
9a:73:fc:d3:06:27:cb:1b:72:ac:ac:24:21:6b:ed:e0:38:98:
a9:9d:f6:77:b0:e0:8f:cf:1c:42:05:6d:89:bf:ab:2a:1a:5a:
2f:ac:e3:f5:b6:d9:c3:8a:ea:7a:2f:39:f8:09:42:eb:7e:d4:
6c:17:dc:89:7d:fe:bd:b0:c5:9b:79:bf:b9:eb:b2:e1:52:43:
94:5d:26:fb:29:e9:b9:8f:3a:e6:89:b4:29:65:ea:9c:21:2f:
12:27:9e:42:6a:cf:b0:32:75:a6:a1:9c:34:e1:b6:f0:15:e8:
81:55:02:cd:94:55:a3:72:31:0f:0a:08:fe:97:cf:16:31:86:
a2:6f:7c:be:b7:08:62:44:2e:ce:04:61:fc:96:32:c3:c3:ff:
04:b8:dd:0f:5b:6c:77:69:48:e3:57:e1:a1:59:08:03:c0:86:
6c:57:91:56:0f:d0:08:63:00:02:cb:16:a4:c6:10:87:8e:f9:
ad:91:d3:2c:24:9f:01:7e:3e:08:2e:16:6a:10:3d:67:fc:d0:
44:de:4d:e0:df:b6:ee:20:e7:49:06:c5:bd:7a:79:de:5e:57:
42:92:1d:58:9e:3b:f7:53:22:d2:70:26:1f:04:67:bb:77:af:
82:d0:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:09 2026 by rpki-client