Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier: LQw5fqNrW5Das7gKaFzS8J11m3RYn09T9i7EgHhIRFo=
Subject key identifier: 79:0F:45:D1:9F:2B:74:C7:88:67:BA:E7:7B:D4:09:45:A2:52:C7:95
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial: 019D2704A25AE80353F90A7A8EBE26053867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number: 130B
Signing time: Wed 25 Mar 2026 22:01:48 +0000
Manifest this update: Wed 25 Mar 2026 22:01:48 +0000
Manifest next update: Thu 26 Mar 2026 22:01:48 +0000
Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: hH5FMxdZ1y98qu8Uw7z6cmWVIESqPUhDFR+1K3YmcNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a2:5a:e8:03:53:f9:0a:7a:8e:be:26:05:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Validity
Not Before: Mar 25 22:01:48 2026 GMT
Not After : Mar 26 22:01:48 2026 GMT
Subject: CN=790f45d19f2b74c78867bae77bd40945a252c795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:e9:4b:52:df:d5:79:1d:f7:8d:81:09:fe:
ad:a4:10:e6:45:2b:b3:d9:46:31:ac:25:6d:ee:a8:
94:c4:92:a1:d7:3d:da:cd:dd:a5:03:56:60:0d:c3:
88:98:60:24:e5:ef:57:d0:55:9b:35:3c:6f:33:72:
93:5f:26:7b:82:ed:f0:bd:85:c0:78:64:49:88:d1:
3d:fe:40:f0:bf:13:df:35:6f:56:0c:67:31:ce:ad:
eb:63:e6:86:62:ae:53:23:96:95:8f:32:7a:c6:20:
20:ee:1b:19:15:38:21:86:39:1f:2e:64:dd:09:12:
da:45:92:c1:7e:ec:a1:1d:43:76:5a:7d:ef:38:3b:
70:74:57:42:30:5a:6a:ff:f6:20:4b:01:62:cf:be:
e0:3a:c5:ba:78:98:24:e3:b7:df:ba:ec:b7:ad:0d:
5c:26:a6:74:ed:76:4d:53:65:ec:e1:1a:b2:9a:18:
be:f8:98:4c:32:af:fe:ee:05:34:1a:5f:61:e3:88:
04:e4:8e:a2:8a:07:7c:32:3f:8b:d8:be:d8:9a:01:
5c:5a:91:b5:df:54:a6:9e:b5:e5:36:c1:85:2b:49:
67:f8:c4:59:c7:71:5d:51:01:fb:3c:08:11:cc:75:
0f:17:3c:44:08:39:85:45:c0:f4:20:29:60:2d:6d:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0F:45:D1:9F:2B:74:C7:88:67:BA:E7:7B:D4:09:45:A2:52:C7:95
X509v3 Authority Key Identifier:
keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:59:d4:aa:fe:d6:91:02:cc:1b:fc:23:b0:42:88:8c:92:8f:
7a:85:93:e8:9e:68:15:a7:15:b2:4d:92:e6:f2:c2:58:d3:5f:
f4:11:6a:fd:81:6e:62:61:b6:50:4e:fc:69:c0:77:37:65:3d:
66:86:3b:ab:35:14:1b:05:47:ae:69:af:cb:b2:b5:1a:2c:ec:
d0:f7:fc:ea:85:bb:90:3a:4b:f2:da:09:61:36:d0:d3:56:4c:
1c:75:5a:23:2c:de:3e:33:1c:10:fd:d8:7a:34:18:58:f6:52:
88:61:10:2a:01:98:5e:7a:56:f7:d6:16:44:be:14:a9:13:aa:
ad:08:02:8e:27:2b:18:0d:12:8b:22:28:2e:46:61:e4:2b:6a:
93:2c:7d:11:c1:a7:c3:3b:27:e2:89:70:06:b1:03:bf:3c:66:
15:42:c1:50:c0:72:82:41:c6:f6:d2:d4:1b:97:28:7c:65:b9:
74:d1:b6:7b:49:45:6c:da:c2:d7:54:61:2e:f1:08:d9:87:62:
fd:e9:26:22:9a:e9:d4:9a:e6:af:8a:d4:a4:ff:19:40:6b:2b:
89:ef:75:b6:7b:07:1d:d1:1d:13:f8:eb:38:b2:d2:ab:5c:6f:
81:21:b6:11:c7:79:56:8c:1e:3d:ae:8d:76:12:15:bc:ab:fa:
2c:1d:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:11 2026 by rpki-client