Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
File: wRruJS43JJTv7FA4vOZ6GtOHhtk.mft (raw, json)
Hash identifier: caL7+NqWLlkC1UJQROxNa/j0Na061sWbNZP6lGlr9pw=
Subject key identifier: 09:9C:53:31:6B:C1:48:F4:49:FD:25:7B:4F:1A:58:75:EB:48:08:DC
Authority key identifier: C1:1A:EE:25:2E:37:24:94:EF:EC:50:38:BC:E6:7A:1A:D3:87:86:D9
Certificate issuer: /CN=c11aee252e372494efec5038bce67a1ad38786d9
Certificate serial: 019D329B02B7E17684DDF52DD4D0C9CCE27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRruJS43JJTv7FA4vOZ6GtOHhtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
Manifest number: 2B
Signing time: Sat 28 Mar 2026 04:01:52 +0000
Manifest this update: Sat 28 Mar 2026 04:01:52 +0000
Manifest next update: Sun 29 Mar 2026 04:01:52 +0000
Files and hashes: 1: wRruJS43JJTv7FA4vOZ6GtOHhtk.crl (hash: x1uRjEIQO1qsx4yNBPe1kzqBhQXDWo0W5Jlb+pXQopE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRruJS43JJTv7FA4vOZ6GtOHhtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9b:02:b7:e1:76:84:dd:f5:2d:d4:d0:c9:cc:e2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11aee252e372494efec5038bce67a1ad38786d9
Validity
Not Before: Mar 28 04:01:52 2026 GMT
Not After : Mar 29 04:01:52 2026 GMT
Subject: CN=099c53316bc148f449fd257b4f1a5875eb4808dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:0e:ee:5d:b1:0c:ee:30:a6:ec:76:d3:c7:
c0:91:29:e6:22:c1:65:ef:68:72:ba:e8:b4:b3:e7:
a1:d6:a5:02:07:10:a3:68:c3:a7:4c:34:32:b3:67:
c0:5a:1d:bf:63:c7:c4:1a:7a:dc:1b:48:de:2d:82:
cb:51:42:96:5c:6a:db:f8:d5:3b:4e:f1:06:72:06:
ce:45:b2:4c:e0:a9:83:eb:24:7b:18:e1:bd:f4:e9:
1c:cd:c5:41:9e:83:d5:c1:0e:d4:3d:ae:ed:02:73:
c9:21:10:51:d1:cf:b6:bf:26:b6:ff:e8:90:c0:8d:
14:81:59:46:55:24:82:77:a1:56:d3:e9:7c:a4:dd:
b8:11:2b:ff:9a:40:13:e4:ce:8f:db:85:10:84:32:
a4:96:30:e5:57:7d:af:ce:b7:46:3f:80:31:de:6f:
92:4e:0e:e6:9e:0d:26:af:f2:41:52:ba:bd:1a:a9:
b8:cd:11:90:3e:82:93:b7:71:c1:4c:a3:d3:2a:77:
2e:42:b8:19:06:cd:ca:11:ba:03:5f:37:12:30:81:
d8:83:2f:bc:8f:57:b5:69:75:a6:d5:ba:7e:95:64:
da:d6:0e:e3:81:16:f0:e4:96:47:7a:01:51:da:2c:
d8:e0:5d:3b:fa:38:9c:6e:32:fb:cc:93:fa:eb:31:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9C:53:31:6B:C1:48:F4:49:FD:25:7B:4F:1A:58:75:EB:48:08:DC
X509v3 Authority Key Identifier:
keyid:C1:1A:EE:25:2E:37:24:94:EF:EC:50:38:BC:E6:7A:1A:D3:87:86:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRruJS43JJTv7FA4vOZ6GtOHhtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/fe4833-bfbd-47f6-b975-a99050975828/1/wRruJS43JJTv7FA4vOZ6GtOHhtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:46:9c:e2:78:ab:ec:7a:92:d2:44:e3:18:0a:20:14:95:b7:
94:4a:56:1d:d2:9f:d7:f9:cc:6f:71:3a:57:8a:fd:9e:5c:78:
54:6a:9e:b8:3f:82:59:de:30:1e:36:e3:05:6f:7f:16:3e:59:
18:c9:31:ba:38:2e:e0:a3:4f:d9:94:fb:88:e7:9e:27:87:7e:
c2:00:b7:7c:41:35:f7:5d:d7:a7:b7:76:35:cb:3b:81:dc:ed:
88:a7:cb:86:4e:de:4a:db:14:5b:fc:8f:bd:99:ef:a7:f4:db:
9b:32:66:dc:1f:13:3b:68:60:57:4d:4f:71:a3:41:60:9d:b5:
5f:2d:36:de:3b:6d:8d:28:b1:80:91:be:93:a0:5f:0e:ef:3b:
9e:47:98:65:6d:44:fc:c6:21:fa:12:bc:0f:3e:df:b0:20:9b:
61:3d:22:e7:d5:b7:13:f9:3c:d9:8f:76:40:02:35:fe:a8:2b:
ab:40:d6:c2:a8:a9:ea:6b:9f:9d:2f:1b:11:55:0e:df:22:c7:
09:f8:33:0a:75:4f:87:45:9c:96:2a:fd:0b:b6:cb:ee:33:bd:
b3:6d:e7:fc:0e:0f:62:a5:cd:38:0c:9b:7e:65:c3:9b:09:9d:
27:4b:75:db:9a:f1:cf:66:c5:68:15:67:ba:d4:67:14:21:03:
75:91:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:24 2026 by rpki-client